WAVE AAA Authentication for Per-Device Bandwidth Accounting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack efficient mechanisms for authenticating, authorizing, and accounting for wireless access vehicular environment consumption by client devices, particularly in the context of vehicle-to-vehicle (V2V) communications, which is crucial for managing bandwidth usage and ensuring secure access to mobile Internet services.
Innovation Solution
Implementing an Authentication, Authorization, and Accounting (AAA) system that utilizes a AAA server to manage wireless bandwidth consumption, involving authentication through digital certificates, authorization via Border Gateway Protocol (BGP) for access control, and accounting through extended Management Information Base (MIB) for packet and byte count statistics, ensuring secure and managed access to WAVE service channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security credentials are validated using digital signatures and certificates in WAVE protocol, then authentication reliability is improved, but device complexity increases due to asymmetric encryption requirements
Solution Approach 1:
The patent introduces a AAA server as an intermediary component that centralizes the authentication, authorization, and accounting functions. The AAA server handles the complex asymmetric encryption and digital signature validation operations, while the OBU and RSU devices can operate with simpler client-side authentication mechanisms. This mediator approach maintains high authentication reliability through proper cryptographic validation while reducing the computational burden and complexity on the endpoint devices.
2Measurement precision
If per-device bandwidth accounting is implemented using extended IPv6 MIB, then measurement precision is improved, but system complexity increases due to additional tracking infrastructure
Solution Approach 1:
The patent leverages the existing AAA server infrastructure to perform multiple functions simultaneously: authentication, authorization, and accounting. The same AAA server that handles security credential validation also performs the bandwidth consumption tracking and accounting using extended IPv6 MIB parameters. This multi-functional approach achieves precise per-device bandwidth measurement without requiring separate dedicated tracking systems, thereby reducing overall system complexity while maintaining high measurement precision.
3Measurement precision
If AAA functions are centralized in a single server, then accounting accuracy is improved, but system reliability deteriorates due to single point of failure
Solution Approach 1:
The patent segments the AAA server functionality into distributed components that can operate independently. The AAA functions are divided across multiple server instances or modular components, allowing the system to maintain centralized accounting accuracy through coordinated operation while improving reliability through redundancy. If one AAA server instance fails, others can continue providing authentication, authorization, and accounting services, eliminating the single point of failure vulnerability.
4Reliability
If digital signatures are validated for every WAVE message, then security reliability is improved, but processing speed decreases due to cryptographic overhead
Solution Approach 1:
The patent implements preliminary authentication where the AAA server validates the digital signatures and security credentials of OBUs in advance, before actual WAVE message exchanges occur. The authentication process is performed during the initial connection establishment or service registration phase. Once authenticated, the OBU can communicate with RSUs using simplified verification mechanisms, reducing the cryptographic overhead during normal message processing while maintaining high security reliability through the preliminary validation step.
Data Source
AI summary
A system and method are disclosed for authenticating and authorizing access to and accounting for consumption of bandwidth for IPv6 connectivity to the Internet over Wireless Access Vehicular Environment (WAVE) service channels by client devices using an Authentication, Authorization and Accounting (AAA) server. The AAA server authenticates and authorizes client devices to access WAVE service channels, and accounts for bandwidth consumption by the client devices using WAVE service channels to access the Internet. The AAA server enables an RSU infrastructure operator to quantify wireless bandwidth consumption by in-vehicle devices using the WAVE Service Channels, on a per-device basis.