Mobile Intermediary for Secure Short-Range Data Transfer

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The secure management and control of access rights and credentials for short-range communication devices remain a challenge due to laborious and costly wiring to back-end systems, and stand-alone terminals without communication links face difficulties in software upgrades and hardware innovations, especially with short product life cycles in consumer electronics.

Innovation Solution

A mobile communication apparatus with circuits for mobile radio, short-range communication, and location determination, connected to a processor that verifies location information to authorize access and securely transfer data packages to short-range communication devices, enabling secure data transfer both online and offline, using various communication technologies like RFID, NFC, WLAN, BT, and BLE.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If wired connections to back-end systems are used for secure data transfer, then security and control of access rights are improved, but device complexity and installation cost increase

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a mobile communication apparatus as an intermediary device that mediates between the backend system and short-range communication devices. This intermediary carries access rights and credentials wirelessly, eliminating the need for complex wired connections at the terminal devices while maintaining security through the mobile device's communication capabilities

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces mechanical wired connections with wireless communication mechanisms. The mobile communication apparatus uses radio frequency interfaces (NFC, Bluetooth, cellular) to transmit access credentials, substituting physical wiring with electromagnetic field-based communication, thereby reducing device complexity and installation requirements

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Device complexity

If stand-alone terminals without communication links are used, then device complexity is reduced, but ease of repair and software updates deteriorate

Engineering Contradiction:
Improvedevice complexityVSAvoidease of repair
Core Design Contradiction:
Device complexityVSEase of repair

Solution Approach 1:

The patent makes the mobile communication apparatus a multi-functional device that serves both as a communication tool and as a carrier of access rights. This universal device can be used for various purposes (messaging, browsing, access control) and can be remotely updated through its communication capabilities, eliminating the need for separate dedicated access control terminals that are difficult to maintain

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Ease of operation

If wireless communication is used for data transfer, then ease of operation is improved, but reliability of secure data transfer deteriorates due to potential unauthorized access

Engineering Contradiction:
Improveease of operationVSAvoidreliability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent performs preliminary authentication and verification actions before allowing data transfer. The mobile communication apparatus verifies the identity and location of the short-range communication device before transmitting access credentials, ensuring that only authorized devices receive data. This preliminary verification maintains security while enabling wireless operation

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements feedback mechanisms where the mobile communication apparatus receives verification information from the short-range communication device, checks it against stored credentials, and provides feedback on whether authentication succeeded. This feedback loop ensures reliable secure transfer by confirming authorization before completing the wireless data transfer

Inventive Principle:
Principle #23Feedback

4Reliability

If location verification is implemented to prevent fraudulent access, then security is improved, but measurement precision requirements and device complexity increase

Engineering Contradiction:
ImprovesecurityVSAvoidmeasurement precision
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The patent applies partial verification by checking location information only when necessary (e.g., during initial authentication or suspicious activity), rather than continuously verifying with high precision. This partial action provides sufficient security for the application context without requiring excessive measurement precision that would increase device complexity and power consumption

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentEP3291503B1Method and devices for transmitting a secured data package to a communication device
Publication Date: 2018.12.12 LEGIC IDENTSYSTEMS AG
  • EP3291503B1 patent drawingFigure 1
  • EP3291503B1 patent drawingFigure 2
  • EP3291503B1 patent drawingFigure 3~5

AI summary

For transmitting a secured data package from a computer system (4) to a short-range communication device (2), the secured data package is transmitted (S2) from the computer system (4) via a mobile radio network to a mobile communication apparatus (1). The mobile communication apparatus (1) is placed in the communication range of the short-range communication device (2) and receives (S6) from the short-range communication device (2) a data read request, which includes device location information. The mobile communication apparatus (1) determines (S7) the current location of the mobile communication apparatus (1). In case of correspondence of the current apparatus location with the received device location information, the mobile communication apparatus (1) determines (S8) positive access authorization and transfers (S9) the secured data package to the short-range communication device (2).