Base-Node Pairing for Secure Sensor Data Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for communicating sensor and user control data in air handling units lack robust security measures, particularly in open networks, making them vulnerable to unauthorized access and interference.
Innovation Solution
A system and method for secure communication using a base unit and nodes with pre-stored encryption keys and schemes, enabling an entry network for initial communication and a secure network for sensitive data, with a base unit controlling node pairing and using unique encryption keys for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If open network communication is used for sensor data and user control data, then ease of operation and device compatibility are improved, but security and protection against unauthorized access deteriorate
Solution Approach 1:
The patent segments the network communication into two distinct levels: an entry network using pre-shared keys for initial connection and device discovery, and a secure network using unique pairwise encryption keys for actual data transmission. This segmentation allows devices to easily join the network while ensuring secure communication channels for sensitive data.
Solution Approach 2:
The base unit performs preliminary actions by initiating the pairing procedure and generating unique encryption keys before actual data communication begins. The base unit stores settings including encryption keys and communication schemes in advance, enabling secure communication to be established before sensitive data is transmitted.
2Reliability
If encryption keys and communication schemes are pre-stored in base unit and nodes, then security is improved, but device complexity increases
Solution Approach 1:
The base unit automatically manages the pairing procedure by initiating key exchange, generating unique encryption keys, and configuring communication parameters without requiring manual intervention. The system self-configures the secure network topology, reducing operational complexity despite the underlying cryptographic complexity.
3Reliability
If a pairing procedure with unique encryption keys is implemented, then protection against unauthorized access is improved, but ease of operation deteriorates
Solution Approach 1:
Instead of requiring each node to initiate pairing with the base unit, the patent inverts the approach by having the base unit initiate the pairing procedure with all nodes. This reversal simplifies the operation for end users while maintaining strong security through unique encryption keys.
4Reliability
If multiple secure networks are established with unique encryption keys, then security and isolation are improved, but loss of time for network setup increases
Solution Approach 1:
The base unit continuously maintains communication with all paired nodes through the secure network, enabling real-time sensor data transmission and immediate response to control commands. The persistent connection eliminates the need for repeated authentication and setup procedures.
Data Source
AI summary
The present disclosure relates to a system (100) for communication of sensor data and/or control data within a predetermined space. The system comprises a base unit arranged to communicate wirelessly using an open network, wherein the base unit has stored therein settings for network communication using said open network, said settings comprising a first encryption key and a predetermined scheme for network communication between devices having the first encryption key. At least one node having stored therein said settings for network communication and a unit ID identifying the node. The base unit (101) and the at least one node (102; 103, 104) are arranged to communicate over an entry network. The base unit (101) is arranged to initiate a pairing procedure with at least one of the nodes of the entry network, said pairing procedure involving transmitting of additional settings for communication over a secure network to the at least one of the nodes (102; 103, 104).