IoT Device Cloud Pairing via Intermediary Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing IoT devices face challenges in efficiently and conveniently joining WiFi networks due to limitations such as lack of display or data entry capabilities, requiring direct connections, line of sight, and the need for users to be within the network premises, which complicates the setup of multiple devices.

Innovation Solution

A device broadcasts wireless network access credentials, detects the presence of IoT devices, prompts user authentication on a wireless user device, and adds them to a user account, allowing for remote pairing and setup even when the user is not within the network's coverage area.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If direct connection methods (USB, Bluetooth, QR) are used to pair IoT devices with WiFi network, then secure configuration can be achieved, but the user must be within reach and line of sight of the device, limiting remote setup capability

Engineering Contradiction:
Improveconfiguration securityVSAvoidremote setup capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a cloud service as an intermediary between the IoT device and the user's mobile device. The cloud service receives pairing requests, retrieves device information, and facilitates authentication without requiring direct connection between the IoT device and user device. This mediator enables remote pairing while maintaining security through server-mediated authentication processes.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transitions from local direct connection (spatial constraint) to cloud-based remote connection (network dimension). By moving the pairing process to the cloud infrastructure, the system eliminates the need for physical proximity while maintaining secure authentication through network-based verification and token exchange mechanisms.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Adaptability or versatility

If multiple IoT devices need to be paired to the WiFi network, then network coverage can be expanded, but the user must add devices one at a time, increasing setup time and complexity

Engineering Contradiction:
Improvenetwork coverageVSAvoiddevice setup time
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The cloud service performs preliminary actions by pre-storing device information and credentials in the cloud before pairing is needed. When a user wants to pair multiple devices, the cloud service already has the necessary information ready, enabling rapid sequential or batch pairing without repeated manual configuration steps for each device.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system uses cloud-stored device information as a template or copy that can be rapidly replicated for multiple devices. Instead of configuring each device individually from scratch, the cloud service retrieves and applies pre-stored configuration data, significantly reducing the time required to pair multiple devices to the network.

Inventive Principle:
Principle #26Copying

3Reliability

If traditional WiFi pairing methods are used, then network security can be maintained through direct connections, but users must be physically present within the network premises, limiting flexibility

Engineering Contradiction:
Improvenetwork securityVSAvoiduser location flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The cloud service acts as a secure intermediary that mediates the pairing process between the IoT device and the user's mobile device. It verifies device credentials, manages authentication tokens, and coordinates the pairing process remotely, maintaining network security protocols while eliminating the requirement for user physical presence at the device location.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical/physical requirement of direct connection and line-of-sight with a network-based electronic authentication system. The cloud service uses digital credentials, tokens, and encrypted communication to establish secure connections remotely, substituting physical proximity requirements with network-based security mechanisms.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

4Ease of operation

If additional hardware components are added to IoT devices to enable direct connection capabilities, then pairing functionality can be improved, but device complexity and cost increase

Engineering Contradiction:
Improvepairing functionalityVSAvoidhardware requirements
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent extracts the complex pairing and authentication functionality from the IoT device itself and relocates it to the cloud service infrastructure. The IoT device only needs minimal networking capability to communicate with the cloud service, while the heavy lifting of credential verification, token management, and secure connection establishment is performed remotely by the cloud service, reducing device hardware requirements.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The cloud service provides a universal pairing mechanism that works across different IoT device types without requiring device-specific hardware modifications. The cloud-based authentication system serves multiple functions including credential verification, token generation, session management, and security protocol enforcement, eliminating the need for each device to have specialized pairing hardware.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9955526B1Autonomous and remote pairing of internet of things devices utilizing a cloud service II
Publication Date: 2018.04.24 YU CHENGFU
  • US9955526B1 patent drawing
  • US9955526B1 patent drawing
  • US9955526B1 patent drawing

AI summary

A device and a method are disclosed. The device connected to a local area network, includes one or more processors, a machine-readable medium including instructions stored therein, which, when executed by the one or more processors cause the one or more processors to perform operations including broadcasting, by the first IoT device, a first message comprising at least identification information of the first IoT device, wherein the first IoT device is authenticated responsive to the broadcasting; and receiving, by the first IoT device, based on the authentication a second message, wherein the second message comprises wireless network access credentials to connect to an access point (AP) of the local area network.