Mobile Certificate Management for MQTT and HTTPS Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication apparatuses use a single certificate for multiple protocols, compromising security levels.
Innovation Solution
A mobile communication apparatus with a main module and a communication module, where the main module stores both MQTT and HTTPS certificates, switching between them as needed to maintain secure communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single certificate storage area is used for multiple protocols, then device complexity is reduced, but security level is lowered
Solution Approach 1:
The patent divides the certificate management system into two parts: a main module with a first storage area that can store multiple certificates (MQTT and HTTPS), and a communication module with a second storage area that can hold only one certificate at a time. This segmentation allows secure multi-protocol support while maintaining simple communication module storage.
Solution Approach 2:
The main module acts as an intermediary that manages multiple certificates and dynamically provides the appropriate certificate to the communication module based on the required protocol. This mediator approach allows the communication module to use a single storage area while still supporting multiple secure protocols through dynamic certificate switching.
2Reliability
If certificates are dynamically switched between protocols, then security level is maintained, but device complexity increases
Solution Approach 1:
The patent merges the certificate management functionality into the main module, which consolidates the ability to store and manage multiple certificates. The communication module maintains its simplicity with a single storage area, while the merged system in the main module handles the complexity of dynamic certificate selection and switching based on protocol requirements.
3Adaptability or versatility
If communication is frequently started and stopped to switch protocols, then protocol flexibility is improved, but loss of time increases
Solution Approach 1:
The main module pre-stores multiple certificates (MQTT and HTTPS) in the first storage area, preparing them in advance. When protocol switching is needed, the appropriate certificate is already available and can be quickly provided to the communication module, eliminating the need to stop communication for certificate retrieval or generation.
Solution Approach 2:
The system implements dynamic certificate switching where the main module can provide different certificates to the communication module based on the required protocol while the communication module maintains a continuous connection. This dynamic approach allows protocol switching without communication interruption, as the certificate change occurs in the main module's storage and provisioning rather than requiring connection termination.
Data Source
AI summary
According to one embodiment, a mobile communication apparatus includes a communication module and a main module. The communication module is capable of storing only one of an MQTTS certificate and an HTTPS certificate. The main module is capable of storing both the MQTTS certificate and the HTTPS certificate. The main module provides the MQTTS certificate to the communication module if the communication module starts MOTTS communication. The main module provides the HTTPS certificate to the communication module if the communication module starts HTTPS communication in a case where the communication module performs the HTTPS communication during a keep-alive interval of the MQTTS communication and provides the MQTTS certificate to the communication module if the communication module stops the HTTPS communication.