Access Point Provisioning Across WPS and Wi-Fi Easy Connect

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing Wi-Fi network provisioning protocols, such as WPS, have security vulnerabilities and do not support WPA3-Personal provisioning, while Wi-Fi Easy Connect supports WPA3 but not legacy devices, creating a gap in providing secure connections for both new and legacy devices.

Innovation Solution

A method and apparatus that enable an access point to simultaneously support both WPS and Wi-Fi Easy Connect protocols, allowing devices to connect using either WPA2-Personal or WPA3-Personal security protocols by broadcasting support for both and receiving unicast frames to determine the appropriate provisioning method based on device capabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If WPS provisioning protocol is used, then legacy WPA2-Personal devices can connect, but security vulnerabilities exist and WPA3-Personal provisioning is not supported

Engineering Contradiction:
Improveprotocol compatibilityVSAvoidsecurity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent merges WPS and Wi-Fi Easy Connect provisioning protocols into a single access point implementation, allowing the system to handle both legacy WPA2-Personal and modern WPA3-Personal provisioning requests through a unified framework that selects the appropriate protocol based on device capabilities

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The access point is designed with multi-functionality to support multiple provisioning protocols simultaneously, enabling it to serve both legacy devices requiring WPS and modern devices requiring Wi-Fi Easy Connect, thereby achieving universal compatibility across different device generations

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If Wi-Fi Easy Connect provisioning protocol is used, then WPA3-Personal security is achieved, but legacy WPA2-Personal devices cannot connect

Engineering Contradiction:
ImprovesecurityVSAvoidprotocol compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system dynamically selects between WPS and Wi-Fi Easy Connect protocols based on the capabilities of the connecting device, allowing the access point to adapt its provisioning method in real-time rather than being locked into a single protocol

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The access point implements both WPS and Wi-Fi Easy Connect provisioning capabilities, providing more than just one protocol option. This excessive action ensures that whether a device is legacy or modern, it can find compatible provisioning support without requiring the system to choose only one protocol

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If unicast frames are used for device communication, then deterministic provisioning is achieved, but additional frame handling complexity is introduced

Engineering Contradiction:
Improveprovisioning determinismVSAvoidframe handling
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements feedback mechanisms through unicast frames where the access point receives specific device capability information and adjusts its provisioning approach accordingly, creating a deterministic two-way communication process that ensures reliable protocol selection

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS20250358872A1Method for an access point to provision a WI-FI network, devices operating a WPA2-personal security protocol or a WPA3-personal security protocol
Publication Date: 2025.11.20 HUAWEI TECH CO LTD
  • US20250358872A1 patent drawing
  • US20250358872A1 patent drawing
  • US20250358872A1 patent drawing

AI summary

A method for an access point (AP) to advertise that it supports Wi-Fi Easy Connect provisioning by broadcasting to devices, a frame that specifies the provisioning in question. The method includes, by the AP, receiving from a device, a frame indicating the device wishes to connect to the AP, and sending, by the AP, to the device a frame indicating the AP allows the device to connect to the AP. Subsequently, the AP and device follow the Wi-Fi Easy Connect protocol. Also provided is a method for an AP to advertise it supports a Wi-Fi Protect Setup (WPS) provisioning protocol and the Wi-Fi Easy Connect provisioning protocol to connect a device to the AP. The method includes, by the AP, broadcasting an AP frame structured to specify that the AP supports a Wi-Fi Protect Setup (WPS) provisioning protocol and a Wi-Fi Easy Connect provisioning protocol to connect a device to the AP; receiving, from a device that received the first AP frame, one of: a device frame structured to indicate that the device selects the WPS provisioning protocol to connect to the AP; and a device frame structured to indicate that the device selects the Wi-Fi Easy Connect provisioning protocol to connect to the AP. Further provided is an access point configured to perform the methods mentioned herein.