Secure Device Pairing via Dynamic Random Code Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for pairing portable communication devices with access devices are inconvenient, requiring user interaction and potentially compromising privacy, as they often involve broadcasting static device identifiers or requiring users to physically scan QR codes.
Innovation Solution
A method using random codes and personal tokens, where the portable communication device generates a random code and hashes it with the personal token, and the access device generates a matching hash to establish a secure communication channel, ensuring user privacy and hands-free operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access devices broadcast their identifiers over the air for scanning and selection, then devices can be paired, but the process requires user interaction and is time-consuming
Solution Approach 1:
The system performs preliminary actions by having the access device continuously broadcast its identifier before the user needs to pair, and by pre-establishing the connection parameters. The portable device can automatically detect and connect without requiring the user to manually select from a list, thus resolving the contradiction between ease of operation and time loss.
Solution Approach 2:
The pairing process is made self-service by enabling the portable communication device to automatically detect, select, and connect to the access device without requiring user intervention. The device autonomously completes the pairing process by exchanging identifiers and establishing the connection, eliminating the time-consuming manual selection step while maintaining ease of operation.
2Adaptability or versatility
If portable communication devices broadcast static identifiers, then devices can be discovered, but user privacy is compromised due to tracking
Solution Approach 1:
The system applies dynamics by making the identifier broadcasted by the portable communication device dynamic rather than static. The identifier changes over time or with each broadcast, preventing tracking while still allowing the access device to discover and connect to the portable device. This resolves the contradiction between adaptability for device discovery and protection against privacy loss.
Solution Approach 2:
The identifier parameter is changed from a static device identifier to a dynamic temporary identifier that is generated and broadcast periodically. This parameter change allows the device to be discovered by access devices while preventing unauthorized tracking, as the identifier is not consistent over time. The access device can still establish connections using these dynamic identifiers without compromising user privacy.
3Reliability
If users manually scan QR codes for connection, then secure pairing is achieved, but the process is inconvenient and requires physical proximity
Solution Approach 1:
The system replaces the mechanical action of manually scanning a QR code with an automated wireless exchange of identifiers. The access device broadcasts its identifier, and the portable device automatically receives and processes it, eliminating the need for physical proximity and manual scanning operations. This substitution maintains pairing security through cryptographic verification while dramatically improving ease of operation.
Solution Approach 2:
The connection establishment is made self-service by automatically exchanging identifiers and establishing secure connections without requiring the user to manually scan QR codes. The system autonomously performs the pairing process, maintaining security through verified identifier exchange while eliminating the inconvenience of manual operations and physical proximity requirements.
4Adaptability or versatility
If device identifiers are broadcast for connection, then pairing can be established, but wait time increases and transaction efficiency decreases
Solution Approach 1:
The system performs preliminary actions by having the access device continuously broadcast its identifier and by pre-configuring connection parameters before transactions are needed. This preliminary setup eliminates wait time during actual transactions, as the portable device can immediately connect without going through a discovery and selection process, thus improving transaction efficiency while maintaining device connectivity.
Solution Approach 2:
The access device continuously broadcasts its identifier and maintains readiness for connection, ensuring that the useful action of device pairing is always available. This continuous operation eliminates gaps and wait times that would otherwise occur during device discovery, thereby improving transaction efficiency without compromising the adaptability and versatility of device connectivity.
Data Source
AI summary
A method includes generating, by a portable communication device, a first random code and transmitting the first random code to an access device. The access device receives the first random code, generates a second random code, receives a personal token from a user of the portable communication device, and hashes the first random code, the second random code, and the personal token to form a first hash output. The first hash output and the second random code are received from the access device. The first random code, a stored personal token, and the second random code are hashed to form a second hash output. A determination is made if the first hash output and the second hash output are equal. A secure communication channel is formed between the portable communication device and the access device when the first hash output and the second hash output are equal.