Tokenized Authentication Across Wireless Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The frequent authentication processes required when a wireless communication device moves between networks cause delays and disruptions in service, as each network must independently authenticate the device, consuming resources and impacting user experience.
Innovation Solution
Implementing a method where a token generated during authentication is stored and correlated with the authentication server's identity in a clearinghouse server, allowing subsequent networks to verify the authentication status without requiring re-authentication, thereby reducing delays and resource consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If repeated authentication procedures are performed when a device moves between networks, then access control security is maintained, but service continuity and user experience are degraded due to delays and disruptions
Solution Approach 1:
The system performs preliminary authentication in the home network before the device moves to a visited network. The authentication result is stored as a token and shared with the visited network in advance, so that when the device moves, the visited network can quickly verify the pre-authenticated status without requiring the device to undergo full authentication again, thus maintaining security while ensuring service continuity
Solution Approach 2:
A token sharing mechanism acts as an intermediary between the home network's authentication server and the visited network's authentication server. The token serves as a mediator that carries authentication information across network boundaries, allowing the visited network to verify the device's authenticated status without directly contacting the home network's authentication server, thereby reducing authentication delays while maintaining security
2Reliability
If independent authentication is performed by each network, then security is ensured, but system resources are consumed that could be allocated elsewhere
Solution Approach 1:
The system merges the authentication processes of the home network and visited network by sharing authentication results through token exchange. Instead of each network independently performing full authentication, the visited network leverages the home network's authentication result via the token mechanism, reducing redundant authentication operations and conserving system resources while maintaining security
Solution Approach 2:
The authentication result from the home network is copied into a token format that can be shared with the visited network. This token copy contains the essential authentication information needed by the visited network to verify the device's status, eliminating the need for the visited network to perform complete authentication and thereby reducing system resource consumption while preserving security
3Measurement precision
If full authentication is performed at each network transition, then authentication accuracy is maintained, but access speed and user mobility are reduced
Solution Approach 1:
The system performs preliminary authentication in the home network before the device moves to a visited network. The authentication result is stored as a token and shared with the visited network in advance, so that when the device moves, the visited network can quickly verify the pre-authenticated status without requiring the device to undergo full authentication again, thus maintaining security while ensuring service continuity
Solution Approach 2:
The authentication mechanism dynamically adapts based on the device's movement between networks. When a device moves to a visited network, the system dynamically switches from requiring full authentication to accepting token-based verification, optimizing the balance between authentication accuracy and access speed according to the specific network transition scenario
Data Source
AI summary
Methods for marking and verifying an authentication status of a wireless communication device are disclosed. When a wireless communication device is authenticated in a first wireless communication network, copies of a token, are stored in memory accessible by the wireless communication device and in memory accessible by a clearinghouse server. The clearinghouse server also stores a correlation between the token and the identity of the server that authenticated the wireless communication device. When the wireless communication device moves from the first network to a second network, the WCD transmits the token to a server in the second network, which can then query the clearinghouse server to determine the identity of the server that authenticated the WCD in the first network, confirm the authentication status of the wireless communication device, and allow the WCD to access a resource in or via the second network.