Peer-to-Peer Group Controller Unique Master Key Invalidation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Peer-to-peer wireless communication groups face security issues due to the ability of remote devices to rejoin groups without user authorization, potentially accessing unauthorized data or services.

Innovation Solution

Implementing a system where a device acting as a group controller generates unique master keys for each remote device, allowing selective invalidation of these keys to prevent unauthorized reconnection, while maintaining valid keys for other devices within the group.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If remote devices are allowed to rejoin peer-to-peer groups using retained master keys, then ease of operation is improved, but security deteriorates

Engineering Contradiction:
Improveease of reconnectionVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent segments the master key into two distinct components: a group-specific portion and a device-specific portion. This segmentation allows the system to selectively invalidate keys for individual devices without affecting other devices in the group, thereby enabling secure removal while maintaining operational ease for authorized devices.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements local quality by making each device's authentication credentials unique and location-specific within the group context. Each device receives a master key tailored to its specific identity and group membership, allowing the controller to selectively revoke access for specific devices while preserving access for others.

Inventive Principle:
Principle #3Local quality

2Reliability

If unique master keys are generated for each remote device, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service by enabling the group controller to autonomously generate, distribute, and invalidate device-specific master key portions without requiring user intervention. The controller automatically manages the key lifecycle, including generating unique device identifiers and deriving corresponding key portions, thereby maintaining security while minimizing operational complexity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent applies preliminary action by pre-generating device identifiers and deriving master key portions for potential group members before they actually join. This allows the controller to have ready-made authentication credentials available, streamlining the join process and reducing the computational burden during actual connection events.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If master keys are invalidated for removed devices, then security is improved, but loss of information occurs as removed devices can no longer access group communications

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication access
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent extracts the authentication capability from the removed device by invalidating its specific master key portion while leaving the group structure and other devices' keys intact. This extraction selectively removes access rights from the targeted device without disrupting the communication infrastructure or other participants, thereby achieving security enhancement without unnecessary loss of information flow.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS10575174B2Secure protocol for peer-to-peer network
Publication Date: 2020.02.25 MICROSOFT TECHNOLOGY LICENSING LLC
  • US10575174B2 patent drawing
  • US10575174B2 patent drawing
  • US10575174B2 patent drawing

AI summary

A wireless computing device operating as a controller of a peer-to-peer group configured to generate unique master keys for each device joining the group. The wireless computing device may use the unique master keys to selectively remove remote devices from the group such that the remote device cannot later rejoin the group. Other remote devices, each possessing a master key that remains valid, can disconnect from the group and later reconnect to the group without express user action. To support such behavior, the wireless device may provide a user interface through which a user may manage connected remote devices by providing commands to selectively disconnect or remove remote devices from the group.