Security Camera Dongle Secure Credential Configuration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Security camera installation and configuration pose challenges due to the need for flexible system connections and configurations, which can introduce security threats, and manual configuration requires sensitive credentials that may be mismanaged or compromised.

Innovation Solution

A dongle-based system that establishes connections between a security camera and a mobile device, allowing configuration credentials to be securely transmitted and managed without revealing them to the installer, enabling secure and flexible camera configuration and installation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If full camera configuration is accessible via network connection, then ease of operation is improved, but security is worsened due to threats such as malicious programs, interception of video, and spoofing

Engineering Contradiction:
Improvecamera configuration accessibilityVSAvoidsecurity threats
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a secure boot process and authentication mechanism as an intermediary between the camera and network connection. The camera undergoes cryptographic verification of its firmware and hardware identity before being allowed to join the network, thereby enabling remote configuration while blocking malicious actors through a trusted verification layer

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If manual configuration is performed by connecting each camera to a standard TV monitor, then security is improved by avoiding credential exposure, but ease of operation is worsened due to inconvenience of connecting each camera

Engineering Contradiction:
Improvecredential securityVSAvoidinstallation convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent employs a mobile device as an intermediary for camera configuration. Instead of directly connecting each camera to a TV monitor or exposing credentials to installers, the mobile device acts as a secure intermediary that receives configuration data, verifies the camera's identity through cryptographic authentication, and applies settings without the installer ever seeing the credentials

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If configuration credentials are provided to installers, then ease of operation is improved by enabling camera configuration, but security is worsened due to risk of credential misplacement, sharing, or unauthorized use

Engineering Contradiction:
Improvecamera configuration capabilityVSAvoidcredential compromise
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the credentials from the installer's environment entirely. Rather than providing credentials to installers for camera configuration, the system uses automated authentication mechanisms where the camera proves its identity cryptographically to the configuration system, eliminating the need for human handlers to possess or manage sensitive credentials

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11004319B2Security camera systems and methods
Publication Date: 2021.05.11 TYCO FIRE & SECURITY GMBH
  • US11004319B2 patent drawing
  • US11004319B2 patent drawing
  • US11004319B2 patent drawing

AI summary

Aspects of the present disclosure include methods, apparatus, and systems for configuring a security camera including establishing a first connection between the dongle and the security camera through a communication port of the dongle, establishing a second connection with a mobile device, transmitting a request to the mobile device via the second connection, receiving, in response to the request, a configuration credential from the mobile device via the second connection, wherein the configuration credential is provided by the mobile device without disclosing the configuration credential to an operator of the mobile device, transmitting, via the first connection, the configuration credential to the security camera, receiving, in response to providing the configuration credential, a video stream from the security camera via the first connection, and transmitting, via the second connection, the video stream to the mobile device.