Communication Apparatus Discarding WEC Data for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for establishing a wireless connection between a communication apparatus and an access point lack sufficient security, particularly in configurations using Wi-Fi Easy Connect (WEC) where Bootstrapping information, including public keys, is vulnerable to inference and brute force attacks.
Innovation Solution
The communication apparatus implements a mechanism to discard held WEC-related information after a successful connection is established, allowing for periodic updates of key pairs and enhancing security by limiting exposure to potential vulnerabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If WEC-related information is held for establishing wireless connections, then connection capability is maintained, but security is compromised due to vulnerability to inference and brute force attacks
Solution Approach 1:
The patent implements automatic discarding of WEC-related information (including public keys and Bootstrapping data) after successful connection establishment. The holding unit stores this information temporarily during connection setup, then the discarding control unit automatically deletes it after the connection is established, preventing long-term exposure to inference and brute force attacks while maintaining connection capability during the necessary operational window
Solution Approach 2:
The system performs periodic updates of key pairs and automatic discarding of old WEC-related information. This periodic action ensures that even if information is compromised, the window of vulnerability is limited to the current operational period, and new key pairs are generated and deployed periodically to maintain ongoing security
2Object-affected harmful factors
If WEC-related information is discarded after connection, then security is improved, but connection establishment time is extended
Solution Approach 1:
The holding unit pre-stores WEC-related information (public keys, Bootstrapping data) before connection establishment is needed. This preliminary storage allows the reception control unit to quickly receive and process connection requests without delay, while the discarding control unit automatically deletes the information after use. This eliminates the need for time-consuming real-time key generation during connection setup
Solution Approach 2:
The system rushes through the connection establishment process by using pre-stored WEC-related information to quickly establish connections, then immediately discards the information. This skipping of the information retention phase after use minimizes the time window for security vulnerabilities while maintaining fast connection establishment during the critical setup period
Data Source
AI summary
A communication apparatus includes: a holding control unit configured to perform control such that a holding unit holds information to be used for communication for establishing a wireless connection according to a first connection method between an external access point and the communication apparatus; a reception control unit configured to perform control so as to receive a request transmitted from an information processing apparatus based on the held information; a communication control unit configured to perform control so as to execute communication for establishing the wireless connection according to the first connection method based on the request received by the reception control unit; and a discarding control unit configured to perform control so as to discard the information held in the holding unit based on the reception control unit having received the request.