Secure Association for Autonomous Mobile Devices via Barcode Mediation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Establishing secure communication between autonomous mobile devices (AMDs) and computing devices is complex and prone to user error, requiring multiple steps and incurring significant costs for cryptographic infrastructure maintenance.

Innovation Solution

The implementation of computer-implemented techniques allows for easy association between AMDs and computing devices using a user-friendly process involving two-dimensional barcodes or one-time passwords, leveraging Elliptic Curve Diffie-Hellman algorithm to establish a shared secret for secure communication, enabling secure data transfer over unsecured channels and across different network protocols.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional cryptographic infrastructure is used to establish secure communication, then security is maintained, but device complexity and operational difficulty increase

Engineering Contradiction:
ImprovesecurityVSAvoidassociation process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary association process using two-dimensional barcodes or one-time passwords that mediates between the autonomous mobile device and computing device. This intermediary mechanism allows secure communication to be established without requiring the computing device to directly implement complex cryptographic infrastructure, thereby maintaining security while reducing operational complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent uses two-dimensional barcodes as a visual copy of cryptographic information that can be captured by imaging devices. Instead of directly transmitting complex cryptographic keys through multiple channels, the system creates a visual representation (barcode) that encapsulates the necessary association information, simplifying the association process while maintaining security through the underlying cryptographic protocol.

Inventive Principle:
Principle #26Copying

2Reliability

If multiple association steps are implemented to ensure security, then security is improved, but ease of operation deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidassociation ease
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent combines multiple cryptographic verification steps into a single user action: capturing a two-dimensional barcode with the device's camera or entering a one-time password. This merging of multiple security verification steps into one unified operation maintains the security requirements while dramatically improving ease of operation, as users only need to perform a single simple action rather than following multiple complex steps.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If extensive cryptographic infrastructure is deployed, then security is enhanced, but cost of maintenance increases

Engineering Contradiction:
ImprovesecurityVSAvoidinfrastructure maintenance cost
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent enables the autonomous mobile device to perform cryptographic operations independently using its onboard processor and stored cryptographic credentials. The device generates and manages its own cryptographic keys and performs verification operations without requiring external cryptographic infrastructure, thereby eliminating the need for costly centralized key management systems and reducing overall infrastructure maintenance costs.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11418950B1System for establishing a secure data connection with an autonomous mobile device
Publication Date: 2022.08.16 AMAZON TECH INC
  • US11418950B1 patent drawing
  • US11418950B1 patent drawing
  • US11418950B1 patent drawing

AI summary

An autonomous mobile device (AMD) with various sensors may move through a physical space without human intervention. The AMD may communicate with other devices, such as a user's smartphone or network enabled speaker. Security and privacy for end-to-end communication is provided that involves user interaction with the AMD itself. The sequence of data exchanges and the user interaction with the AMD helps assure the association is authorized and provide for a secure communication channel. Attempts to tamper with the association process, including a man in the middle exploit, are readily detectable and result in a failure. Once detected, actions may be taken, such as notifying the user.