Wireless Interface Access Control via ACL

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless communication technologies, such as Bluetooth, pose security risks as they can be monitored and accessed by unauthorized devices, allowing potential unauthorized access to connected hardware, necessitating restricted access to prevent unauthorized communication.

Innovation Solution

Implementing an access control list (ACL) to restrict direct access to wireless communication interfaces, allowing only administrative and system accounts to access the radio driver, while providing indirect access through a smart card reader service application to ensure secure communication with specific devices like smart card readers, and disabling discoverability and connectability to reduce security threats.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If wireless communication interfaces are made accessible to users, then ease of operation is improved, but security is worsened due to potential unauthorized access and monitoring

Engineering Contradiction:
Improveuser access to wireless communicationVSAvoidunauthorized access and security risks
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent implements an access control list (ACL) that acts as an intermediary layer between users and wireless communication interfaces. The ACL intercepts and filters access requests, allowing only authorized applications and users to communicate wirelessly. This mediator mechanism resolves the contradiction by enabling legitimate user access while blocking unauthorized access attempts, thus maintaining both ease of operation for authorized users and security against unauthorized access.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If direct access to radio drivers is allowed for user accounts, then ease of operation is improved, but security is worsened due to potential misuse of wireless hardware

Engineering Contradiction:
Improvedirect hardware accessVSAvoidsystem security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent segments access rights by implementing an access control list that divides permissions into different categories: administrative accounts have full access, system accounts have limited access, and standard user accounts have no direct access to radio drivers. This segmentation resolves the contradiction by providing appropriate access levels - administrative users can directly access hardware when needed, while standard users must use approved applications, thus maintaining both operational ease for administrators and system security.

Inventive Principle:
Principle #1Segmentation

3Adaptability or versatility

If wireless discoverability is enabled, then adaptability is improved for connecting to devices, but security is worsened due to increased vulnerability to unauthorized connection attempts

Engineering Contradiction:
Improvedevice connectivityVSAvoidsecurity threats from unauthorized devices
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements a feedback mechanism where the access control list continuously monitors and evaluates incoming connection requests against authorized device criteria. When a discoverable device attempts to connect, the system provides feedback by either allowing or blocking the connection based on ACL permissions. This resolves the contradiction by maintaining discoverability for authorized devices while automatically rejecting unauthorized connection attempts, thus preserving adaptability for legitimate connections while enhancing security.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP1970832B1Restricting access to hardware for which a driver is installed on a computer
Publication Date: 2013.08.21 BLACKBERRY LTD
  • EP1970832B1 patent drawingFigure 1
  • EP1970832B1 patent drawingFigure 2

AI summary

Users (112) of a computer (200) are prevented from directly accessing certain hardware (216) for which a driver (224) is installed on the computer (200). The users (112) are provided a limited, indirect manner to access the hardware (216) for a specific purpose or to do a specific job. One example of such hardware is a wireless hardware communication interface (216). The wireless activity of the computer (200) may be restricted so that the wireless hardware communication interface (216) is prevented from communicating with any devices (104) compatible with the wireless hardware communication interface (216) other than one or more specific devices (106, 108).