Team Account Intermediary for Cross-Trust Device Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device sharing connection methods are limited to devices logged in by the same user account, restricting the applicable range of connections, such as screen projection between devices in different mutual trust rings.
Innovation Solution
A method for device sharing connection that involves creating a target team account and certificate, allowing devices in different mutual trust rings to authenticate and connect by matching team accounts and device roles, and using a transmission key for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If device sharing connection is limited to devices logged in by the same user account, then authentication security is maintained, but the applicable range of connections is restricted
Solution Approach 1:
The patent introduces a team account as an intermediary layer between user accounts and devices. Instead of directly linking devices to user accounts, the team account serves as a mediator that can associate multiple devices from different user accounts. This resolves the contradiction by enabling broader device connectivity (improving adaptability) while maintaining security through the team account's authentication mechanism (preserving reliability).
2Adaptability or versatility
If team account matching is implemented across different mutual trust rings, then device connectivity is expanded, but authentication complexity increases
Solution Approach 1:
The team account is designed with universal functionality that works across different mutual trust rings. It can authenticate devices from various user accounts and different trust rings using a unified authentication flow. This multi-functionality expands device connectivity while avoiding the need for multiple separate authentication mechanisms, thereby managing complexity rather than increasing it.
Solution Approach 2:
The team account and its relationship with devices are pre-configured before actual device sharing operations. Devices are registered with the team account in advance, establishing trust relationships beforehand. This preliminary setup simplifies the actual authentication process during device sharing, as the complex verification has already been performed during registration.
3Reliability
If role combination conditions are added to device authentication, then connection security is improved, but the operation process becomes more complex
Solution Approach 1:
The patent changes the authentication parameters from simple user account matching to a multi-parameter verification system that includes team account matching, device role identification, and role combination validation. This enhanced parameter set improves connection security by verifying multiple aspects of the authentication request, while the system automatically manages the complexity of these parameters.
4Adaptability or versatility
If devices in different mutual trust rings can connect, then sharing functionality is enhanced, but trust verification difficulty increases
Solution Approach 1:
The team account acts as a trusted intermediary that bridges devices from different mutual trust rings. Instead of directly verifying trust between devices from different rings (which would be difficult), the system verifies trust through the team account that both devices are associated with. This intermediary approach enables enhanced sharing functionality while managing trust verification through a centralized, reliable mechanism.
Data Source
AI summary
A method for device sharing connection includes: obtaining, in response to that a connection request message sent by a target device is received, a first team account for the target device according to the connection request message; obtaining, when the first team account matches a second team account for the user device, a first device role of the target device; sending, when determining that the first device role and a second device role of the user device meet a role combination condition, response information to the target device to execute device authentication; and creating, when determining that the device authentication succeeds, a sharing connection with the target device.