Smart Device Verification Update via Session Random Number

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional verification methods for smart devices in IoT systems are insecure due to the use of preset verification numbers and passwords, making them susceptible to masquerade and attack.

Innovation Solution

A method and apparatus for dynamically updating verification information for smart devices using a session random number generated based on a binding relationship between a smart device's UUID and a user identifier, enhancing security by preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If preset verification numbers and passwords are used for smart devices, then device initialization is simple and verification information is easy to manage, but security is compromised making devices susceptible to masquerade and attack

Engineering Contradiction:

Improveease of device initializationVSAvoidsecurity

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

The patent implements dynamic verification information by introducing session random numbers that change with each binding operation. The verification number and password are no longer static preset values but dynamically generated based on the session random number, making each verification instance unique and preventing reuse of old verification data

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent changes the verification parameters from fixed preset values to dynamically generated values based on session random numbers. The verification number transforms from a static factory-preset value to a dynamic value computed as hash(key_id + session_random_number), and the password similarly transforms from static to dynamic, ensuring security while maintaining ease of initialization

Inventive Principle:

Principle #35Parameter changes

2Productivity

If identical verification numbers and passwords are assigned to same type of smart devices, then mass production is efficient, but security is weakened enabling easy masquerade

Engineering Contradiction:

Improvemass production efficiencyVSAvoidsecurity

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent segments the verification information into device-specific components (key_id unique to each device) and session-specific components (session_random_number). This segmentation allows efficient mass production with unique device identifiers while ensuring each device has distinct verification credentials that prevent masquerade attacks

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The verification information becomes dynamic through the session random number component that changes with each binding operation. While device key_id remains static for identification purposes, the actual verification password becomes dynamic (hash(key_id + session_random_number)), preventing reuse across different sessions and devices

Inventive Principle:

Principle #15Dynamics

3Reliability

If verification information is updated dynamically using session random numbers, then security is enhanced preventing masquerade and attack, but system complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces the terminal device as an intermediary that facilitates the binding process between the smart device and server. The terminal device receives the session random number from the server and transmits it to the smart device, simplifying the complexity by distributing the coordination burden to a user-friendly interface rather than requiring direct complex interaction between smart device and server

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The smart device autonomously computes the new verification number and password using the session random number received from the terminal device. The device performs the hash computation and updates its own verification information without requiring server-side processing for each update, reducing overall system complexity by enabling self-service verification information generation

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS10880306B2Verification information update

Publication Date: 2020.12.29 SUPPLYPIKE LLC

AI summary

A verification information update method includes: receiving a first request message for binding to a smart device from a terminal device, the first request message carrying a universally unique identifier (UUID) of the smart device; determining a binding relationship between the UUID and a user identifier of the terminal device, and generating a session random number corresponding to the binding relationship; and generating a new verification number and a new verification password of the smart device based on the session random number. The technical solution of the present disclosure implement dynamic update of verification information during a session, thus increasing the difficulty in monitoring the verification information during update.