Encrypted IoT Device Control Rights Through Proximity Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing device control rights among multiple users in a household setting is challenging, particularly when different family members need to use the same IoT devices, necessitating a secure and convenient method for obtaining control rights.
Innovation Solution
A method where a first device detects the approach of a second device and sends an encrypted key for control instructions, allowing the second device to obtain control rights, with security measures such as validity periods, owner confirmation, and limited functionality to enhance security and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the first device automatically sends the first key to the second device when detecting approach, then the ease of operation is improved, but the security deteriorates due to potential unauthorized access
Solution Approach 1:
The patent applies preliminary action by requiring the second device to send an application request before the first device sends the key. This preliminary step ensures that key transmission only occurs when explicitly requested, preventing unauthorized automatic key sharing while maintaining ease of use through automated detection of approach and request.
Solution Approach 2:
The patent introduces an intermediary mechanism in the form of an application request that mediates between the automatic detection of device approach and the actual key transmission. This intermediary step acts as a security gate, ensuring that proximity alone is insufficient for key sharing without explicit user intent expression.
2Ease of operation
If the first key remains valid indefinitely, then the ease of operation is improved for repeated use, but the security deteriorates due to increased risk of key theft
Solution Approach 1:
The patent applies dynamics by making the validity period of the first key a dynamic parameter rather than a static indefinite validity. The key's effectiveness duration is adjusted based on security requirements, creating a balance between allowing sufficient time for legitimate repeated use and limiting the window for potential key theft and misuse.
Solution Approach 2:
The patent changes the parameter of key validity from indefinite to a specific time duration. This parameter change directly addresses the security risk by ensuring that even if a key is stolen, its usefulness is limited to a specific time window, while still providing adequate validity for normal repeated operations within that period.
3Productivity
If the first device sends the first key without owner confirmation, then the productivity is improved by reducing authentication steps, but the reliability deteriorates due to potential unauthorized control
Solution Approach 1:
The patent applies preliminary action by implementing owner confirmation as a prerequisite step before the first device sends the first key to the second device. This preliminary authorization ensures that only confirmed owners can enable key sharing, preventing unauthorized control while maintaining productivity through automated processes that occur after confirmation.
Solution Approach 2:
The patent implements feedback by requiring the owner to confirm key sharing intent before the process proceeds. This feedback loop ensures that the system only advances to key transmission when proper authorization is received, balancing security requirements with operational efficiency by automating subsequent steps once confirmation is obtained.
Data Source
AI summary
This disclosure provides methods and apparatuses relating to obtaining device control right. One method is applied to a system including a first device and a second device. The first device detects that the second device approaches the first device, the first device sends a first key to the second device. After receiving the first key, the second device encrypts a control instruction by using the first key, where the control instruction is used to control the first device. The second device sends the encrypted control instruction to the first device, and the first device decrypts the encrypted control instruction to obtain the control instruction and executes the control instruction.