Secure Device Pairing via Static ID Derivation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current wireless network security mechanisms are complex and prone to user errors, often leading to insufficient security due to pragmatic human limitations, and may not be cost-effectively implemented, resulting in unsecured networks.

Innovation Solution

A method for secure communication between devices using a predetermined static identification, where a pairing message is generated and transmitted between a registrar and an enrollee, allowing for secure pairing and encryption without requiring extensive user interaction or additional costly interfaces, utilizing pre-assigned or registrar-assigned seed values.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complex wireless security mechanisms are implemented, then network security is improved, but user operation complexity increases and user adoption decreases

Engineering Contradiction:

Improvenetwork securityVSAvoiduser operation

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs security configuration automatically without requiring user input. The enrollee device self-generates a pairing identification from its static identification, and both devices automatically complete the pairing process through message exchange, eliminating the need for manual password entry or complex user interactions

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

A pairing message acts as an intermediary carrier that conveys security information between the enrollee and registrar devices. The pairing message contains the pairing identification generated from the static identification, enabling secure authentication without direct exposure of sensitive security credentials

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If simplified push-button security is used with fixed seed values, then ease of operation is improved, but security reliability deteriorates due to predictable seed values

Engineering Contradiction:

Improvesecurity setup simplicityVSAvoidsecurity strength

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system changes the seed value parameter from fixed (zero or static) to variable by deriving it from the device's static identification, which is unique to each device. This ensures that each device generates a distinct pairing identification, preventing security compromises that would affect all devices using the same fixed seed value

Inventive Principle:

Principle #35Parameter changes

3Reliability

If variable seed values requiring multiple button presses are implemented, then security is improved, but ease of operation deteriorates due to human limitations

Engineering Contradiction:

Improvesecurity configurationVSAvoiduser interaction requirements

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The pairing identification is pre-generated by the enrollee device from its static identification before the actual pairing process. This preliminary generation eliminates the need for users to perform repetitive actions during setup, as the security credentials are already prepared and can be automatically exchanged

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system automatically generates and transmits the pairing message containing the pairing identification without requiring user input. The enrollee device autonomously completes the security configuration process, eliminating the need for users to push buttons multiple times or enter complex sequences

Inventive Principle:

Principle #25Self-service

4Reliability

If eight-digit identification entry interfaces are added to access points, then security configuration capability is improved, but device cost and complexity increase

Engineering Contradiction:

Improvesecurity setup capabilityVSAvoidaccess point interface requirements

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The enrollee device autonomously generates the pairing identification from its own static identification and initiates the pairing process by transmitting a pairing message to the registrar. This eliminates the need for the registrar device to have complex input interfaces for receiving security credentials

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

Instead of the registrar device providing an interface for users to input identification numbers, the system inverts the approach by having the enrollee device generate and transmit the pairing identification automatically. The registrar only needs to receive and verify the pairing message, significantly simplifying its interface requirements

Inventive Principle:

Principle #13The other way round (Inversion)

Data Source

PatentUS9060267B2Secure pairing of networked devices

Publication Date: 2015.06.16 LINKSYS HOLDINGS INC

AI summary

In one embodiment, a secure communication is initiated between two devices by generating a pairing message from a predetermined static identification on the first device, transmitting the pairing message to the second device, generating a pairing identification from the static identification, and initiating a secure communication between the first and second device if the pairing message corresponds with the pairing identification.