Secure Peripheral Pairing via Wired Connector Code Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile Point of Sale (mPOS) systems face security challenges in pairing communication terminals with peripheral devices, particularly due to the requirement of PCI PTS compliance, which prohibits the use of Bluetooth LE versions lower than 4.2, and there is a need for a secure pairing method that does not require a user interface on the peripheral device.
Innovation Solution
A method for secure pairing between a communication terminal and a peripheral device is implemented, using a processing module on the communication terminal to configure the pairing without a user interface on the peripheral device, utilizing complementary connectors for wired communication to transmit a pairing code, and enabling secure Bluetooth, Wi-Fi, or Wibree pairing, even with Bluetooth protocol versions less than 4.2, allowing the peripheral device to act as a master and generate a pairing code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a user interface is added to the peripheral device to enable secure pairing, then pairing security is improved, but device complexity and size increase
Solution Approach 1:
The user interface functionality is extracted from the peripheral device and relocated to the communication terminal. The peripheral device only transmits the pairing code through its connector, while the communication terminal's display and input interfaces handle the pairing interaction, thus maintaining security without adding complexity to the peripheral device.
Solution Approach 2:
The connector serving as a wired communication link acts as an intermediary that transmits the pairing code from the peripheral device to the communication terminal. This intermediary enables secure code transmission without requiring the peripheral device to have its own user interface for display or input.
2Reliability
If Bluetooth LE version 4.2 or higher is used to meet PCI PTS standard, then security compliance is improved, but compatibility with older devices deteriorates
Solution Approach 1:
Instead of requiring the peripheral device to have advanced Bluetooth 4.2 capabilities for secure pairing, the solution inverts the approach by using wired connector transmission of pairing code combined with the communication terminal's processing capabilities to achieve PCI PTS compliance, allowing older Bluetooth versions to be used.
Solution Approach 2:
The connector is designed to serve multiple functions: it acts as both the physical connection interface and the secure pairing code transmission channel. This multi-functionality enables PCI PTS compliant pairing through wired connection regardless of the Bluetooth version being used.
3Reliability
If a wired connector is used for pairing code transmission, then pairing security is improved, but ease of wireless pairing deteriorates
Solution Approach 1:
The wired connector pairing establishes a secure preliminary connection and exchanges pairing codes before wireless communication begins. This preliminary wired pairing ensures security compliance, after which the devices can communicate wirelessly with established trust.
Data Source
Figure 1~3
Figure 4
Figure 5
AI summary
The invention relates to a peripheral device (DP1) to be removably coupled to a communication terminal (T1), a device which comprises: - a connector (6A) cooperating, when said peripheral device is coupled to said communication terminal, with at least one complementary connector (6B) on the communication terminal so as to form a wired communication link (L1) between said peripheral device and the communication terminal; - a first wireless communication module (M2) capable of communicating with a second wireless communication module (M20) on the communication terminal when said wireless communication modules are paired with each other; - a receiving module (M4) for receiving, via the wired communication link (L1), an identifier (ID) of the communication terminal; - a generation module (M6) for generating, in response to said received identifier, a pairing code (CAP);and - a transmission module (M8) to transmit to the communication terminal, via the wired communication link, the pairing code so as to configure a pairing between said first and second wireless communication modules (M2, M20).;