Mobile Device Rendezvous via Shared Credentials and Private Channels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for establishing private communication among networked devices face challenges such as traversing firewalls, device discovery, security, and administration, necessitating improved solutions for secure and encrypted communication.
Innovation Solution
A network testing device creates a shared username and password to determine a unique channel ID, configures itself with these credentials, and subscribes to a private channel, allowing for secure communication by broadcasting data and managing peer-to-peer connections using authentication and heartbeat signals, with the option to unsubscribe if security thresholds are not met.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional methods such as VPNs and encryption schemes are used, then private communication can be established, but device discovery and traversal through firewalls remain difficult
Solution Approach 1:
The patent introduces a discovery server as an intermediary component that facilitates device discovery and communication establishment. The server receives discovery requests from client devices, validates them against stored credentials, and returns discovery responses enabling peer-to-peer connections. This intermediary approach simplifies the discovery process while maintaining security through credential validation.
Solution Approach 2:
The system performs preliminary authentication actions before establishing communication channels. Devices must first provide valid credentials to the discovery server, which pre-validates their identity and authorization. This preliminary action ensures that only authenticated devices can discover and connect to each other, simplifying subsequent communication establishment while maintaining security.
2Ease of operation
If shared credentials are used for authentication, then device connectivity is improved, but security control is reduced
Solution Approach 1:
The authentication system is segmented into multiple components: client devices provide credentials, the discovery server validates credentials, and individual communication channels are established between authenticated devices. This segmentation allows shared credentials to enable connectivity while maintaining security control through server-mediated validation and individual channel management.
Solution Approach 2:
The discovery server implements feedback mechanisms by receiving discovery requests from devices, validating their credentials, and returning discovery responses. This feedback loop ensures that only devices with valid credentials can establish connections, maintaining security control while enabling device connectivity through automated credential verification.
Data Source
AI summary
There is provided a method to enable mobile devices to rendezvous on a shared communication service. The method includes steps for creating, via a device, a shared username and a shared password for a private channel in a communication network, determining a unique channel identification (ID) for the private channel based on the shared username and the shared password, and configuring the device with the shared username and the shared password. The method further includes steps for subscribing the device to the private channel using the unique channel ID, transmitting, in response to a discovery request, a self-identification discovery response over the private channel, and broadcasting data between the device and each additional device connected to the private channel.