Secure Home Network Pairing via Transmission Power Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing home network communication systems face challenges in securing communication channels, particularly in preventing unauthorized access to actuators, as they often require unsecured initial connections for exchanging cryptographic keys or passwords.

Innovation Solution

Reducing transmission power for exchanging predetermined messages, such as cryptographic keys, within a home network to limit communication range and enhance security, allowing only authorized entities to receive these messages, and then increasing power for regular communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If transmission power is reduced for exchanging cryptographic keys, then security against eavesdropping is improved, but communication range is limited

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication range
Core Design Contradiction:
ReliabilityVSLength of stationary object

Solution Approach 1:

The communication process is segmented into two distinct phases: a key exchange phase using reduced transmission power for secure key distribution, and a normal communication phase using full transmission power for regular data exchange. This segmentation allows the system to achieve both security and adequate communication range by applying different power levels for different purposes.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The cryptographic keys are exchanged in advance during the pairing process using reduced transmission power before normal communication begins. This preliminary secure key exchange enables subsequent encrypted communications to be performed with full transmission power without compromising security, as the sensitive key material has already been securely distributed.

Inventive Principle:
Principle #10Preliminary action

2Ease of operation

If unsecured initiation of communication connection is used for pairing, then ease of operation is improved, but security is worsened

Engineering Contradiction:
Improvepairing processVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The transmission power parameter is dynamically changed during the pairing process - reduced to a low power level specifically for the key exchange portion of pairing, then restored to normal levels for subsequent communication. This parameter change enables secure key exchange without requiring complex security procedures, maintaining ease of operation while improving security.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If transmission power is reduced exclusively for sending predetermined messages, then security is improved, but energy consumption increases

Engineering Contradiction:
Improvetransmission securityVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

Instead of reducing transmission power for all communications, the system applies reduced power only partially - specifically for the brief key exchange messages during pairing. The majority of communication traffic occurs after pairing at normal power levels, so the total energy impact is minimal while achieving the security benefit for the critical key distribution phase.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentEP2890191B1Method for secure communication in a communication network
Publication Date: 2017.10.11 DEUTSCHE TELEKOM AG
  • EP2890191B1 patent drawingFigure 1
  • EP2890191B1 patent drawingFigure 2

AI summary

The invention relates to a method (500) for secure communication between communication entities in a communication network. The method comprises reducing (501) the transmission power of a first communication entity (201) and transmitting (502) a predetermined message with the reduced transmission power from the first communication entity (201) to a second communication entity (202).