Wireless LAN Password Negotiation via RSA Key Exchange

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing wireless LAN security mechanisms require complex setting procedures and are inconvenient for users, particularly in small-scale organizations, where memorizing passwords and performing settings is challenging, leading to potential security vulnerabilities due to laziness or insufficient ability.

Innovation Solution

A secure connection mechanism that automatically negotiates passwords between wireless client and access terminals using RSA encryption/decryption, where the wireless client terminal encrypts its public key and transmits it to the access terminal, which then encrypts a password and sends it back, ensuring only the client can decrypt it, eliminating the need for users to remember passwords or perform complex settings.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complex security mechanisms like WEP and WPA with password verification are implemented, then connection security is improved, but ease of operation deteriorates due to complicated setting procedures and password memorization requirements

Engineering Contradiction:

Improveconnection securityVSAvoidsetting procedure complexity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs automatic password generation and negotiation between the access terminal and client terminal without requiring user intervention. The access terminal generates a random password and automatically transmits it to the client terminal through the established wireless connection, eliminating the need for users to manually set or remember passwords while maintaining security

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The access terminal pre-generates a random password before the client terminal connects, and automatically transmits this password to the client terminal during the connection establishment process. This preliminary preparation of security credentials simplifies the user experience while ensuring secure authentication

Inventive Principle:

Principle #10Preliminary action

2Device complexity

If static WEP keys are used for global broadcast, then device complexity is reduced, but reliability deteriorates due to security vulnerabilities from static keys

Engineering Contradiction:

Improvekey management complexityVSAvoidsecurity strength

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The system transitions from static WEP keys to dynamic password generation. The access terminal generates a new random password for each connection session, and this password is automatically transmitted to the client terminal. This dynamic approach ensures that even if one password is compromised, subsequent connections remain secure, significantly improving reliability while maintaining simplicity

Inventive Principle:

Principle #15Dynamics

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enables rapid and secure wireless LAN connections without users needing to memorize passwords or perform complicated settings, enhancing security by preventing unauthorized decryption of keys and passwords, suitable for families, mini-scale enterprises, and offices.

Implementation Method 1

utilize the properties of RSA (Rivest-Shamir-Adleman) to establish the encryption/decryption mechanism between at least one wireless client terminal and at least one wireless access terminal

Methodology Applied

Scientific EffectRSA encryption:

Implementation Method 2

the another private key is stored in the wireless access terminal... only the wireless access terminal owns the another private key, thus only the wireless access terminal can decrypt the public key of the wireless client terminal

Methodology Applied

Scientific EffectRSA decryption:

Implementation Method 3

The mechanism enables an application software to produce two keys, one of which is a public key for encryption, and the another one is a private key for decryption

Methodology Applied

Scientific EffectPublic key encryption:

Implementation Method 4

without having the private key illegal persons cannot decrypt the password even if they has intercepted the confirmation packet

Methodology Applied

Scientific EffectPrivate key decryption:

Data Source

PatentUS7467302B2Secure connection mechanism capable of automatically negotiating password between wireless client terminal and wireless access terminal

Publication Date: 2008.12.16 ALPHA NETWORKS INC

AI summary

The present invention is to provide a secure connection mechanism capable of automatically negotiating password between a wireless client terminal and a wireless access terminal, wherein the wireless client terminal is provided with an application software, a control button and an output device. When the wireless client terminal is actuated and the control button is triggered, the secure connection mechanism is enabled by performing the steps of showing a prompt on the output device to instruct user to turn a switch button on the wireless access terminal to a secure connection mode and connecting the wireless client terminal with the wireless access terminal to establish an encryption/decryption mechanism for automatically negotiating a password required for the connection within a predetermined period through the encryption/decryption mechanism in a wireless communication way after being in the secure connection mode.