Displayless Networking Authentication Using Optical Identifiers

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Router administrator accounts and passwords are easily hacked due to the use of simple passwords, default passwords, firmware vulnerabilities, and lack of user awareness about network security, making routers susceptible to various hacking techniques.

Innovation Solution

A cyber security authentication method involving a multi-party multi-factor dynamic strong encryption scheme using ephemeral decryption keys and optical identifiers for displayless networking devices, which includes generating ephemeral decryption keys, encoding them into optical identifiers, and performing multi-factor authentication across user devices, application servers, and security servers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If simple passwords or default passwords are used for router administrator accounts, then ease of operation is improved, but security reliability deteriorates

Engineering Contradiction:
Improveease of setting passwordVSAvoidsecurity reliability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary authentication actions before allowing router access. Optical identifiers are pre-generated and stored on user devices, and multi-factor authentication protocols are established in advance, so that when authentication is needed, the secure process is already in place without requiring users to manually create complex passwords

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary authentication system between the user and the router. Instead of directly using simple passwords, the system uses optical identifiers and multi-factor authentication protocols as intermediaries that verify user identity through multiple channels (optical code, device verification, protocol validation), thereby maintaining ease of use while enhancing security

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If multi-party multi-factor dynamic strong encryption authentication is implemented, then security reliability is improved, but device complexity increases

Engineering Contradiction:
Improveauthentication securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication system is segmented into distinct functional modules: optical identifier generation module, multi-factor authentication module, encryption module, and verification module. Each module performs a specific function, making the complex authentication process manageable and maintainable while ensuring security through distributed validation

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The authentication system is designed as a universal framework that can work across different devices and scenarios. The optical identifier system and multi-factor authentication protocol are implemented in a way that can serve multiple functions: user authentication, device verification, and secure session establishment, thereby managing complexity through multi-functionality

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12445280B2Cyber security authentication method for displayless networking device
Publication Date: 2025.10.14 EVERMORE TECH
  • US12445280B2 patent drawing
  • US12445280B2 patent drawing
  • US12445280B2 patent drawing

AI summary

The present invention relates to a cyber security authentication method for a displayless networking device. The method includes randomly generating an ephemeral decryption key in a displayless networking device application server; providing the ephemeral decryption key and a network address of the displayless networking device to a user device via an optical identifier; initiating a multi-party multi-factor dynamic strong encryption authentication scheme in the user device based on the ephemeral decryption key and the network address to obtain an ephemeral credential; and authenticating an identity information based on the ephemeral decryption key and the ephemeral credential at least by the user device, the displayless networking device application server, and a security server.