Home Network Control Apparatus Using Encrypted Server-Mediated Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional UPnP technologies for controlling home network devices rely on static control applications and unencrypted control information, making them vulnerable to unauthorized access and control.
Innovation Solution
A method and apparatus for obtaining and providing encrypted device-control information using a server, where capability information including encryption/decryption methods is shared, allowing for secure control of network devices through a general-purpose control web application, using asynchronous HTTP communication and encryption algorithms like symmetrical and public key encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional UPnP technology is used for controlling home network devices, then the control system is simple and easy to implement, but the control information is unencrypted and vulnerable to unauthorized access
Solution Approach 1:
A server is introduced as an intermediary between the control point and network devices. The server receives control information requests, encrypts the control information using symmetric encryption (e.g., AES), and transmits it to the control point. This mediator handles the complex encryption/decryption operations, allowing the control system to achieve high security without significantly increasing the complexity of the controlling apparatus.
Solution Approach 2:
The patent changes the parameter of control information from unencrypted to encrypted form. By applying encryption algorithms (symmetric encryption with AES or asymmetric encryption with RSA) to the control information before transmission, the security parameter is dramatically improved while the underlying control architecture remains relatively simple.
2Reliability
If encryption/decryption methods are implemented for control information, then unauthorized access is prevented, but processing time and computational resources increase
Solution Approach 1:
The patent performs preliminary action by pre-establishing symmetric encryption keys and algorithms before actual control operations. The server and control point agree on encryption parameters in advance, so that during control operations, only the relatively fast symmetric decryption process needs to be performed at the control point, minimizing real-time processing delays.
Solution Approach 2:
The patent dynamically selects between symmetric encryption (AES) for bulk control information and asymmetric encryption (RSA) for key exchange, optimizing the balance between security and processing time. Symmetric encryption is used for the main control data due to its speed, while asymmetric encryption is used only when needed for secure key distribution.
Data Source
AI summary
A network control apparatus and method is provided. The method includes operations of informing a server of capability information including an encryption/decryption method, wherein the server provides the network control apparatus with control information used to control a network device using a general-purpose control web application, transmitting to the server a control information requesting message that requests the control information, receiving from the server the control information which has been encrypted using the encryption/decryption method, decrypting the encrypted control information according to the encryption/decryption method, and transmitting a control command for controlling the network device according to the decrypted control information.