Wireless Authentication via NFC and Wi-Fi Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems do not effectively register and manage authentication information, such as usernames and passwords, within mobile terminals, limiting secure authentication processes.
Innovation Solution
A communication device and terminal device system that utilizes a first wireless interface for NFC communication and a second wireless interface for Wi-Fi communication to establish connections, register authentication information, and execute secure authentication processes, allowing for the registration and use of authentication information for secure connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If NFC communication is used for authentication, then security is improved, but communication distance is limited
Solution Approach 1:
The authentication process is segmented into two distinct phases: (1) NFC-based authentication for secure verification when devices are in close proximity, and (2) Wi-Fi-based communication for data transmission when devices are at longer distances. This segmentation allows each communication interface to be optimized for its specific function, resolving the contradiction between security and communication distance.
Solution Approach 2:
The patent introduces an intermediary mechanism where authentication information is first verified through NFC (the secure intermediary channel), and then subsequent communications can occur through Wi-Fi. The NFC interface acts as a trusted intermediary that establishes security credentials before enabling longer-distance communication.
2Speed
If authentication information is stored in the communication device, then authentication speed is improved, but device security risk increases
Solution Approach 1:
The patent extracts the authentication information storage function from the communication device and relocates it to the terminal device. The communication device only performs verification of authentication results rather than storing sensitive credentials. This extraction reduces the security risk associated with storing authentication information in the communication device while maintaining fast authentication speeds.
Solution Approach 2:
Instead of the communication device storing and managing authentication information, the patent inverts the roles: the terminal device stores the authentication information and sends verification results to the communication device. This inversion transfers the security burden to the terminal device which has better security capabilities, while the communication device benefits from fast verification.
3Measurement precision
If user name and password are manually input, then authentication accuracy is improved, but user operation complexity increases
Solution Approach 1:
The patent implements copying of authentication information from the terminal device to the communication device through automated data transmission. Instead of manual input, the terminal device copies relevant authentication data and transmits it to the communication device, which then verifies it. This copying mechanism maintains authentication accuracy while eliminating manual input complexity.
Solution Approach 2:
The system enables self-service authentication where the terminal device automatically prepares and transmits authentication information to the communication device without requiring manual user input. The user simply needs to initiate the authentication process, and the system handles the complex data preparation and transmission automatically, reducing operational complexity while maintaining accuracy.
Data Source
AI summary
A communication device may supply connection information to a first wireless interface so as to store the connection information in an interface memory, establish a wireless connection via a second wireless interface with a terminal device by using the connection information after the connection information has been sent to the terminal device, execute a first authentication using first authentication information in a case where the first authentication information is received from the terminal device, send a first registration instruction to the terminal device by using the wireless connection via the second wireless interface in a case where the first authentication is successful, and execute a second authentication using the first authentication information in a case where the first authentication information which has been registered in the terminal device is received from the terminal device after the first registration instruction has been sent to the terminal device.