Network Service Identifier for Distributed Authentication Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communications face security challenges due to the complexity of verifying the identity and authorization of mobile devices as they move between access points and networks, leading to potential eavesdropping and impersonation risks.
Innovation Solution
A method and system that utilize a Network Service Identifier (NSI) comprising an Authentication Identifier (Auth ID) and AAA realm to verify previous authentication of a host, allowing separation of authentication and authorization functions, enabling outsourcing and efficient verification without repeating the authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication and authorization are performed separately for each service request in wireless communications, then security verification is thorough, but communication complexity and processing time increase significantly
Solution Approach 1:
The patent performs authentication and authorization in advance before service delivery. The authentication server verifies the wireless device's identity and generates an authentication result, which is then used by the service provider to authorize service access. This preliminary verification eliminates the need for repeated authentication during each service request, reducing communication complexity while maintaining security.
Solution Approach 2:
The patent separates authentication functions from service delivery functions. The authentication server handles identity verification and generates authentication results, while service providers use these results to authorize services. This segmentation allows authentication to be performed once independently, then the results are reused across multiple service requests, reducing overall system complexity.
2Measurement precision
If authentication is repeated for each service request, then authorization accuracy is maintained, but processing time and network overhead increase
Solution Approach 1:
The system performs authentication in advance and stores the authentication result. When a service request arrives, the service provider retrieves the pre-stored authentication result instead of repeating the authentication process. This maintains authorization accuracy by using the original authentication verification while significantly reducing processing time and network overhead.
Solution Approach 2:
The authentication result generated by the authentication server is copied and stored for reuse. Service providers obtain copies of this authentication result to verify service requests without needing to repeat the original authentication process. This copying mechanism preserves authorization accuracy while eliminating redundant processing time.
3Adaptability or versatility
If distributed authentication servers are used to handle mobile devices moving between access points, then service continuity is maintained, but system complexity and verification difficulty increase
Solution Approach 1:
The authentication result generated by the authentication server is designed to be universally applicable across multiple service providers and access points. The service provider uses this universal authentication result to authorize services regardless of which access point the mobile device is currently connected to. This multi-functionality maintains service continuity while simplifying verification across the distributed system.
Data Source
AI summary
A communications component comprising a processor configured to implement a method comprising acquiring an authentication identifier (Auth ID), and constructing a network service identifier (NSI) comprising the Auth ID and an authentication, authorization, and accounting (AAA) realm. The disclosure includes a system comprising an authorization server in communication with a host, wherein the authorization server is configured to verify a previous authentication of the host using a NSI. Also disclosed is a method comprising receiving a NSI and a service request, wherein the NSI comprises an Auth ID, determining an authentication server associated with the Auth ID, verifying an authentication of a host using the Auth ID, and authorizing the host to receive a service associated with the service request.