Network Authentication Using Pre-Shared Verification Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network verification methods, such as using certificates, passwords, or IP addresses, impose a high computing burden on servers and are susceptible to parsing risks due to varying structured data, complicating security and potential attacks.
Innovation Solution
A network apparatus and method that utilizes pre-shared keys, environmental factors, and commonly agreed algorithms to manipulate verification data for authentication, reducing server load and preventing unauthorized connections by verifying data before establishing a network connection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional certificate verification and IP address-based ACL methods are used, then network security is improved, but computing burden on the server end increases and parsing risks occur
Solution Approach 1:
The patent extracts the verification data from complex certificates and structured data formats, isolating only the essential verification elements (verification data and algorithm) that are commonly agreed upon between client and server. This extraction simplifies the verification process to basic data comparison without parsing complex certificate structures, thereby reducing computing burden while maintaining security
Solution Approach 2:
The patent uses simple, lightweight verification data (such as timestamps, sequence numbers, or random values) that can be easily generated and verified, replacing heavy cryptographic certificates. These verification data are designed to be simple enough to process efficiently but sufficient to prevent unauthorized access, achieving security with minimal computational resources
2Reliability
If certificate verification is performed, then authentication security is improved, but parsing risks occur due to varying structured data formats
Solution Approach 1:
The patent extracts only the essential verification information from potentially complex data structures, isolating the verification data and algorithm from the surrounding structured data. This extraction eliminates the need to parse varying certificate formats while maintaining authentication security, as the verification process operates on simplified, standardized data
Solution Approach 2:
The patent changes the representation of verification data from complex structured formats to simple parameter forms (such as numeric values, timestamps, or fixed-length strings). This parameter transformation maintains the security function while eliminating parsing complexity and associated risks from varying data formats
3Reliability
If rigorous verification methods are used, then network security is improved, but connection establishment time increases
Solution Approach 1:
The patent performs verification data preparation and algorithm selection in advance, before the actual connection establishment. By pre-agreeing on verification data and algorithms during connection setup, the subsequent verification process becomes a simple comparison operation rather than a complex computation, significantly reducing connection establishment time while maintaining security
Solution Approach 2:
The patent applies only the necessary verification actions required for security, avoiding excessive verification steps. By using simple verification data and straightforward comparison algorithms, the system achieves sufficient security without the time cost of complex multi-step verification processes
Data Source
AI summary
A network apparatus and a network authentication method thereof are provided. The network apparatus serving as a server end includes a network interface device and a processor. The network interface device is configured to connect to a network. The processor is coupled to the network interface device, and configured to receive a network packet send by a client end through the network, acquire a verification data commonly agreed with the client end, and establish a network connection with the client end in response to a verification data recorded in the network packet matching the acquired verification data.