Dynamic Virtual Access Point Creation for Secure Wireless Onboarding

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Creating dedicated wireless access points for onboarding depletes resources, poses security risks, and leads to inefficient airtime utilization and interference, reducing overall network performance.

Innovation Solution

Dynamically creating a virtual access point dedicated to each wireless device based on its type, ensuring secure and efficient onboarding and provisioning by using unique parameters and encryption methods.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a dedicated wireless access point is created for each wireless device during onboarding, then network security is improved, but device resources are depleted and airtime efficiency is reduced

Engineering Contradiction:

Improvenetwork securityVSAvoidairtime efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent segments the onboarding process into a temporary dedicated access point phase and a final integrated phase. During onboarding, a virtual access point is created specifically for the wireless device to establish secure communication with the cloud server. After successful provisioning, the wireless device transitions to using the main access point, eliminating the need for permanent dedicated access points and thus resolving the contradiction between security and resource efficiency.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent implements dynamic access point creation and destruction based on the onboarding state of wireless devices. The system dynamically creates virtual access points only when needed for onboarding and destroys them after successful provisioning. This dynamic approach allows the system to maintain high security during the vulnerable onboarding phase while optimizing resource utilization during the operational phase.

Inventive Principle:

Principle #15Dynamics

2Reliability

If multiple access points are created for onboarding purposes, then device-specific security is improved, but airtime utilization becomes inefficient and interference increases

Engineering Contradiction:

Improvedevice-specific securityVSAvoidinterference and beacon pollution

Core Design Contradiction:

ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The patent segments the wireless network into distinct operational modes: a main access point for ongoing services and temporary virtual access points for onboarding. This segmentation ensures that multiple access points coexist without causing harmful interference, as virtual access points are created only when needed and destroyed afterward, minimizing their presence in the network environment.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary onboarding actions through virtual access points before the wireless device integrates into the main network. By completing security provisioning and credential exchange during the temporary virtual access point phase, the system eliminates the need for prolonged multi-access-point operation, thereby reducing interference and beacon pollution.

Inventive Principle:

Principle #10Preliminary action

3Productivity

If the same access point is used for both onboarding and services, then resource utilization is improved, but security risks increase

Engineering Contradiction:

Improveresource utilizationVSAvoidsecurity

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent employs a dynamic approach where the access point configuration changes based on the operational state of wireless devices. During onboarding, a virtual access point with enhanced security parameters is created. After successful provisioning, the wireless device transitions to the main access point. This dynamic state management allows the system to maintain high security during the vulnerable onboarding phase while optimizing resource utilization during normal operation.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The virtual access point acts as an intermediary between the wireless device and the main network during the onboarding process. It provides a secure, isolated environment for credential exchange and configuration before the device integrates into the main network. This intermediary approach allows secure onboarding without compromising the main network's security or requiring permanent dedicated access points.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250324254A1Managing a Virtual Access Point in a Wireless Network

Publication Date: 2025.10.16 COMCAST CABLE COMM LLC

AI summary

An access point may create a virtual access point based on a connection request message from a wireless device. The wireless device may communicate with a computing device via the virtual access point. The computing device may send information about the access point to the wireless device. The wireless device may connect to the access point, for example, using the information.