Provisioning Agent WLAN Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network authentication methods fail to securely manage device access to private wireless local area networks (WLANs), allowing malicious users to potentially exploit stolen or hacked passwords by intercepting and using them to connect to unauthorized devices.
Innovation Solution
A provisioning agent detects device requests, generates unique passwords for each device, and verifies these with an authentication server, ensuring only the correct device identifier and password can access the network, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single shared password is used for network authentication, then ease of operation is improved, but network security deteriorates as malicious users can exploit stolen passwords
Solution Approach 1:
The patent segments the network authentication system into multiple components: a provisioning agent on the user's device, an authentication server, and the network router. This segmentation allows the password to be distributed and verified across multiple points, enhancing security while maintaining ease of use through automated processes.
Solution Approach 2:
The patent introduces an authentication server as an intermediary between the provisioning agent and the network router. This intermediary verifies device identifiers and manages password distribution, preventing malicious users from exploiting stolen passwords while keeping the authentication process transparent to end users.
2Reliability
If device-specific passwords are generated and verified, then network security is improved, but device complexity increases
Solution Approach 1:
The provisioning agent on the user's device automatically performs device identification, password generation, and verification without requiring manual user input. The system serves itself by automating the complex authentication processes, thereby enhancing security while maintaining ease of operation.
Solution Approach 2:
The authentication server provides multiple functions within a single system: it verifies device identifiers, generates device-specific passwords, manages password distribution, and prevents unauthorized access. This multi-functionality reduces overall system complexity by consolidating security operations in one centralized component.
3Reliability
If multiple devices are connected to the network with unique passwords, then network security is improved, but loss of time increases due to authentication processes
Solution Approach 1:
The system performs preliminary authentication actions by verifying device identifiers and generating passwords before actual network access is requested. This preliminary setup creates a secure foundation that enables rapid authentication for subsequent connections, reducing time loss while maintaining security.
Solution Approach 2:
Once a device is authenticated and connected to the network, the system maintains continuous secure access without requiring repeated full authentication cycles. The device-specific passwords enable ongoing useful actions (network communication) while the initial authentication provides continuous security verification.
Data Source
AI summary
In one embodiment, a method includes receiving, from a device via a wireless signal, a request to access a WLAN of a router, the request including a device identifier. The provisioning agent may be within wireless ranges of the device and of the router. The provisioning agent may request, from an authentication server, a password for the device. The password may be uniquely generated by the authentication server for the device. The provisioning agent may receive the password from the authentication server. The provisioning agent may send, to the router, the password and the device identifier. The provisioning agent may receive, from the router, an indication that the router has verified the password with the authentication server. The router may store the device identifier in association with the password. The provisioning agent may send, to the device, the password. The password may authenticate the device to the router.