PROX Card Access Control for Private Accessory Pairing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Third-party applications on mobile devices are granted persistent and unfettered access to various accessory devices via radios, posing privacy and security risks by allowing unauthorized access and data collection.
Innovation Solution
Implementing a system that restricts radio access to accessory devices through an authentication database, where user-selected and application-specific permissions are stored, ensuring only approved devices can communicate with third-party applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If third-party applications are granted persistent and unfettered access to accessory devices via radios, then application functionality and ease of operation are improved, but security and privacy risks increase due to unauthorized access and data collection
Solution Approach 1:
The patent segments radio access permissions by creating an authentication database that stores application-specific and accessory device-specific permission records. This divides the previously unified access control into granular segments, allowing each third-party application to access only specific accessory devices rather than having universal access. The segmentation enables selective permission granting while maintaining system-wide security.
Solution Approach 2:
The patent introduces an intermediary authentication database between third-party applications and accessory devices. This intermediary layer verifies permissions before allowing communication, acting as a mediator that prevents direct unauthorized access. The database stores authentication records and enforces permission policies, serving as a security gatekeeper that maintains both functionality and security.
2Object-affected harmful factors
If radio access to accessory devices is restricted through authentication database, then security and privacy are improved, but device complexity and access control mechanisms increase
Solution Approach 1:
The authentication database is configured to automatically verify permission records without requiring manual intervention for each access request. When a third-party application attempts to communicate with an accessory device, the system autonomously checks the authentication database, retrieves the relevant permission record, and enforces the access control policy. This self-service mechanism reduces operational complexity while maintaining security.
Solution Approach 2:
The patent implements preliminary action by pre-storing authentication permission records in the database before access is needed. Permission records are created and stored in advance, containing application identifiers, accessory device identifiers, and authorized radio types. This preliminary setup eliminates the need for complex real-time permission negotiation, simplifying the access control process while maintaining security.
Data Source
AI summary
A method of secure accessory device discovery and radio pairing. The method may comprise, receiving, at a network access routine of a first device, data from a first application. The data may indicate one or more properties of an accessory device for communication with the first application. A list of one or more accessory devices capable of being connected to the first device via the radio may be determined through a radio of the first device. The network access routine may display an overlap list and receive a user selection responsive to the displayed list. The selection may be stored in an authentication database of the first device and radio communication by the first application may be restricted to accessory devices in the authentication database.