Mesh Network Onboarding via Low-Power Verification Channels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securely configuring wireless mesh networks are inefficient, error-prone, and vulnerable to security breaches, particularly when adding or updating access points, due to reliance on physical connections, manual data entry, or insecure wireless communications.
Innovation Solution
A secure communication process using dual-factor verification and low-power wireless interfaces, such as Bluetooth, combined with cloud-based management, allows devices to be registered and configured efficiently, minimizing physical intervention and reducing wireless vulnerabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical cable connections are used to configure access points, then security is improved, but device complexity and setup time increase significantly
Solution Approach 1:
The patent replaces physical cable connections with wireless communication mechanisms. Access points use wireless interfaces to communicate configuration data with mobile devices, eliminating the need for physical Ethernet cables while maintaining secure configuration capabilities through encrypted wireless communication channels.
Solution Approach 2:
The patent introduces a mobile device as an intermediary between the access point and the configuration system. The mobile device receives verification codes via wireless communication and transmits them back to the access point, enabling secure configuration without direct physical connection between infrastructure components.
2Reliability
If serial configuration of access points is performed, then security is maintained, but productivity decreases due to time-consuming setup
Solution Approach 1:
The patent performs preliminary verification by sending verification codes to mobile devices before allowing access point configuration. This preliminary security check enables subsequent efficient configuration processes, as the verification step is completed in advance rather than during the entire serial configuration process.
Solution Approach 2:
The patent changes the configuration parameter from physical cable connection to wireless communication mode. This parameter change allows access points to be configured through wireless interfaces, significantly reducing setup time while maintaining security through encrypted wireless communication and verification code validation.
3Ease of operation
If non-secure wireless communications are used for configuration, then ease of operation is improved, but security deteriorates due to vulnerability to unauthorized access
Solution Approach 1:
The patent implements dynamic security verification where verification codes are sent to mobile devices and validated in real-time during the configuration process. This dynamic approach maintains ease of wireless operation while ensuring security through continuous verification rather than static pre-configuration.
Solution Approach 2:
The patent implements a feedback mechanism where verification codes transmitted via wireless communication are validated by the access point before allowing configuration. This feedback loop ensures that only authenticated devices can complete the configuration process, maintaining security while preserving wireless ease of operation.
4Reliability
If manual data entry is required for network registration, then security is maintained, but loss of time increases due to tedious setup processes
Solution Approach 1:
The patent enables self-service configuration where the access point automatically sends verification codes to mobile devices and validates them without requiring manual data entry. The system performs automatic configuration tasks, eliminating time-consuming manual processes while maintaining security through automated verification code validation.
Data Source
AI summary
The present disclosure relates to securely setting up mesh networks in a secure manner that does not require a physical network cable being attached to a wireless device and that do not require transmitting unencrypted information wirelessly when a mesh network is setup. Methods and apparatus consistent with the present disclosure may use different communication interfaces and different types of channels to ensure that devices included in or being added to a wireless mesh network always communicate securely. Methods and apparatus consistent with the present disclosure may use a combination of conventional secure communication methods, such as secure hypertext transfer protocol (HTTPS) communications, low power signals that travel over short distances, and other types of communications to create a system that only uses secure communications when setting up or expanding a wireless mesh network.