Network Session Control for Verification Bypass Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current verification processes in free wireless networks allow users to access social networking websites without completing the required verification, enabling them to bypass the intended verification process by using limited network functions.
Innovation Solution
Implementing a method in networking equipment to control session time and data traffic, where terminal devices are only granted full access after completing verification by monitoring and limiting session time and data traffic, ensuring that users access social networking websites only after successful verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the networking equipment allows terminal devices to access social networking websites during verification, then users can complete verification smoothly, but users can bypass verification by accessing social networking websites without completing the required verification process
Solution Approach 1:
The patent applies dynamics by making the verification status dynamic - the networking equipment continuously monitors whether a terminal device has completed verification and dynamically adjusts its behavior accordingly. During verification, the system allows access to social networking websites but blocks other external networks. After verification is completed, the system switches to allowing all network services. This dynamic state management prevents users from bypassing verification by temporarily allowing verification-related traffic while blocking other traffic.
Solution Approach 2:
The networking equipment acts as an intermediary between the terminal device and the network. It intercepts and monitors all network requests, determining whether they are related to verification or external network access. By positioning itself as the intermediary, the system can selectively allow verification traffic while blocking attempts to access external networks without completing verification, thus preventing the verification flaw.
2Reliability
If the networking equipment monitors session time and data traffic continuously, then the verification flaw is prevented effectively, but the network services are slowed down due to monitoring overhead
Solution Approach 1:
The networking equipment performs self-service by automatically monitoring session time and data traffic without requiring additional manual intervention. The system autonomously determines when verification is complete based on monitored parameters and automatically switches the terminal device from verification mode to full access mode. This self-service approach ensures reliable verification flaw prevention while minimizing operational overhead.
Solution Approach 2:
The patent applies parameter changes by monitoring session time and data traffic parameters to determine verification completion. When these parameters indicate that the terminal device has completed verification (e.g., sufficient data transfer for verification purposes), the system changes the access parameters from restricted to unrestricted. This parameter-based approach enables effective verification flaw prevention while maintaining efficient network operation through automated parameter threshold checking.
3Reliability
If the networking equipment restricts access to only social networking websites during verification, then verification is enforced, but other network services are unavailable to users during verification
Solution Approach 1:
The system dynamically adjusts network service accessibility based on verification status. During verification, only social networking websites are accessible. Once verification is complete, the system dynamically transitions to allowing all network services. This dynamic adaptation ensures verification enforcement during the verification process while maintaining full service accessibility after verification, resolving the contradiction between verification enforcement and service versatility.
Solution Approach 2:
The patent applies segmentation by dividing network access into distinct segments: verification mode (accessing only social networking websites) and post-verification mode (accessing all network services). The networking equipment segments traffic based on verification status, allowing different service sets for different phases. This segmentation enables verification enforcement while preserving the ability to provide full service versatility after verification completion.
Data Source
AI summary
A method for preventing a verification flaw by controlling a session time and a session data traffic is applied to a networking equipment that stores a list of verified terminal devices, a temporary permit list, and a walled garden. When a terminal device is connected to the networking equipment, the networking equipment records the media information of the terminal device on the temporary permit list and starts recording a session time and session data traffic of the terminal device. Once the session time or session data traffic exceeds its upper limit (e.g., 10 minutes or 20 MB), the networking equipment cuts off connection with the terminal device, only when a frame received from the terminal device has a matching target address in the walled garden, the networking equipment will send the frame out therethrough. Thus, the terminal device, must be verified before it can access full network services.