Interim Device Connections Using Visual Codes for Secure Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security models for device-to-device communication require significant computing resources and specialized applications, hindering adoption and increasing operational costs due to the management of identities and passwords.
Innovation Solution
A system utilizing a server to establish interim connections between guest and host devices through a connection identifier generated based on user input verification, allowing secure communication without sharing network addresses or credentials, using graphical, audio, or light-based signals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing security models utilize identities and passwords for device communication, then secure content sharing is achieved, but computing resources for credential management increase significantly
Solution Approach 1:
The patent extracts the credential management burden from the device-to-device communication process by introducing a server that handles all identity verification and credential management. The server stores credential information and performs verification, while devices only need to communicate connection identifiers, dramatically reducing the computing resources required at the device level.
Solution Approach 2:
The patent introduces a server as an intermediary between communicating devices. This server acts as a trusted third party that manages credentials, verifies identities, and facilitates secure communication without requiring devices to directly handle complex authentication protocols, thereby reducing their computational burden.
2Reliability
If existing security models require specific applications on client devices, then secure communication is enabled, but adoption rate decreases due to increased complexity
Solution Approach 1:
The patent makes the security system universal by enabling communication through standard web browsers without requiring specialized applications. The server-based architecture allows any device with a browser to participate in secure communication, significantly broadening accessibility and adoption while maintaining security through the server-mediated connection process.
3Speed
If existing systems share network address information for device connection, then direct communication is established, but security is compromised by exposing device identifiers
Solution Approach 1:
The patent uses connection identifiers as temporary copies or proxies for device identities during the connection process. These identifiers are generated by the server and used only for establishing the connection, after which the server mediates all communication without exposing actual device network addresses, thus maintaining both speed and security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present disclosure provides a system that controls an interim connection between two computing devices (103, 102). The system first determines if a person if physically present at the host device by detecting an interaction with an input device attached to the host device (161). In response to the input, the system generates a connection identifier that is displayed at the host device. The display of a graphical element for communicating the connection identifier enables the guest device to receive the connection identifier. The graphical element can be a QR code, bar code, text, etc. The guest device can send a connection request to the server (101) using the connection identifier. In response to the request, the server verifies the connection identifier and establishes a data connection between the host device and the guest device. Data can be exchanged between the host device and the guest device via the server.