Wi-Fi Authentication Server Using MAC-PSK Database Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Wi-Fi network protocols, such as WPA2 and WPA3, face challenges in supporting multiple pre-shared keys (PSKs) within a single network, leading to security vulnerabilities and compatibility issues.
Innovation Solution
A computer-implemented method and system that utilize a database to store records associating Media Access Control (MAC) addresses with respective PSKs, allowing for the authentication of client devices using either existing or newly generated PSKs, ensuring compatibility with WPA2 and WPA3 protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single pre-shared key is used for all client devices in a Wi-Fi network, then network configuration is simple and compatible with existing protocols, but network security is compromised and unauthorized access cannot be prevented
Solution Approach 1:
The patent segments the single pre-shared key into multiple individual pre-shared keys, each assigned to specific client devices. The authentication server maintains a database mapping MAC addresses to corresponding pre-shared keys, allowing selective authentication for different devices while maintaining a unified network structure.
Solution Approach 2:
The patent implements preliminary action by pre-configuring the authentication server with a database of MAC addresses and their corresponding pre-shared keys before client devices attempt to connect. This allows the server to authenticate devices based on pre-established credentials rather than requiring real-time key generation or manual configuration during connection attempts.
2Reliability
If multiple pre-shared keys are implemented in a Wi-Fi network, then security is improved and unauthorized access is prevented, but compatibility issues arise with existing WPA2 and WPA3 protocols
Solution Approach 1:
The patent introduces an authentication server as an intermediary between client devices and the Wi-Fi network. This server acts as a mediator that handles the complex authentication logic for multiple pre-shared keys, allowing existing WPA2 and WPA3 protocols to remain unchanged while enabling enhanced security through centralized credential verification.
3Reliability
If multiple pre-shared keys are supported, then each client device can be uniquely authenticated, but the network management complexity increases
Solution Approach 1:
The patent implements self-service by enabling the authentication server to automatically manage the assignment and verification of pre-shared keys based on MAC addresses. The system autonomously handles authentication decisions without requiring manual intervention for each connection attempt, reducing the operational burden despite managing multiple credentials.
Data Source
AI summary
A network device, a method for the network device, and a network system comprising one or more such network devices is provided. The method for the network device involves receiving a connection request from a client device, the connection request including a MAC address and being generated using a PSK. A database is accessed to determine if a record associating the MAC address with a PSK exists. If such a record does exist, then authentication is attempted using the PSK identified using the record. If such a record does not exist, then a process for generating a new record for the database is performed. A non-transitory computer-readable storage medium comprising instructions for implementing the method is also provided.