Parent-Child Terminal Authorization for Contract-Free Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In future communication systems like 6G, connecting multiple devices purchased at an electrical appliance store, such as VR goggles or AR glasses, to a network is difficult due to the need for separate subscriber contracts and potential bottlenecks from tethering via smartphones.
Innovation Solution
An authorization apparatus that receives a communication system use authorization request from a network node, obtains consent from a parent terminal, and transmits authorization information to allow unregistered devices to connect, using OIDC CIBA and CAPIF frameworks to generate subscriber-equivalent data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional network connection methods are used for multiple devices, then network security and proper authentication are maintained, but it becomes difficult to connect devices without separate subscriber contracts and tethering via smartphones
Solution Approach 1:
The patent divides the connection authorization process into distinct segments: parent terminal registration, child terminal registration, and authorization delegation. The parent terminal's network credentials are segmented and selectively shared with specific child terminals through controlled authorization, enabling easy connection without full contract repetition for each device.
Solution Approach 2:
The patent introduces an intermediary authorization mechanism where the parent terminal acts as a mediator between the network and child terminals. The parent terminal receives and manages authorization information, then selectively grants connection permissions to child terminals, simplifying the connection process while maintaining security through this intermediate layer.
2Reliability
If separate subscriber contracts are required for each device, then network authentication and billing are properly managed, but the process becomes cumbersome for multiple devices
Solution Approach 1:
The patent implements preliminary action by having the parent terminal register and obtain network authorization information in advance. This pre-obtained authorization is then reusable for multiple child terminals, eliminating the need for time-consuming separate contract setups while maintaining authentication reliability through the pre-validated parent terminal credentials.
Solution Approach 2:
The patent creates a universal authorization mechanism where a single parent terminal's network credentials and authorization information can serve multiple child terminals. This multi-functional approach allows one authorized terminal to enable connections for several devices without requiring individual contracts for each, reducing setup time while maintaining security.
3Adaptability or versatility
If tethering via smartphone is used to connect devices, then network access is achieved, but performance bottlenecks occur
Solution Approach 1:
The patent extracts the network authorization and authentication functions from the smartphone tethering process. By separating these critical functions and implementing them directly in the child terminals through the parent terminal's authorization delegation, the system eliminates the smartphone as a mandatory intermediary, removing the performance bottleneck while maintaining connection flexibility.
Solution Approach 2:
The patent implements a copying mechanism where the parent terminal's network authorization information and credentials are securely copied and transferred to child terminals. This allows child terminals to independently authenticate with the network using copied authorization data, eliminating the need for tethering through the parent terminal and thereby removing the performance bottleneck associated with tethering.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An authorization apparatus includes: a reception unit configured to receive a communication system use authorization request from a network node apparatus based on a registration request sent from a second terminal for which a first terminal acts as a parent; a control unit configured to, based on an identifier of the second terminal contained in the communication system use authorization request, obtain from a data storing apparatus an identifier of the first terminal and, using the identifier of the first terminal, obtain from the first terminal information indicating that consent has been obtained for the second terminal to connect to the network; and a transmission unit configured to transmit authorization information that authorizes the second terminal to use a communication system, based on the consent and on condition that the second terminal is authenticated.