Communication Device Authentication Method Selection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users face difficulties in setting up secure wireless networks due to the complexity of mixed standards, where devices compatible with new security standards must interact with those using older, less secure methods, leading to increased user burden and security risks.

Innovation Solution

A communication device and method that employs a reception unit for receiving communication data including a random number and authentication method information, using a method determining unit to select an appropriate authentication method based on the data, ensuring compatibility with both public key and non-public key systems, and employing a random number for secure connections regardless of the partner's system compatibility.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a device uses new security standards (public key authentication), then security is improved, but compatibility with older devices deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidcompatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The authentication method is made dynamically selectable based on the communication partner's capabilities. The device automatically determines whether to use public key authentication or traditional authentication methods, allowing the system to adapt its security mechanism according to the partner's standard version without requiring manual configuration.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The communication device is designed to support multiple authentication methods simultaneously (both public key and traditional methods). This multi-functionality allows a single device to interact with both new and old devices, maintaining compatibility while providing enhanced security when possible.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If users manually configure authentication settings, then security can be optimized, but user burden and complexity increase

Engineering Contradiction:
ImprovesecurityVSAvoiduser burden
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The device performs self-configuration of authentication settings by automatically detecting the communication partner's capabilities and selecting the appropriate authentication method. This eliminates the need for users to manually configure security settings, reducing user burden while maintaining optimized security.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system uses feedback from the communication partner's authentication capability information to automatically adjust its own behavior. By receiving and processing capability data from the partner device, the system dynamically selects the most suitable authentication method without user intervention.

Inventive Principle:
Principle #23Feedback

3Ease of operation

If simple authentication methods are used, then ease of connection is improved, but security vulnerability increases

Engineering Contradiction:
Improveease of connectionVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication approach is dynamically adjusted based on the communication partner's capabilities. When connecting to devices with strong authentication support, the system automatically employs enhanced security measures. When dealing with simpler devices, it uses appropriate simpler methods, thus balancing security and ease of connection dynamically.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS8924716B2Communication device and communication method
Publication Date: 2014.12.30 SONY GROUP CORP
  • US8924716B2 patent drawing
  • US8924716B2 patent drawing
  • US8924716B2 patent drawing

AI summary

A communication device for performing communication by employing first and second communication units, includes: a reception unit for receiving a communication packet including a random number generated for every connection with another communication device, a certificate calculated with the random number, and authentication method information indicating whether or not an authentication method at the second communication unit is compatible with the public key system, through the first communication unit; and a method determining unit for determining whether or not an originator of the communication packet accepts public key encryption based on the authentication method information included in the communication packet; wherein in a case of the method determining unit determining that the originator of the communication packet does not accept the public key system, the random number included in the communication packet is replied to the originator as the identification information of the device itself.