OS-Level Virtual Proximity Pairing for Secure Device Connectivity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for establishing connectivity between user devices are limited to physical proximity, making it difficult for users in virtual proximity to quickly share information or connect across distances without relying on physical communication methods like texting or emailing, and introduce security risks when sending pairing codes.

Innovation Solution

A computer-implemented method and system that uses pairing components on user devices to establish virtual proximity connections by broadcasting messages to operating system processes to identify and verify live connection channels, employing cryptographically signed or encrypted payloads to secure the connection process, allowing for dynamic and secure connections between user devices already in virtual proximity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If short-range communication technologies like Bluetooth or NFC are used to detect nearby devices, then devices can be discovered when physically co-located, but users cannot connect when in virtual proximity (already connected through another channel)

Engineering Contradiction:
Improveconnection capabilityVSAvoidconnection establishment process
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent uses an operating system-level intermediary mechanism that sits between applications and communication hardware. The OS maintains a live connection channel that applications can query to discover devices in virtual proximity, eliminating the need for applications to directly implement complex discovery protocols while enabling connections beyond physical proximity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates a universal connection channel at the operating system level that serves multiple applications simultaneously. Instead of each application implementing its own discovery mechanism, a single OS-level service handles device discovery and connection management for all applications, reducing complexity and enabling versatile connectivity scenarios.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If pairing codes are sent between devices to establish connections, then devices can be paired securely, but security risks arise when transmitting pairing codes over communication channels

Engineering Contradiction:
Improveconnection securityVSAvoidsecurity vulnerabilities
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the pairing code transmission from the communication channel that was causing security risks. By using the operating system's live connection channel for discovery and then establishing a separate secure pairing process, the vulnerable code transmission step is removed from the potentially insecure communication path.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent performs preliminary device discovery and identification through the OS connection channel before initiating the actual pairing process. This allows the system to verify device identities and establish secure connections through pre-configured authentication mechanisms rather than transmitting pairing codes over potentially insecure channels.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11637819B2Establishing connectivity between user devices
Publication Date: 2023.04.25 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11637819B2 patent drawing
  • US11637819B2 patent drawing
  • US11637819B2 patent drawing

AI summary

A computer-implemented method, computer program product, and computer system is provided for establishing connectivity between user devices. The computer-implemented method includes: broadcasting a message to running processes on an operating system of the first user device to indicate that a requesting application is looking for a live connection channel to attempt discovery with a second user device to ascertain virtual proximity of the first user device with the second user device. The computer-implemented method further includes receiving a response from a live connection channel and attempting to verify pairing via the live connection channel to confirm a virtual proximity of the second user device with the first user device. The pairing provides information for establishing a subsequent connection between the first and second user devices via the requesting application.