IoT Hub NFC Tag Secure Pairing Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Internet of Things (IoT) network systems face security challenges due to the risk of malicious users compromising IoT devices, leading to potential damage of the network, and existing methods lack effective solutions for secure key sharing and authentication between devices.
Innovation Solution
A method for secure pairing in IoT networks using a hub, controller, and IoT device, involving near field communication (NFC), Wi-Fi, and other communication methods to establish secure connections through encryption keys and domain keys, ensuring physical access restriction and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure pairing and authentication methods are implemented in IoT networks, then security against malicious users is improved, but device complexity and communication overhead increase
Solution Approach 1:
The patent introduces an NFC tag as an intermediary carrier that stores secret values and enables secure key exchange. The NFC tag acts as a mediator between devices during pairing, allowing authentication without complex direct communication protocols. The tag contains pre-stored secret values that facilitate secure pairing while simplifying the overall authentication process.
Solution Approach 2:
The patent implements preliminary action by pre-storing secret values in NFC tags before devices need to pair. This allows devices to quickly authenticate each other using pre-configured credentials rather than performing complex real-time key generation and exchange procedures, thereby reducing pairing complexity while maintaining security.
2Reliability
If multiple communication methods (NFC, Wi-Fi, etc.) are used for secure pairing, then authentication reliability is improved, but the ease of operation deteriorates
Solution Approach 1:
The patent segments the authentication process into distinct phases: initial NFC-based secret value exchange, followed by Wi-Fi or other wireless communication for data transfer. This segmentation allows each communication method to be used for its optimal purpose - NFC for secure initial pairing and other methods for subsequent communication - improving ease of operation while maintaining reliability.
Solution Approach 2:
The NFC tag serves as an intermediary that simplifies the user experience by providing a tactile, intuitive pairing method. Users can simply bring devices close together for NFC contactless pairing, which is more intuitive than manually entering codes or configuring wireless settings, thereby improving ease of operation while ensuring authentication reliability through pre-stored secret values.
3Reliability
If encryption keys are generated and exchanged during pairing, then security against unauthorized access is improved, but loss of time during pairing increases
Solution Approach 1:
The patent applies preliminary action by pre-generating and storing secret values in NFC tags before pairing is needed. During the actual pairing process, devices simply read these pre-configured values and derive encryption keys, bypassing time-consuming key generation algorithms. This significantly reduces pairing time while maintaining strong security through pre-established cryptographic credentials.
Solution Approach 2:
The patent uses copying by having the NFC tag store copies of secret values that can be quickly read and used for key derivation. Instead of generating complex encryption keys in real-time during pairing, devices copy pre-stored secret values from the NFC tag and use them to derive session-specific encryption keys, thereby accelerating the pairing process while preserving security.
Data Source
AI summary
A method of operating a hub used in an internet of things (IoT) network system which includes a first controller and an IoT device is provided. The method includes: performing secure pairing with the first controller using a first communication, receiving first information related to the IoT device from the first controller paired with the hub, authenticating the first controller using the first information, and performing secure pairing with the IoT device using a second communication.