Wireless Access Control via Limited Network Entry

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless devices repeatedly attempting to access a network with invalid credentials consume system resources and degrade network performance, as they are not granted access until authentication is successful, often due to suspended accounts or corrupted data.

Innovation Solution

Granting a wireless device limited access to an IP data network after a predetermined number of denied access requests, allowing the device to authenticate and potentially remedy credential issues, thereby reducing resource consumption and enabling access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If wireless devices repeatedly transmit access requests when denied authorization, then the device can eventually gain access if credentials are valid, but system resources including radio bandwidth and processor load are consumed

Engineering Contradiction:
Improveaccess authorizationVSAvoidsystem resource consumption
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The system performs preliminary actions by counting the number of failed authentication attempts before actually denying access. Instead of immediately blocking after a single failure, the system tracks cumulative attempts and applies different access control policies based on the count, thereby preventing resource waste on obviously invalid credentials while maintaining access for legitimate users who may experience temporary authentication issues.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms where authentication failures are counted and fed back into the access control decision-making process. The network node uses the failure count to dynamically adjust access policies, providing feedback that prevents endless retry loops for invalid credentials while allowing legitimate users to succeed after initial failures.

Inventive Principle:
Principle #23Feedback

2Loss of energy

If the network denies access immediately after authentication failure, then system resources are protected from consumption, but legitimate users with temporary credential issues cannot access the network

Engineering Contradiction:
Improveradio bandwidth consumptionVSAvoiduser access
Core Design Contradiction:
Loss of energyVSEase of operation

Solution Approach 1:

The access control policy is made dynamic rather than static. The system adjusts access decisions based on the number of failed attempts, transitioning from immediate denial to conditional access based on the failure count. This dynamic approach allows the system to adapt its behavior based on the specific circumstances of each authentication failure.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the parameter of access policy based on the failure count parameter. Different access policies are applied depending on how many times authentication has failed, allowing the system to differentiate between temporary issues (lower failure counts) and persistent problems (higher failure counts).

Inventive Principle:
Principle #35Parameter changes

3Ease of operation

If wireless devices are granted unlimited access after authentication, then user experience is improved, but devices with invalid credentials can consume network resources indefinitely

Engineering Contradiction:
Improveuser accessVSAvoidcredential validation
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary validation of credentials before granting access. By counting failed authentication attempts and using this information to make access decisions, the system ensures that only devices with valid credentials eventually gain access, preventing resource consumption by devices with permanently invalid credentials.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8750208B1Processing an access request in a wireless communication system
Publication Date: 2014.06.10 SPRINT SPECTRUM LP
  • US8750208B1 patent drawing
  • US8750208B1 patent drawing
  • US8750208B1 patent drawing

AI summary

A system and method for processing an access request by a wireless device to access an IP data network is provided. An access request from a wireless device is received and denied a predetermined number of times, and the wireless device is granted a limited access to the IP data network. When the access request from wireless device is authenticated, the wireless device is granted an unlimited access to the IP data network.