Mutual Device Authentication Using Proximity-Based Trusted Identification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing and authenticating security-hardened IoT devices in remote or inaccessible locations is challenging due to limited on-site personnel and environmental conditions, requiring complex and secure management processes.

Innovation Solution

A method for remote mutual device authentication using trusted devices in proximity, employing visual and audio identification, along with machine learning, to establish a trust relationship and enable management access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used for remote IoT devices, then security can be maintained, but management complexity and difficulty increase significantly

Engineering Contradiction:
ImprovesecurityVSAvoidmanagement complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a camera device as an intermediary that captures images of the IoT device's display. This intermediary mechanism allows authentication without requiring physical access to the device, thereby maintaining security while reducing management complexity. The camera acts as a bridge between the remote administrator and the secured device.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional mechanical/physical authentication methods (such as direct physical access, keyboard entry, or tactile interaction) with an optical system. By using camera imaging and optical character recognition to capture and process display information, the system eliminates the need for physical presence while maintaining authentication security.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Ease of operation

If physical access methods are used for device management, then authentication can be simplified, but on-site personnel requirements increase

Engineering Contradiction:
Improveauthentication easeVSAvoidon-site personnel
Core Design Contradiction:
Ease of operationVSQuantity of substance

Solution Approach 1:

The system enables self-service authentication by allowing the IoT device to display authentication codes or visual information that can be captured remotely. The device essentially serves itself by presenting authentication data that can be read by external camera systems, eliminating the need for personnel to physically interact with device interfaces.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

A camera device serves as an intermediary that captures visual information from the IoT device display and transmits it to the authentication system. This intermediary eliminates the need for on-site personnel by bridging the gap between remote administrators and the physically located device through image capture and processing.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If visual identification methods are implemented, then authentication security is improved, but device complexity increases

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces complex mechanical authentication mechanisms with optical imaging and software-based processing. Instead of using hardware tokens, physical keys, or complex biometric scanners, the system uses a standard camera to capture display information and software algorithms to process the visual data, significantly reducing hardware complexity while maintaining or improving security.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The visual identification system uses a camera device that can serve multiple functions: capturing authentication codes, verifying device identity, and potentially performing other monitoring tasks. This multi-functional approach reduces the need for specialized authentication hardware, thereby reducing overall system complexity while maintaining security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12549944B2Elevated device authentication through mutual identification
Publication Date: 2026.02.10 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US12549944B2 patent drawing
  • US12549944B2 patent drawing

AI summary

A computer-implemented method, a computer system and a computer program product authenticate devices using remote mutual identification. The method comprises determining that a network device requires management, where the network device is deployed in a location. The method also comprises identifying a trusted device, where the trusted device is within a range of the location of the network device. The method further comprises establishing a trust relationship between the trusted device and the network device. Lastly, the method comprises enabling management access to the network device based on the trust relationship.