Proxy Authentication for Tethered Devices via Encrypted Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The authentication of tethered devices accessing packet data services via wireless communication networks is complex due to multiple protocols involved, leading to time-consuming and computationally inefficient authentication procedures, and non-encrypted authentication protocols risk exposure of credentials to unauthorized parties.
Innovation Solution
A wireless communication device performs proxy authentication on behalf of a tethered device, using encrypted protocols like CHAP to intercept and generate authentication responses, ensuring secure and efficient end-to-end PPP negotiation while avoiding the need for multiple authentication procedures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple authentication protocols are used for tethered devices, then authentication security is improved, but authentication time and computational complexity increase
Solution Approach 1:
The wireless communication device acts as an intermediary by performing proxy authentication. It intercepts authentication requests from the tethered device, performs the authentication using stored credentials and encrypted protocols (CHAP/PAP) with the network, and relays the result to the tethered device. This eliminates the need for the tethered device to directly participate in complex multi-protocol authentication, reducing authentication time while maintaining security through encrypted credential verification.
2Reliability
If multiple authentication protocols are used for tethered devices, then authentication security is improved, but device complexity increases
Solution Approach 1:
The wireless communication device serves as a mediator that handles the complexity of multiple authentication protocols internally. It stores authentication credentials and performs encrypted protocol negotiations (CHAP/PAP) with the network on behalf of the tethered device. The tethered device only needs to establish a simple encrypted connection with the wireless device, dramatically reducing its authentication complexity while the wireless device manages the multi-protocol security requirements.
3Speed
If non-encrypted authentication protocols are used, then authentication speed is improved, but security against eavesdropping deteriorates
Solution Approach 1:
The wireless communication device acts as a secure intermediary that establishes an encrypted connection with the tethered device before authentication. All authentication credentials and challenge-response exchanges occur within this encrypted tunnel. This allows the use of standard authentication protocols while protecting against eavesdropping, as the encrypted channel prevents unauthorized interception of authentication data.
Solution Approach 2:
The system changes the encryption parameter by establishing an encrypted communication channel using protocols like TLS or IPsec between the wireless device and tethered device. This encryption layer is applied to the authentication exchange, transforming the security parameter from unencrypted to encrypted while maintaining authentication speed through optimized cryptographic operations.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods and apparatus are presented herein for allowing a wireless communication device to perform a proxy authentication on behalf of a tethered device and ensure the authentication is encrypted.