Secure Mobile Device Pairing via Cloud Access Codes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional pairing technologies for mobile devices and instruments require administrative oversight, physical proximity, and direct communication, making them cumbersome and insecure for remote access and management.

Innovation Solution

A role-based access control method using cloud computing allows end users to securely pair their mobile devices with remote instruments without administrative intervention, utilizing unique access codes that can be generated and validated through a server or cloud, enabling remote monitoring and control without physical proximity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If administrative-based pairing systems are used, then security control is improved, but device complexity and ease of operation deteriorate due to requiring central administrators and manual matching

Engineering Contradiction:
Improvesecurity controlVSAvoidpairing system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system enables end users to autonomously pair their mobile devices with instruments using automatically generated access codes, eliminating the need for administrative intervention. The instrument generates a unique access code that the user enters on their mobile device, and the system automatically completes the pairing by adding the device to the security group.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent introduces an access code as an intermediary element that mediates the pairing process between the user and the instrument. The access code serves as a secure token that enables authentication and authorization without requiring direct administrative oversight or complex protocol negotiations.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If physical proximity pairing is required, then security is improved, but ease of operation and adaptability worsen due to inability to pair remotely

Engineering Contradiction:
ImprovesecurityVSAvoidpairing convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical requirement of physical proximity with an information-based system using access codes transmitted through communication networks. The unique access code generated by the instrument can be communicated to the user through various channels (display, communication interfaces), enabling pairing without physical co-location.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system transitions from spatial proximity-based security to code-based security, adding a new dimension of authentication. Instead of relying on physical distance or location, the system uses cryptographic access codes that can be transmitted and validated remotely, enabling pairing across any geographical distance.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

3Reliability

If direct communication between device and instrument is required, then security is improved, but adaptability and ease of operation deteriorate due to inability to use cloud-based pairing

Engineering Contradiction:
ImprovesecurityVSAvoidpairing flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a cloud-based pairing system as an intermediary that facilitates secure pairing without requiring direct device-instrument communication. The system receives pairing requests, validates access codes, and manages security group memberships through cloud-based services, enabling flexible pairing scenarios including remote and automated pairing.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The pairing system is designed to work through multiple communication paths and architectures, including direct communication, cloud-based mediation, and hybrid approaches. The access code mechanism is universally applicable across different deployment scenarios, providing flexibility in choosing the appropriate communication architecture.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If pairing requires administrative intervention, then security control is improved, but productivity and ease of operation worsen due to manual overhead

Engineering Contradiction:
Improvesecurity controlVSAvoidpairing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system enables automated pairing where end users independently complete the pairing process without administrative assistance. The instrument automatically generates access codes, the system validates them, and security group memberships are automatically managed, eliminating manual administrative overhead while maintaining security controls.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system performs preliminary actions by pre-generating and distributing access codes before the actual pairing is needed. Instruments can generate access codes in advance, and users can obtain them through various channels, allowing the pairing process to proceed quickly when needed without requiring administrative setup.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS9532225B2Secure pairing of end user devices with instruments
Publication Date: 2016.12.27 GE DIGITAL HLDG LLC
  • US9532225B2 patent drawing
  • US9532225B2 patent drawing
  • US9532225B2 patent drawing

AI summary

A role-based access control method and/or system permits end users to securely pair their mobile devices via a pairing apparatus with one or more instruments to, for example, remotely monitor operations of the instruments. In an embodiment, the process includes a pairing apparatus receiving a pairing request from an instrument including a unique access code, and receiving a pairing request from an end user mobile device that includes an end user mobile device identifier and an access code. If the unique access code matches the end user's access code, then the end user mobile device identifier is added to a security group and a successful pairing message is transmitted to at least one of the instrument and the end user mobile device.