Registration Secret Authentication for Mobile Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network security systems face challenges in efficiently regulating access for mobile devices with changing IP addresses while maintaining tight security, often requiring costly and security-risking mobile device management tools or manual administrator intervention.
Innovation Solution
A system that uses registration and communication secrets to authenticate mobile devices, allowing access from untrusted networks by generating a registration secret, validating a token, and providing a communication secret for secure access, without relying on mobile device management tools.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If mobile device management tools are used to control network access, then network security is improved, but system complexity and cost increase
Solution Approach 1:
The patent extracts the authentication functionality from complex mobile device management tools and implements a streamlined solution using registration secrets and tokens. The system separates the essential authentication mechanism (secret generation, token validation) from the overhead of full MDM toolsets, achieving security without the associated complexity and cost.
Solution Approach 2:
The patent uses temporary registration secrets and tokens that are generated, used, and discarded. These short-lived authentication credentials provide security without requiring persistent complex management infrastructure. The registration secret is used once to establish access, then replaced by communication secrets, eliminating the need for ongoing MDM tool dependency.
2Reliability
If manual administrator intervention is used to regulate network access, then network security is improved, but productivity and efficiency deteriorate
Solution Approach 1:
The system performs preliminary authentication by validating registration secrets and tokens before granting network access. This automated preliminary verification eliminates the need for manual administrator intervention for each access request, maintaining security while dramatically improving access efficiency and productivity.
Solution Approach 2:
The patent implements self-service authentication where devices automatically present tokens and registration secrets for validation. The system autonomously regulates access based on validated credentials without requiring manual administrator approval, thereby maintaining security controls while eliminating bottlenecks and improving overall system productivity.
3Reliability
If IP address-based access control is used, then network security is improved, but adaptability to mobile devices with changing IP addresses deteriorates
Solution Approach 1:
The patent introduces registration secrets and tokens as intermediary authentication mechanisms that decouple security validation from IP address identification. Instead of relying on static IP addresses, the system uses these intermediaries to authenticate mobile devices regardless of their changing network locations, maintaining security while providing full adaptability to mobile connectivity patterns.
Data Source
AI summary
A request associated with access to a restricted computer resource by a computer application of a device is received via a first communication medium. It is determined that the request is provided by the device with an IP address not included in a group of authorized IP addresses. A registration secret is generated. A representation associated with the registration secret is provided via a second communication medium. A token signed using the registration secret is received. In response to successfully validating the token, a communication secret is generated and associated with an identifier associated with the device. The communication secret is provided for use by the computer application of the device to access the restricted computer resource.