Secure Wireless Link Establishment Using IEEE 802.11 Probes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication technologies, such as WiFi networks, face challenges in securely connecting devices with limited user interfaces, like printers, to a secure wireless network, as they cannot easily input network passwords or credentials.
Innovation Solution
The method involves using probe requests and responses in IEEE 802.11 standards to establish a secure wireless link between devices, allowing them to exchange a shared secret and credentials for network access, even without a user interface, through a sequence of messages that can automate the pairing process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If wireless security protocols (WEP, WPA, WPA2) are implemented, then network security is improved, but devices with limited user interfaces cannot easily input passwords or credentials
Solution Approach 1:
The patent uses an intermediary device (such as a smartphone or computer) that already has network credentials to act as a mediator. This intermediary communicates with the accessory device having limited user interface, transferring credentials securely without requiring the accessory to directly input or store sensitive network passwords. The intermediary bridges the gap between secure credential storage and the accessory's limited input capabilities.
Solution Approach 2:
The patent implements preliminary action by pre-configuring network credentials on an intermediary device before the accessory needs to connect. The intermediary device already possesses the necessary network credentials and configuration, allowing it to assist the accessory in joining the network without requiring the accessory to perform complex credential input operations.
2Reliability
If manual password input is required for network connection, then network security is maintained, but user intervention and configuration time increase
Solution Approach 1:
The patent enables self-service by allowing the accessory device to automatically obtain and configure network credentials through the intermediary device. The accessory device performs self-configuration by receiving credentials from the intermediary and automatically joining the network, eliminating the need for manual user input and reducing configuration time while maintaining security through encrypted credential transfer.
3Ease of manufacture
If peripheral devices have limited user interfaces, then device simplicity and cost are improved, but ability to configure wireless network connection deteriorates
Solution Approach 1:
The patent implements universality by making the intermediary device perform multiple functions: it acts as a wireless network client, a credential storage device, a communication bridge, and a configuration assistant for the accessory. This multi-functional approach allows simple accessory devices to gain enhanced connectivity capabilities through the intermediary's diverse functions.
Solution Approach 2:
The intermediary device serves as a mediator that compensates for the accessory's limited user interface. It receives and processes complex wireless configuration commands, manages credential security, and communicates with the accessory through simplified interfaces, thereby enabling the accessory to achieve network connectivity despite its limited capabilities.
Data Source
AI summary
A secure wireless communication link (pairing) between two devices can be established using cleartext wireless transmissions between devices not joined to a network (“probes”). One device can broadcast a first probe indicating that it is seeking to establish a pairing. The other device can respond with a second probe, and the two devices can establish a shared secret, e.g., by exchanging further information using additional probes. Thereafter, either device can send a message to the other by encrypting the message using a cryptographic key derived from the shared secret; encrypted messages can also be sent within probes. The receiving device can extract an encrypted message from a probe and decrypt it using the cryptographic key. The encrypted message can include credentials usable by the receiving device to join a wireless network.