Secure Leash Token Pairing for Wireless Peripherals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless peripheral devices can be easily paired with unauthorized information handling systems, leading to theft and management challenges in enterprise environments where multiple devices are used.
Innovation Solution
A system that uses a leash token to securely pair wireless peripheral devices with authorized information handling systems, ensuring compatibility through a unique identifier that cannot be updated without authorization, and allows for secure, one-time password authentication and token management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If wireless peripheral devices are made universally pairable with any information handling system, then ease of operation and device versatility are improved, but security and prevention of unauthorized use deteriorate
Solution Approach 1:
The patent introduces a leash token as an intermediary authentication mechanism between the peripheral device and information handling system. The leash token is stored in a secure element of the peripheral device and must match a corresponding token in the information handling system before pairing is allowed. This intermediary token verifies authorized use without requiring the peripheral device to be physically connected or modified, thus maintaining ease of wireless pairing while preventing unauthorized use.
2Reliability
If a leash token authentication system is implemented, then security against unauthorized use is improved, but device complexity increases
Solution Approach 1:
The peripheral device autonomously manages the leash token authentication process without requiring manual intervention or complex configuration. The secure element automatically stores and presents the leash token during pairing attempts. The information handling system automatically retrieves and compares the token, enabling self-service authentication that simplifies the user experience while maintaining security.
Solution Approach 2:
The patent changes the pairing parameter from open acceptance to token-based verification. Instead of allowing any wireless connection, the system requires the peripheral device to present a specific authentication parameter (leash token) that matches the information handling system's expected value. This parameter change fundamentally alters the pairing mechanism to be both secure and simple to implement.
3Reliability
If leash tokens are made non-updatable without authorization, then security and prevention of token sharing are improved, but adaptability and device portability deteriorate
Solution Approach 1:
The patent extracts the leash token from the peripheral device's main memory and places it in a dedicated secure element with restricted access. This extraction ensures that the token cannot be easily copied, modified, or shared between different information handling systems. The secure element physically isolates the token, making unauthorized extraction or duplication extremely difficult while maintaining the token's integrity and uniqueness for each device-system pairing.
Data Source
AI summary
A managed host information handling system includes a hardware processor to communicate with a managed wireless peripheral device to determine that the managed wireless peripheral device is executing code instructions of a peripheral managed device service (MDS) module to determine whether a first leash token stored at the managed host information handling system matches a received, second leash token from the managed wireless peripheral device indicating the managed wireless peripheral device is leashed. The hardware processor executes code instructions of a host MDS module to initiate an authorized pairing process with the managed wireless peripheral device when the leash tokens match or prevents pairing when the leash tokens do not match. The hardware processor to execute code instructions of a one-time-password (OTP) algorithm to generate an OTP to exclusively pair the managed host information handling system with the managed wireless peripheral device.