Smart Device Network Provisioning With Short-Range Encrypted Broadcast
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current smart household devices face challenges in network configuration with slow speed, complex steps, and low success rates, lacking adaptability, security, and high costs.
Innovation Solution
A network configuration method and apparatus for intelligent devices that utilize short-distance transmission mode with encrypted communication, using a first terminal to broadcast and receive discovery and response packets, and decrypt encrypted router information without establishing point-to-point secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional SoftAP method is used for network configuration, then point-to-point secure communication can be established, but the configuration process becomes complex and time-consuming
Solution Approach 1:
The patent extracts the secure communication establishment step from the traditional SoftAP method. Instead of requiring the terminal to establish point-to-point secure communication with the intelligent device, the system uses broadcast packets where the intelligent device directly provides encrypted router information to the terminal. This removes the complex mutual authentication and key exchange processes while maintaining security through encrypted information transmission.
Solution Approach 2:
The network configuration process is segmented into distinct broadcast-based communication stages. The discovery packet, response packet with device ID, and network configuration packet with router information are transmitted as separate broadcast messages. This segmentation eliminates the need for continuous point-to-point communication channels and simplifies the overall configuration flow.
2Reliability
If traditional SoftAP method is used for network configuration, then secure communication can be established, but the configuration time increases
Solution Approach 1:
The intelligent device performs preliminary actions by pre-generating and including encrypted router information in the broadcast response packet. The device prepares the network configuration data in advance and transmits it through broadcast packets before any secure channel establishment is attempted. This preliminary preparation eliminates time-consuming real-time encryption and authentication exchanges during the configuration process.
Solution Approach 2:
The patent skips the traditional multi-step secure channel establishment process. By using broadcast packets that carry pre-encrypted router information, the system rushes through the configuration process in fewer steps, directly providing the terminal with the necessary network credentials without lingering in intermediate authentication stages.
3Ease of operation
If broadcast packets are used for communication, then configuration process is simplified, but information security may be compromised
Solution Approach 1:
The patent applies parameter changes by encrypting the router information (SSID and password) within the broadcast packets using encryption algorithms. The encryption parameter transforms the sensitive information into secure format, allowing broadcast transmission without exposing plaintext credentials to potential eavesdroppers. This maintains simplicity while mitigating security risks through cryptographic protection.
Solution Approach 2:
Encryption acts as an intermediary mechanism between the intelligent device and the terminal. The encrypted router information serves as a mediated form of communication that protects sensitive data during transmission. The terminal receives and processes the encrypted information without exposing the actual credentials, with decryption occurring securely on the receiving end.
Data Source
AI summary
Embodiments of this application disclose a network configuration method and apparatus for an intelligent device. A terminal broadcasts a first discovery packet to the intelligent device. After the intelligent device receives the first discovery packet, the intelligent device broadcasts a first response packet in a short-distance transmission mode. In the short-distance transmission mode, a sending distance of the first response packet does not exceed a first safe distance. The terminal obtains information related to the intelligent device based on the first response packet, performs validity authentication on the intelligent device, and broadcasts an SSID and a password that are of a router and that are encrypted to the intelligent device after the terminal verifies that the intelligent device is valid. The intelligent device accesses the router based on the SSID and the password that are of the router and that are obtained through decryption.