Wireless Device WLAN Credential Provisioning Without Manual Input
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributing pre-shared keys (PSK) or simultaneous authentication of equals (SAE) passphrases for wireless devices is cumbersome and insecure, as they are exposed during manual distribution, and requires significant human intervention for updates or revocations.
Innovation Solution
A server transmits device-specific trust data and network access information to an access point (AP), enabling secure authentication and configuration of wireless devices without user input, using QR codes, Bluetooth low energy (BLE), or near field communication (NFC) for bootstrapping information transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pre-shared keys or SAE passphrases are distributed manually to wireless device owners, then device authentication capability is achieved, but security is compromised due to plain text exposure and human intervention risks
Solution Approach 1:
The patent introduces an access point as an intermediary that automatically distributes credentials to wireless devices. The access point receives credentials from a network administrator and autonomously provisions them to authorized devices, eliminating direct human-to-human credential sharing and the security risks associated with plain text exposure during manual distribution
Solution Approach 2:
The system enables wireless devices to automatically receive and configure their own credentials through the access point without requiring manual user input. The access point autonomously authenticates devices and provisions credentials, reducing human intervention while maintaining security
2Adaptability or versatility
If manual credential distribution is used for each wireless device, then individual device authentication is enabled, but time consumption and human cost increase significantly
Solution Approach 1:
The patent segments the credential distribution process into two parts: the network administrator retains control over credential generation and access point configuration, while the access point handles individual device provisioning autonomously. This segmentation allows scalable deployment where each device receives individualized credentials through automated processes rather than manual distribution
Solution Approach 2:
The access point serves as an automated intermediary that manages individual credential provisioning to multiple devices simultaneously. It receives authentication requests from wireless devices, verifies them against stored credentials, and automatically provisions appropriate access information, eliminating the need for administrators to manually configure each device
Data Source
AI summary
Embodiments of the present disclosure relate to transmission of network access information for wireless devices. A method comprises transmitting an authorization request for the wireless device to a server upon receiving a presence announcement message from a wireless device. The method further comprises receiving an authorization response from the server including network access information and bootstrapping information of the wireless device. The method further comprise performing authentication with the wireless device based on the bootstrapping information. The method also comprises transmitting the network access information to the wireless device. The network access information includes a service set identifier (SSID) for a wireless local area network (WLAN) and credential information for the mobile device to access the WLAN. By automatically distributing network access information to the wireless device without requiring any user input, the efficiency of device provisioning and the security of WLAN can be improved.