Luminaire Network Security via Visible Light Verification Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless luminaire network security is vulnerable to interception and unauthorized access due to reliance on username-password schemes, which can be compromised by external devices or human error, posing risks from sophisticated attacks and inadvertent harm.
Innovation Solution
Implementing a visible light communication (VLC) verification protocol using a network of luminaires to authenticate and authorize mobile devices, where each luminaire broadcasts a unique verification code that only authorized devices can detect, enhancing security by requiring physical presence and reducing the risk of external interference.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If username-password authentication is used for wireless luminaire network control, then ease of operation is improved, but network security deteriorates due to interception and unauthorized access risks
Solution Approach 1:
The patent introduces luminaire verification codes as an intermediary authentication mechanism between the user and the luminaire network. Instead of direct username-password authentication over wireless channels, the system uses visually transmitted verification codes from luminaires to mobile devices, creating a secure intermediary layer that prevents unauthorized access while maintaining ease of operation
Solution Approach 2:
The patent replaces the traditional electronic wireless authentication system with an optical verification system. By using visible light communication to transmit verification codes from luminaires to mobile devices, the system substitutes the vulnerable wireless electronic authentication mechanism with a more secure optical-based verification process
2Reliability
If cryptographic encryption is implemented for wireless communications, then network security is improved, but vulnerability to sophisticated attacks and human error persists
Solution Approach 1:
The patent implements preliminary verification by requiring users to physically locate and visually verify luminaire-specific codes before gaining access. This preliminary optical verification step occurs before any wireless communication or cryptographic authentication, preventing unauthorized devices from even attempting to connect to the luminaire network
Solution Approach 2:
The patent segments the authentication process into distinct phases: optical verification of luminaire identity through visible light codes, followed by separate wireless authentication. This segmentation isolates the cryptographic communication from the initial verification step, reducing the attack surface for sophisticated hacking attempts
3Reliability
If physical presence verification is required for authorization, then network security is improved, but ease of operation deteriorates due to additional verification steps
Solution Approach 1:
The luminaire automatically performs the verification function by emitting its own unique code through visible light communication. The mobile device's camera captures and processes this code without requiring manual intervention or additional verification steps from the user, making the physical presence requirement seamless and easy to operate
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach significantly enhances network security by ensuring only authorized personnel can control the luminaire network, reducing the likelihood of unauthorized access and accidental harm, while being resistant to interception and external attacks.
Implementation Method 1
the RF node controls the optical wireless communication interface to transmit over a visible light communication (VLC) communication band, the verification code
Data Source
AI summary
A mobile device logs in to an authorization server, via a mobile device network communication interface, over a secondary network. The mobile device receives, via an image sensor, over a light communication band, a respective verification code. In response to logging in to the authorization server and receiving the respective verification code, the mobile device transmits, via the mobile device network communication interface over the secondary network, the respective verification code to the authorization server. In response to transmitting the respective verification code to the authorization server, the mobile device obtains, via the mobile device network communication interface over the secondary network, an authentication approval to control a plurality of RF nodes over a local wireless communication network.


