Web-Based Device Pairing via Server-Managed PIN Codes

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for device discovery and pairing in local networks, such as those using UDP-based protocols or Wi-Fi AP mode, are costly and vulnerable to brute-force attacks, and require dedicated applications or hardware features like Wi-Fi AP and Bluetooth, which increase device costs and user complexity.

Innovation Solution

A communication system that generates and manages short PIN codes and longer pairing codes for device registration and pairing, allowing Web front-end control without the need for dedicated applications or additional hardware features, using a server to manage PIN and pairing codes and handle authentication, thereby reducing costs and enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If a passcode-based pairing method is used, then pairing can be achieved without additional hardware, but the system becomes vulnerable to brute-force attacks

Engineering Contradiction:

Improvepairing implementationVSAvoidsecurity against brute-force attacks

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

The pairing code is divided into two parts: a short display code shown on the device screen and a long secret key stored securely. This segmentation allows the display code to be short and user-friendly while the secret key provides strong security against brute-force attacks.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A server acts as an intermediary to manage pairing codes. The server generates and stores long secret keys, receiving the short display code from the device and the user input from the control device, then verifies pairing by comparing the user input with the stored secret key.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If Wi-Fi AP mode or Bluetooth features are incorporated in the device, then device discovery and pairing can be achieved, but device costs increase

Engineering Contradiction:

Improvedevice discovery and pairingVSAvoidhardware features

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The complex hardware features (Wi-Fi AP mode, Bluetooth) are extracted from the controlled device and relocated to the server. The controlled device only needs basic network connectivity and a display, while the server handles all pairing code generation, storage, and verification.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The server provides universal pairing functionality for multiple devices without requiring each device to have specialized hardware. The same server infrastructure can manage pairing for numerous devices using only their basic network and display capabilities.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If a sufficiently long passcode is used to increase resistance to brute-force attacks, then security improves, but user input complexity and error rate increase

Engineering Contradiction:

Improveresistance to brute-force attacksVSAvoiduser input

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS10511671B2Communication device, communication method, controlled device, and non-transitory computer readable medium

Publication Date: 2019.12.17 KK TOSHIBA

AI summary

According to one embodiment, a communication device includes: processing circuitry configured to: generate a first code in response to a first code generation request being received, the first code generation request including address information of a service which is provided by a device to a control device, and transmit the first code to the device; manage such that the first code is held in association with the address information; and receive an address acquisition request including the first code from the control device, and transmit the address information associated with the first code to the control device on condition that the first code included in the address acquisition request is held in association with the address information.