Intraoral Scanner Challenge-Response Approval for Secure App Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Intraoral scanning devices face security challenges due to their limited computational power and memory, making them vulnerable to unauthorized access and attacks, which can compromise scan data and device functionality, and existing security measures are not effective.

Innovation Solution

A dental system with a server device and intraoral scanning device system that implements challenge-response mechanisms to verify user applications, using challenge data generated by the server and verified by the intraoral scanning device, ensuring secure communication and protecting against unauthorized access and attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If open standard-based wireless communication interface is used in intraoral scanning device, then ease of operation and compatibility are improved, but security and vulnerability to unauthorized access deteriorate

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a server as an intermediary between the intraoral scanning device and external devices. The server handles complex security operations including generating challenge data, verifying response data, and managing approval status of user applications. This mediator approach allows the resource-constrained intraoral scanning device to benefit from robust security without bearing the computational burden, thus resolving the contradiction between ease of operation and security.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts the computationally intensive security verification processes from the intraoral scanning device and relocates them to an external server. The intraoral scanning device only performs lightweight operations such as generating challenge data and verifying response data, while the server handles complex verification logic, approval management, and security policy enforcement. This extraction resolves the contradiction by maintaining security functionality while reducing the operational complexity on the device side.

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If strong security algorithms and protocols are implemented in intraoral scanning device, then security is improved, but computational power and memory requirements increase

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The server acts as an intermediary that absorbs the computational complexity of security algorithms. The intraoral scanning device maintains simplicity by only implementing basic challenge-response mechanisms, while the server handles complex cryptographic operations, verification logic, and security protocol management. This resolves the contradiction between security and device complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces complex mechanical/computational security implementations in the intraoral scanning device with a streamlined challenge-response mechanism. The heavy lifting of security algorithms is substituted by a server-based system that communicates through simplified data exchanges. This substitution reduces device complexity while maintaining strong security through the server's computational capabilities.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If challenge-response mechanism is implemented with server verification, then security against unauthorized access is improved, but communication complexity and data exchange requirements increase

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts complex verification logic from the intraoral scanning device and places it on the server side. The device only needs to exchange basic challenge and response data, while the server handles complex verification algorithms, approval status management, and security policy evaluation. This extraction reduces communication complexity at the device level while maintaining strong security verification.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP4541059B1Dental system, devices and method of securing communication for a user application
Publication Date: 2026.04.08 3SHAPE AS
  • EP4541059B1 patent drawingFigure 1
  • EP4541059B1 patent drawingFigure 2
  • EP4541059B1 patent drawingFigure 3

AI summary

According to an embodiment, a dental system and a method of securing communication for a user application installed on an external device of the dental system. The securing communication for the user application comprises obtaining challenge data in the server device; transmitting the challenge data from the server device to the user application installed on the external device; transmitting a challenge request comprising the challenge data from the user application to the intraoral scanning device; receiving a challenge response comprising response data from the intraoral scanning device; forwarding the response data from the user application to the server device; verifying the response data in the server device based on the challenge data; and approving the user application in the server device if verifying the response data is successful.