Wireless Network Authentication via Authorization Server Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User terminals are vulnerable to security threats when accessing fake public Wi-Fi networks, as existing methods do not adequately verify the authenticity of radio access points, leading to potential data breaches.
Innovation Solution
A wireless network connection method that involves an authorization server performing identity authentication on radio access points to determine trusted nodes, generating a master key for secure encrypted connections between user terminals and radio access points, using public and private key cryptography to verify identities and establish secure communication channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If public Wi-Fi access is provided without password or with simple verification, then ease of operation is improved, but security is deteriorated
Solution Approach 1:
The patent introduces an authorization server as an intermediary between the terminal device and the access point. The authorization server performs identity authentication and generates authorization information, mediating the connection process to ensure security while maintaining ease of access for legitimate users.
Solution Approach 2:
The system performs preliminary identity authentication and generates authorization information before the actual data transmission begins. The terminal device and access point exchange authorization information in advance, ensuring that security verification is completed before sensitive operations occur.
2Device complexity
If traditional authentication methods are used, then device complexity is reduced, but security against fake access points is deteriorated
Solution Approach 1:
The authorization server acts as a trusted intermediary that both the terminal device and access point verify against. By checking authorization information from this intermediary, the system can distinguish legitimate access points from fake ones without requiring complex verification mechanisms at each endpoint.
Solution Approach 2:
The system implements a feedback mechanism where the authorization server provides authorization information to both the terminal device and access point. This feedback loop ensures that both parties have consistent verification data, enabling them to detect and reject fake access points that cannot provide valid authorization information.
3Reliability
If encryption is implemented for all connections, then security is improved, but device complexity and processing overhead increase
Solution Approach 1:
The patent applies encryption selectively rather than universally. Authorization information is encrypted during transmission between the terminal device and access point, while other non-sensitive data communications can use simpler protocols. This localized application of encryption reduces overall system complexity while maintaining security for critical operations.
Data Source
AI summary
Embodiments of this application relate to the field of network security, and disclose a wireless network connection method, apparatus, and system. A method for establishing wireless network connection includes receiving, by an authorization server, an access request sent by a radio access point. The access request carries user information of a user terminal that attempts to access the radio access point. The method then includes determining whether the radio access point is a trusted radio access point, performing a first identity authentication on the user terminal when the radio access point is determined to be the trusted radio access point, generating a master key for the user terminal based on the user information, sending the master key to the user terminal when the first identity authentication succeeds and sending the master key to the radio access point.