Optical Code Secure Link Establishment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Establishing a secure communication link between a mobile endpoint device and a networked device is challenging due to the need for manual input of information, which can lead to security breaches when using openly broadcast beacon signals.

Innovation Solution

A method that scans an optical code containing configuration information and an encryption key to configure the mobile endpoint device, send an encrypted request to the networked device, and receive encrypted confirmation, ensuring secure communication link establishment without exposing initial communication details to snooping devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If beacon signals are used to establish communication links, then ease of operation is improved, but security is worsened due to open broadcasting

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an optical code as an intermediary carrier that mediates between the beacon signal and the endpoint device. The optical code contains encrypted connection information and is displayed on the networked device, allowing the endpoint device to obtain connection details without directly receiving open beacon broadcasts, thus maintaining security while enabling easy connection.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the traditional wireless beacon signal transmission with an optical display system. Instead of using radio frequency beacon signals that can be easily intercepted, the connection information is transmitted through visual optical codes (such as QR codes) that are much harder to intercept and decode, thereby improving security while maintaining user-friendly operation.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Object-affected harmful factors

If manual input of connection information is required, then security is improved, but ease of operation is worsened

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent applies preliminary action by pre-encoding all necessary connection information (including encryption keys and device identifiers) into the optical code before the connection process. This eliminates the need for users to manually input connection details during the pairing process, while the encrypted nature of the optical code maintains security. The information is prepared in advance in a secure, machine-readable format.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If encryption keys are transmitted openly, then ease of operation is improved, but security is worsened due to potential snooping

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent replaces open wireless transmission of encryption keys with an optical display system. The encryption keys are embedded within the optical code visual display, which cannot be intercepted or snooped upon in the same way wireless signals can be. This substitution of transmission medium fundamentally prevents the snooping problem while maintaining automatic key exchange functionality.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS10129743B2Method and apparatus for establishing a secure communication link between a mobile endpoint device and a networked device
Publication Date: 2018.11.13 XEROX CORP
  • US10129743B2 patent drawing
  • US10129743B2 patent drawing
  • US10129743B2 patent drawing

AI summary

A method, non-transitory computer readable medium, and apparatus for establishing a secure communication link between a mobile endpoint device and a networked device are disclosed. For example, the method scans an optical code, wherein the optical code contains configuration information and an encryption key, configures the mobile endpoint device in accordance with the configuration information, sends a request to the networked device to establish the secure communication link, wherein the request is encrypted using the encryption key and receives a confirmation from the networked device that the secure communication link is established between the mobile endpoint device and the networked device once the networked device has authenticated the mobile endpoint device based upon the request, wherein the confirmation is encrypted using the encryption key.