Ad-Hoc Trust Establishment for Secure Guest Data Exchange

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The hospitality industry faces challenges in securely exchanging sensitive identity data between unfamiliar electronic devices, as guests are reluctant to share information due to security concerns, leading to inefficiencies and a poor customer experience.

Innovation Solution

A computer-implemented method establishes ad-hoc trust between electronic devices using a verification system, where unique matching keys are generated and verified through authorized and unverified communication channels, allowing secure and personalized data exchange without exposing sensitive information to insecure channels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If guests share sensitive identity data through traditional channels, then data exchange can occur, but security risks increase and guest trust decreases

Engineering Contradiction:
Improvedata securityVSAvoidguest willingness to share data
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a verification system as an intermediary between the guide device and invitee device. This system generates and manages verification codes, mediating the trust relationship without requiring guests to directly share sensitive data. The intermediary verifies identities through coded exchanges rather than direct data exposure.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

Instead of exchanging actual sensitive identity data, the system uses verification codes as copies or representations of identity confirmation. These codes serve as proxies that prove identity without revealing the underlying sensitive information, allowing verification while maintaining data security.

Inventive Principle:
Principle #26Copying

2Productivity

If manual data entry and verification processes are used, then data can be collected, but time consumption increases and staff productivity decreases

Engineering Contradiction:
Improvestaff efficiencyVSAvoidcheck-in processing time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The system enables self-service verification where the invitee device autonomously generates and transmits verification codes without requiring staff intervention. The guide device automatically receives and verifies these codes, eliminating manual data entry and reducing staff workload while accelerating the check-in process.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Verification codes are generated in advance by the verification system before the actual data exchange occurs. This preliminary generation of verification credentials allows for rapid verification during the check-in process, eliminating the need for time-consuming manual verification steps.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If physical documents are exposed for verification, then identity can be confirmed, but the number of people seeing sensitive information increases

Engineering Contradiction:
Improveidentity verification accuracyVSAvoidexposure of sensitive information
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system replaces physical document exposure with digital verification codes that serve as copies of identity confirmation. These codes contain sufficient information for verification purposes without exposing the full scope of sensitive identity data, thereby reducing harmful exposure while maintaining verification reliability.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11785020B2Method of establishing ad-hoc device-based trust
Publication Date: 2023.10.10 AEROGUEST APS
  • US11785020B2 patent drawing
  • US11785020B2 patent drawing
  • US11785020B2 patent drawing

AI summary

A method for establishing ad-hoc trust between a guide device and an invitee device to exchange sensitive guest data. The method includes: receiving, at a verification system, a request from the guide device for data pertaining to a specific guest profile at the verification system through an authorised first communication channel; transmitting, by the verification system, a guest booking confirmation to the guide device; receiving, by the verification system, a connection request from the invitee device through an internet browser accessible public access portal resulting in an unverified second communication channel; generating two unique and matching keys in response to the connection request; forming, by the verification system using the two unique and matching keys, a secure communication link spanning from the guide device to the invitee device over the first authorised communication channel; and associating, at the verification system, the secure communication link with the guest profile.