Peripheral Device Authentication via Server-Verified Certificate Data

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional Bluetooth peripheral devices lack authentication processes, allowing any device with a specific profile to connect to an information processing device, compromising safety and reliability in data transmission.

Innovation Solution

An information processing system with a server and a communication terminal that includes a secure storage section in the peripheral device for storing certificate data, enabling authentication through a server-based authentication process, ensuring only authorized devices can connect and transmit encrypted data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication process is implemented for peripheral devices, then safety and reliability of data transmission is improved, but device complexity and running costs increase

Engineering Contradiction:
Improvesafety and reliability of data transmissionVSAvoidcomplexity of authentication system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a server as an intermediary component that performs authentication of peripheral devices. The server stores certificate data and verifies authentication requests, acting as a mediator between the communication terminal and peripheral device. This externalizes the authentication complexity from the peripheral device itself, allowing the device to remain relatively simple while still achieving secure authentication through the server's verification process.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If secure storage section is added to peripheral device for storing certificate data, then authentication reliability is improved, but device complexity and manufacturing costs increase

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidcomplexity of peripheral device structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by pre-storing certificate data in the secure storage section of the peripheral device during manufacturing. This authentication credential is prepared in advance, allowing the device to present it when needed without having to generate or manage complex authentication logic at runtime. The secure storage section is integrated into the device structure, providing hardware-level protection for the certificate data.

Inventive Principle:
Principle #10Preliminary action

3Object-affected harmful factors

If server-based authentication is implemented, then security against unauthorized devices is improved, but running costs for server maintenance and data transmission increase

Engineering Contradiction:
Improveprotection against unauthorized devicesVSAvoidrunning costs for server operations
Core Design Contradiction:
Object-affected harmful factorsVSLoss of energy

Solution Approach 1:

The patent implements self-service by enabling the peripheral device to perform self-authentication using the certificate data stored in its secure storage section. The device can independently present its certificate to the server for verification without requiring continuous server supervision or manual authentication. This reduces the server's operational burden and associated running costs, as the authentication process is initiated and largely executed by the device itself with minimal server intervention.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10291412B2Information processing system, wireless communication chip, peripheral device, server, computer-readable non-transitory storage medium having application program stored therein, and information processing method
Publication Date: 2019.05.14 NINTENDO CO LTD
  • US10291412B2 patent drawing
  • US10291412B2 patent drawing
  • US10291412B2 patent drawing

AI summary

An information processing system is provided that includes a server, a communication terminal, and a peripheral device. The peripheral device includes a secure storage section with a secure region. The secure region is accessible by internal component of the peripheral device. Certificate data is read out from the secure region and transmitted to the server. The server performs authentication, on the basis of the certificate data, regarding whether the peripheral device is a peripheral device whose connection to the communication terminal is permissible. In response to authentication of the peripheral device, execution of a process that involves transmission and reception of encrypted data is permitted between the peripheral device and the communication terminal.