Intercom System Double Encryption Path for Secure Wireless Unlocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing intercom systems lack sufficient security measures, particularly in the authentication process, as encryption is not applied until after data is decoded, leaving a window for potential unauthorized access.
Innovation Solution
An intercom system with a double encryption communication path between the intercom master device, authentication server, and wireless terminal, ensuring that encryption is maintained throughout the communication process, including the exchange of key information, to secure the operation of unlocking entrance doors from a wireless terminal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is applied only after data is decoded in the authentication server, then the communication process is simpler, but security is compromised as data is exposed during transmission
Solution Approach 1:
The patent applies preliminary encryption before data leaves the intercom master device, and preliminary decryption at the authentication server before processing. This ensures that sensitive data (unlock commands, key information) remains encrypted during transmission through the network, eliminating the security vulnerability of transmitting plain text while maintaining a manageable communication process.
Solution Approach 2:
The patent introduces an authentication server as an intermediary that handles the complex double encryption/decryption process. The server receives doubly encrypted data, performs first decryption, processes the data, then performs second decryption before responding. This intermediary approach distributes the cryptographic complexity across dedicated security infrastructure rather than requiring complex local implementation at each endpoint.
2Object-affected harmful factors
If double encryption is implemented throughout the communication path, then security against unauthorized access is enhanced, but the communication protocol becomes more complex
Solution Approach 1:
The patent segments the encryption process into two distinct layers: first encryption/decryption for securing communication between the intercom master device and authentication server, and second encryption/decryption for securing communication between the authentication server and wireless terminal. This segmentation allows each encryption layer to be independently managed and implemented, making the overall double encryption system more tractable despite its complexity.
Solution Approach 2:
The patent changes the encryption parameters (keys, algorithms) between different communication segments. The first encryption uses keys exchanged between the intercom master device and authentication server, while the second encryption uses keys exchanged between the authentication server and wireless terminal. This parameter differentiation enables the double encryption system to provide enhanced security without requiring a single overly complex cryptographic protocol.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An intercom system includes an electronic lock of an entrance door, an entrance slave device, an intercom master device, and an authentication server. An authentication server establishes a first encryption communication path between the authentication server itself and the intercom master device, establishes a second encryption communication path between the authentication server itself and the wireless terminal, and relays communication between the intercom master device and the wireless terminal. With the initial settings, the intercom master device registers the wireless terminal with the intercom master device itself, performs an exchange of key information with the wireless terminal, and establishes a third encryption communication path between the wireless terminal and the intercom master device itself. The wireless terminal transmits an instruction to unlock the electronic lock to the intercom master device through the first encryption communication path, the second encryption communication path, and the third encryption communication path.