Premises Network Device Authorization via White and Black Lists
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current content delivery networks lack mechanisms to control access to services within user premises networks, allowing unauthorized devices to access authorized content, particularly in environments with a mix of leased and retail devices.
Innovation Solution
The implementation of an apparatus and method for device authorization in premises networks, utilizing a list of authorized devices (white list) and unauthorized devices (black list) to manage access, with a processor and storage to verify and update device permissions, ensuring only authorized devices access content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If open consumer electronics standards (UPnP, DLNA, MoCA) are used to enable seamless device connection and data sharing, then ease of operation and adaptability improve, but security deteriorates allowing unauthorized devices to access services
Solution Approach 1:
The system performs preliminary authorization by maintaining white lists and black lists of device identifiers before allowing network access. When a device attempts to connect, the system checks its identifier against these pre-established lists to determine whether to grant or deny access, preventing unauthorized devices from joining the network in the first place
Solution Approach 2:
The system introduces an intermediary authorization mechanism that sits between the open networking standards and the actual network resources. This intermediary layer intercepts connection requests, verifies device identifiers against authorized/unauthorized lists, and mediates whether the device can proceed to access network services, thus protecting against unauthorized access while maintaining compatibility with open standards
2Object-affected harmful factors
If device authorization mechanisms are implemented to control network access, then security improves, but device complexity increases
Solution Approach 1:
The system uses copying by maintaining simplified list structures (white lists and black lists) that contain only device identifiers rather than implementing complex cryptographic verification. This copying approach replicates the essential authorization information in an accessible format that can be quickly checked without requiring sophisticated processing, thus reducing overall system complexity while maintaining security
Solution Approach 2:
The system changes parameters by focusing authorization decisions on simple device identifier matching rather than complex multi-factor authentication. By transforming the authorization problem into a parameter-based lookup operation against pre-maintained lists, the system achieves effective access control with minimal processing complexity and straightforward implementation
3Reliability
If comprehensive device monitoring is performed to detect unauthorized devices, then reliability of content protection improves, but loss of time for processing access requests increases
Solution Approach 1:
The system performs preliminary action by maintaining pre-updated white lists and black lists of device identifiers before authorization decisions are needed. This allows the system to quickly check incoming device identifiers against these pre-prepared lists without performing complex analysis in real-time, thus reducing processing time while maintaining reliable detection of unauthorized devices
Solution Approach 2:
The system applies skipping by implementing a streamlined authorization process that rapidly checks device identifiers against the authorized/unauthorized lists and immediately makes access decisions. This rushing-through approach skips complex verification steps for devices on the lists, enabling fast processing of access requests while still reliably identifying and blocking unauthorized devices
Data Source
AI summary
Apparatus and methods for enabling protected premises networking capabilities. In one embodiment, a white list of devices authorized to access a premises network and a black list of device not authorized to access a premises network are utilized. The black and white lists may be stored at a database in communication with an authorization manager or may be stored at the manager itself. When a client device is connected to a premise, the manager determines, based on the premises and/or device identity, whether the device is entitled to access. The authorization manager makes this determination based on whether the device is on the white or black list. If the device is on neither list, the manager may add the device to the white list upon appropriate verification. The manager may also facilitate removal of a device from the white list to the black list upon request or automatically.