Authentication Procedure Selection in WLAN and Cellular Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communication systems, there is a lack of clarity on how to determine whether to perform the first or second authentication procedure when both are supported by a network consisting of a WLAN and E-UTRAN, especially when a UE connects to both networks.
Innovation Solution
A communication device and method that initiates an EAP AKA procedure by the WLAN if not configured with cellular PDUs, and an eNB-assisted authentication procedure if configured with cellular PDUs, ensuring appropriate authentication based on configuration status.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the network supports both first authentication procedure (EAP AKA) and second authentication procedure (eNB assisted authentication), then the adaptability of the authentication system is improved, but the complexity of determining which procedure to perform increases
Solution Approach 1:
The network pre-configures the UE with information about supported authentication procedures and their applicability conditions before the authentication process begins. This allows the UE to autonomously determine the appropriate authentication procedure based on pre-received configuration data, eliminating the need for complex real-time decision-making logic.
Solution Approach 2:
The patent introduces a configuration message as an intermediary carrier that conveys authentication procedure selection criteria from the network to the UE. This configuration message acts as a mediator that encapsulates the complex authentication determination logic, allowing both EAP AKA and eNB assisted authentication procedures to be supported without increasing device complexity.
2Reliability
If the UE performs EAP AKA procedure with WLAN, then the authentication security is improved, but the authentication time increases
Solution Approach 1:
The patent enables dynamic selection between EAP AKA and eNB assisted authentication procedures based on real-time conditions such as device configuration, network state, and service requirements. This dynamic approach allows the system to choose the faster eNB assisted authentication when applicable, reducing authentication time while maintaining security through the alternative EAP AKA procedure when higher security is required.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A network comprising a cellular network and a WLAN for handling an authentication procedure with a communication device comprises a storage unit for storing instructions and a processing means coupled to the storage unit. The processing means is configured to execute the instructions stored in the storage unit. The instructions comprise performing a first connection to the communication device by the cellular network; performing a second connection to the communication device by the WLAN; initiating an EAP AKA procedure to the communication device by the WLAN, if the communication device is not configured with a communication of cellular PDUs via the WLAN; and initiating an eNB assisted authentication procedure to the communication device by the cellular network, if the communication device is configured with the communication of the cellular PDUs via the WLAN.