Network Key Recovery via Server Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for connecting a terminal to a Wi-Fi network are vulnerable to intrusion and require direct proximity to the access point, making them insecure and inconvenient, especially when dealing with lengthy network keys and physical accessibility.
Innovation Solution
A method where the terminal receives a network key from a server after requesting it, with the key being encrypted and only decryptable by the terminal's private key, reducing the risk of interception and eliminating the need for direct proximity through asymmetric key pair generation and transmission over a separate network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the network key is transmitted directly from the access point to the terminal, then the connection process is simple, but the security is compromised due to vulnerability to interception and intrusion
Solution Approach 1:
The patent introduces a server as an intermediary component that mediates the key transmission process. The server receives the network key from the access point and forwards it to the terminal, preventing direct exposure of the key transmission channel. This intermediary architecture secures the communication by using established secure protocols (HTTPS, SSL/TLS) between the terminal and server, while the access point only communicates with the server rather than directly with terminals.
2Reliability
If the network key is made lengthy to avoid intrusion risks, then the security is improved, but the ease of operation deteriorates due to difficulty in input and memorization
Solution Approach 1:
The system enables automatic key retrieval where the terminal automatically obtains the network key from the server without requiring manual input by the user. The terminal sends a request to the server using the access point identifier, and the server automatically provides the corresponding network key. This self-service mechanism eliminates the need for users to manually type or remember lengthy keys, while still maintaining strong security through the use of secure transmission protocols.
3Ease of operation
If the access point is placed in a location accessible to many users, then the ease of operation is improved, but the security deteriorates due to increased risk of key exposure
Solution Approach 1:
The patent extracts the network key from the physical access point environment and relocates it to a secure server environment. Instead of the key being stored and transmitted only through the access point hardware that must be physically accessible, the key is now stored on the server and transmitted digitally through secure channels. This extraction allows the access point to remain in publicly accessible locations while the key management function is separated to a secure remote server, eliminating the security risk associated with physical accessibility.
4Ease of operation
If WPS protocol is used for key exchange, then the ease of operation is improved, but the security deteriorates due to vulnerability to mass attacks and intrusion
Solution Approach 1:
The server acts as a secure intermediary that replaces the vulnerable WPS protocol for key distribution. Instead of using WPS which has known security vulnerabilities to mass attacks, the system uses the server as a trusted mediator that distributes keys through secure HTTPS/SSL/TLS channels. The server receives keys from access points and distributes them to terminals through encrypted web communications, eliminating the security weaknesses of WPS while maintaining ease of use through automatic key retrieval.
Data Source
AI summary
A method for recovering a network key of an access point to a network, implemented by a terminal. The network key allows the terminal to be associated with the access point upon a first connection of the terminal to the access point. The network key recovery method includes: receiving, by the terminal, a network key provided by the access point on a server following a request, by the terminal to the server, for the network key of the access point, the request including an identifier of the access point and having been relayed by the server to the access point associated with the identifier of the access point in the request. Thus, as the access point does not transmit the network key directly to the terminal, but to a server on which the terminal will recover it, this limits intrusions into the network linked to the vulnerability of the Wi-Fi network.