Wireless Reconfiguration of Public Key Type for Cryptographic Upgrades

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing wireless networking standards like DPP do not provide a method for securely upgrading cryptographic strength without requiring manual intervention or cumbersome processes, especially for devices with limited user interfaces.

Innovation Solution

A method and system for configuring Enrollee devices to use a new cryptographic key type by sending a message indicating the selection of a new public key type, allowing automatic reconfiguration without manual resets, using a configuration protocol that supports multiple key types and enabling secure authentication with improved cryptography.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic strength is upgraded by reconfiguring devices with new key types, then security reliability is improved, but device complexity and reconfiguration difficulty increase

Engineering Contradiction:

Improvecryptographic securityVSAvoidreconfiguration complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the cryptographic parameters (key type, curve type) during reconfiguration by selecting a new public key type from available options. The configurator sends a message indicating the selected new public key type, and the enrollee device reconfigures its cryptographic parameters accordingly, upgrading from weaker to stronger cryptography without changing the device hardware or basic protocol structure.

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The patent performs preliminary actions by having the configurator select and indicate the new public key type before actual reconfiguration occurs. The message containing the selection of new public key type is sent in advance, allowing the enrollee device to prepare for reconfiguration with the specified cryptographic parameters before the process begins.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If manual intervention is required for cryptographic reconfiguration, then security control is improved, but ease of operation deteriorates

Engineering Contradiction:

Improvesecurity controlVSAvoidreconfiguration ease

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent enables self-service reconfiguration where the enrollee device automatically processes the cryptographic upgrade based on the configurator's message indicating the new public key type. The device autonomously selects from available key types, performs the reconfiguration, and completes authentication without requiring manual user intervention, while still maintaining security control through the structured protocol.

Inventive Principle:

Principle #25Self-service

3Reliability

If QR-code scanning is used for device pairing, then authentication reliability is improved, but ease of operation deteriorates

Engineering Contradiction:

Improveauthentication reliabilityVSAvoidpairing simplicity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical/optical system of QR-code scanning with an electronic message exchange system. Instead of requiring visual scanning and manual entry, the configurator sends an electronic message containing the selection of new public key type through the communication interface, which the enrollee device automatically processes, eliminating the need for QR-code scanning while maintaining authentication reliability through cryptographic verification.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

4Adaptability or versatility

If multiple public key types are supported for flexibility, then adaptability is improved, but device complexity increases

Engineering Contradiction:

Improvekey type flexibilityVSAvoidconfiguration complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements multi-functionality by enabling the enrollee device to support multiple public key types (e.g., different elliptic curves) within a single configuration. The device can select from available key types based on the configurator's indication, allowing it to adapt to different security requirements and cryptographic standards without requiring separate hardware or software configurations for each key type.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12526136B2Securely changing cryptographic strength during reconfiguration

Publication Date: 2026.01.13 KONINKLIJKE PHILIPS NV

AI summary

There is provided a method, Configurator and Enrollee devices and a system thereof. The method is one of configuring an Enrollee device for communications in a wireless network, the method be arranged for execution by a Configurator device (9) and an Enrollee device. The Configurator and Enrollee devices may be arranged to communicate using a wireless communication protocol and participate in a configuration protocol, the configuration protocol being arranged to configure the Enrollee device to communicate in the wireless network, the Enrollee device having been previously configured to communicate in the wireless network. The method comprises executing a configuration protocol, which comprising sending by the Configurator device a message comprising an indication of a selection of a type of public key, the type of public key being selected from a plurality of types of public key obtained from the Enrollee device, wherein the type of public key selected is to be used for a specific purpose and the type of public key selected is different from a previous type of public key used by the Enrollee device for the same specific purpose as part of a previous configuring of the Enrollee device to communicate in the wireless network.