Encrypted Session Key Exchange for Wearable Peripheral Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wearable devices and other computing devices face security threats due to the addition of intermediate devices in communication pathways, particularly when transmitting sensitive data over the internet, as they may be vulnerable to malicious software intercepting communications.
Innovation Solution
A method and system for encrypted communication between a server and a peripheral device, where a server generates a session key, encrypts it using a pre-stored encryption key, and sends it to the peripheral device through a control device, enabling secure communication by using this key for encryption and decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If wearable devices rely on smart phones to provide connections to remote servers, then connectivity and functionality are improved, but communication security deteriorates due to additional interception risks from intermediate devices
Solution Approach 1:
The patent introduces an encrypted communication channel as an intermediary layer between the wearable device and remote server. This intermediary encryption layer ensures that even though data passes through intermediate devices (smart phones), the actual communication content remains secure and cannot be intercepted or read by malicious software on these intermediate devices.
Solution Approach 2:
The communication system is segmented into distinct encrypted channels: one channel for control data and another for sensor data. Each channel has its own encryption key, allowing selective encryption of different data types. This segmentation enables the system to maintain security while allowing intermediate devices to forward data without compromising the confidentiality of sensitive information.
2Ease of operation
If sensitive data is transmitted through intermediate devices, then communication functionality is improved, but vulnerability to malicious software interception increases
Solution Approach 1:
The patent applies preliminary anti-action by establishing encryption keys and encrypted communication channels before any sensitive data transmission occurs. The wearable device and remote server pre-share encryption keys, and all subsequent communications are automatically encrypted using these keys. This preliminary setup ensures that even if malicious software is present on intermediate devices, it cannot intercept or read the encrypted data without the decryption keys.
Solution Approach 2:
The system changes the parameter of data encryption by applying different encryption keys to different data types. Control data and sensor data are encrypted with separate keys, allowing the system to maintain high security for sensitive sensor data while enabling functional control commands to pass through intermediate devices. This parameter change approach allows selective security application based on data sensitivity.
3Reliability
If encryption keys are pre-stored in both server and peripheral device, then communication security is improved, but device complexity increases
Solution Approach 1:
The patent implements preliminary action by pre-storing encryption keys in both the wearable device and remote server during the device provisioning phase. This preliminary key establishment occurs once during device setup, after which the keys are automatically used for all subsequent communications. This approach eliminates the need for complex real-time key exchange protocols during actual data transmission, reducing operational complexity while maintaining strong security.
Data Source
AI summary
Method and device of encrypting communication between a server and a peripheral device are disclosed. The method includes: a server receiving a session request from a control device, the session request including a predetermined device ID of a peripheral device associated with the control device; generating a first session key for encrypting and decrypting future communication between the peripheral device and the server; identifying a pre-stored encryption key corresponding to the predetermined device ID from a database, wherein the pre-stored encryption key is also pre-stored in the peripheral device; encrypting the first session key using the pre-stored encryption key; sending the encrypted first session key to the peripheral device via the control device; and encrypting communication to the peripheral device in a respective communication session using the first session key.