Secure Device Pairing via Dynamic Signal Sequences
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for establishing communication between devices via a server using unique identifiers are insecure due to the risk of unauthorized access, as identifiers can be observed by third parties.
Innovation Solution
A method where devices agree on and transmit a pairing signal to a server, repeating the process until only the predetermined number of devices have sent an identical sequence of pairing signals, establishing a communication channel without relying on a single unique identifier, thus enhancing security by using a variable and independently agreed-upon sequence of signals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single unique identifier is used for establishing communication between devices, then the establishment process is simple and quick, but the security is compromised because the identifier can be observed by third parties
Solution Approach 1:
The single unique identifier is segmented into multiple separate identifiers that are transmitted at different times. Each identifier is valid only for a specific time window, preventing third-party interception and reuse. The communication establishment process is divided into multiple sequential steps where each step uses a different identifier segment.
Solution Approach 2:
The identifier system transitions from static to dynamic. Instead of using a fixed unique identifier, the system employs time-varying identifiers that change with each connection attempt. The identifiers have temporal validity periods and are regenerated periodically, making intercepted identifiers obsolete after their validity period expires.
2Reliability
If multiple sequential pairing signals are used instead of a single identifier, then the security is improved, but the complexity of the connection establishment process increases
Solution Approach 1:
The connection establishment uses periodic action through time-bounded identifier validity. Each identifier is activated for a specific time period and automatically expires. The server coordinates multiple periodic identifier transmissions, where each identifier has a defined activation and expiration timeline, creating a structured sequence that improves security while maintaining manageable complexity.
Solution Approach 2:
The server provides feedback to devices about which identifiers are currently valid and which have expired. This feedback mechanism guides the pairing process, allowing devices to automatically select appropriate identifiers without requiring complex user intervention. The server validates each identifier submission and provides real-time feedback on acceptance or rejection, simplifying the user experience despite the multi-step process.
Data Source
Figure 1
AI summary
A method for establishing a communication channel (17) between a predetermined number of selected devices (3;5). Each of the devices has its own identity. The establishing of the communication channel is done by a pairing via a server (1). Said devices have a pairing operational mode and a communication operational mode. The method comprises the steps of: - setting each of the devices in the pairing operational mode, - agreeing on the choice of a pairing signal (19a;19b), - selecting the agreed upon pairing signal (19a) on each of the devices, which devices transmit their identity and the agreed upon pairing signal (19a) to the server (1), - if the server (1) in a predetermined time interval determines that more than the predetermined number of selected devices have transmitted the agreed upon pairing signal (19a; 19b) than repeating the above second and third steps, wherein a next pairing signal is agreed upon, until the server (1) determines that only the predetermined number of selected devices have transmitted an identical sequence of pairing signals (19a;19b), - establishing the communication channel (17) between the devices by the server (1), and - setting each of the devices in the communication operational mode. The achieved communication channel is very secure. A system comprises a server (1) and a predetermined number of selected devices (3;5), wherein during use a communication channel (17) between the first device (3) and the second device (5) is established via the server (1) according to the method of the invention.