Public WiFi Access Point IP Allocation for Core Traffic Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional public WiFi networks experience substantial core traffic due to migrant users, which can lead to network congestion and denial of service attacks, as they often require full authentication even when users do not access the core network.
Innovation Solution
Implementing a method where public hotspots operate as temporary DHCP servers, issuing IP addresses without authentication until users attempt to access the core network, thereby minimizing core network exposure to non-active users and resuming authentication only when necessary to prevent denial of service attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If full authentication is performed for all users before IP address allocation, then network security is improved, but core network traffic increases due to migrant users
Solution Approach 1:
The access point performs preliminary IP address allocation from a local pool before core network authentication. This preliminary action allows migrant users to receive IP addresses and be served locally without triggering core network authentication, thereby reducing core network traffic while maintaining security for users who actually access the core network
Solution Approach 2:
The network authentication process is segmented into two independent stages: local IP address allocation at the access point level, and core network authentication at the server level. This segmentation allows the system to handle migrant users locally without burdening the core network, while still providing security for users who need core network access
2Quantity of substance
If IP addresses are allocated without authentication, then core network traffic is reduced, but the risk of denial of service attacks increases
Solution Approach 1:
The system implements different quality policies for different user groups: migrant users receive local IP addresses from the access point's local pool without core network authentication, while users requiring core network access undergo full authentication. This local quality approach allows the access point to serve transient users locally, reducing their impact on the core network while maintaining security for authenticated users
3Productivity
If authentication is delayed until core network access is attempted, then network efficiency is improved, but security monitoring capability deteriorates
Solution Approach 1:
The access point acts as an intermediary between migrant users and the core network. It performs local IP address allocation and local authentication, serving as a mediator that handles transient users without requiring core network involvement. This intermediary role maintains security monitoring at the access point level while improving overall network efficiency by reducing unnecessary core network traffic
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method and apparatus for reducing core network traffic caused by migrant users of a public wireless network are described including receiving a DHCP discover request from a wireless client device, determining if there are enough IP addresses available to assign one of the plurality of IP addresses to the wireless client device, transmitting a DHCP acknowledgement including the assigned IP address and a lease duration to the wireless client device, determining if a lease timeout has occurred, releasing the assigned IP address if the lease timeout has occurred, receiving a first hypertext transfer protocol (HTTP) request or first hypertext transfer protocol secure (HTTPS) request from the wireless client device, transmitting a media access control (MAC) pre-authentication request from the wireless client to an authentication, authorization and accounting (AAA) server, receiving a MAC pre-authentication response from the AAA server and providing access to the Internet via the wireless client device.