Wi-Fi Network Device Multiple Pre-Shared Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Wi-Fi network protocols, such as WPA2 and WPA3, face challenges in supporting multiple pre-shared keys (PSKs) on a single network, leading to security vulnerabilities and compatibility issues.
Innovation Solution
A method and system that utilize a database to associate Media Access Control (MAC) addresses with multiple pre-shared keys, allowing client devices to connect to a Wi-Fi network using a unique PSK. The system determines whether a record exists for the client device's MAC address and performs either authentication using an existing PSK or generates a new record for authentication, depending on the protocol used by the client device (WPA2 or WPA3).
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single pre-shared key is used for all client devices in a Wi-Fi network, then network configuration is simple and easy to operate, but network security is compromised and unauthorized access cannot be prevented
Solution Approach 1:
The patent segments the single pre-shared key into multiple unique pre-shared keys, each assigned to specific client devices based on their MAC addresses. This segmentation allows individual device authentication while maintaining a structured authentication framework, resolving the contradiction between security enhancement and system complexity.
Solution Approach 2:
The patent implements local quality by assigning different pre-shared keys to different client devices based on their specific characteristics (MAC addresses). Each device receives a tailored authentication credential rather than a universal key, enhancing security while maintaining manageable complexity through automated key assignment.
2Reliability
If multiple pre-shared keys are supported in a Wi-Fi network, then network security is enhanced and unauthorized access is reduced, but compatibility issues arise with existing protocols like WPA2 and WPA3
Solution Approach 1:
The patent implements universality by designing an authentication mechanism that functions across multiple Wi-Fi protocols (WPA2, WPA3, and future protocols). The MAC address-based pre-shared key assignment system is protocol-agnostic, allowing the same core mechanism to serve multiple authentication standards and ensuring forward compatibility with evolving protocols.
Solution Approach 2:
The patent applies dynamics by creating an adaptable authentication system that can dynamically adjust to different protocol requirements. The system can flexibly support both traditional single-PSK modes and the new multi-PSK mode, allowing seamless transition and compatibility across different protocol versions and client device capabilities.
3Reliability
If a database associating MAC addresses with pre-shared keys is implemented, then unique authentication is enabled for each client device, but system complexity and computational overhead increase
Solution Approach 1:
The patent implements self-service by enabling the authentication system to automatically manage pre-shared key assignment and database operations without requiring manual intervention. The system autonomously generates, stores, and retrieves pre-shared keys based on MAC addresses, reducing operational complexity while maintaining high authentication accuracy.
Solution Approach 2:
The patent applies preliminary action by pre-generating and storing pre-shared keys in the database before client devices attempt to connect. This advance preparation eliminates the need for real-time key generation during authentication, reducing computational overhead and simplifying the authentication process while ensuring accurate device identification.
4Ease of operation
If traditional single pre-shared key authentication is used, then client devices can connect seamlessly without complex registration, but all devices share the same security credentials creating security vulnerabilities
Solution Approach 1:
The patent extracts the security vulnerability by separating the pre-shared key from being a universal credential and instead binding it to specific MAC addresses. This extraction removes the security risk of shared credentials while maintaining the simplicity of automatic connection for authorized devices, as each device's unique key is transparently assigned based on its MAC address.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A network device, a method for the network device, and a network system comprising one or more such network devices is provided. The method for the network device involves receiving a connection request from a client device, the connection request including a MAC address and being generated using a PSK. A database is accessed to determine if a record associating the MAC address with a PSK exists. If such a record does exist, then authentication is attempted using the PSK identified using the record. If such a record does not exist, then a process for generating a new record for the database is performed. A non-transitory computer-readable storage medium comprising instructions for implementing the method is also provided.