Offline Authentication Switching for Intermittent Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Interruptions in connectivity between local and external networks disrupt authentication processes for applications relying on externally hosted identity providers, leaving users unable to interact with applications.
Innovation Solution
A network device monitors the connection status and applies predefined authentication rules to switch between online and offline authentication paradigms, utilizing local identity providers and stored credentials when the connection is interrupted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user authentication requires access to external network for identity providers, then authentication security is improved, but authentication reliability deteriorates when network connection is interrupted
Solution Approach 1:
The system performs preliminary actions by establishing offline authentication capability in advance. Local identity information is cached and prepared before network interruptions occur, enabling the authentication system to switch to offline mode when the external network becomes unavailable, thus maintaining authentication reliability without requiring real-time external network access
Solution Approach 2:
The patent introduces an intermediary mechanism that bridges online and offline authentication modes. The system uses a local cache or intermediate storage layer that holds identity provider information locally, allowing the authentication process to continue using this intermediate layer when the external network connection is interrupted, preventing complete authentication failure
2Ease of operation
If authentication always requires external network connection, then authentication security is improved, but ease of operation deteriorates in intermittently connected environments
Solution Approach 1:
The authentication system dynamically adapts its operation mode based on network availability. When the external network is accessible, the system operates in online mode for enhanced security. When network interruption is detected, the system automatically transitions to offline mode using cached credentials, making the system flexible and easy to operate in varying network conditions without requiring user intervention
Solution Approach 2:
The system changes operational parameters based on network status. It monitors connection status and adjusts authentication behavior accordingly - switching between requiring external network verification and using local cached credentials. This parameter change allows the system to maintain ease of operation across different network conditions
Data Source
AI summary
A network device includes a processor and computer-readable memory encoded with instructions. The network device is for use in a system that includes a local server on a local network and including a local IdP, and one or more identities stored on the local network and accessible by the local IdP. The network device is connected to an external network and to the local server. The instructions cause the network device to monitor a connection between the network device and the external network, determine a status of the connection, and detect an interruption in the connection. The instructions further cause the network device to determine whether the status of the connection complies with an offline authentication rule and communicate an indication of compliance with the offline authentication rule to the local IdP via an application program running on the local network to initiate offline authentication of a user.