Wireless Network Setup Using Multicast Packets and Device Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless local-area networks (WLANs) face challenges in securely distributing a shared secret key to all stations without risking unauthorized access, as transmitting the key unencrypted is insecure and requires physical connection or complex user configuration.
Innovation Solution
An apparatus and method that utilize multicast packets with an encrypted wireless network security string, where a receiver generates a wireless network security key based on an encrypted string received in the packets, using a device-specific key, ensuring secure key distribution compliant with IEEE 802.11 standards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the shared secret key is transmitted unencrypted over the WLAN, then the setup process is simple and fast, but unauthorized parties can intercept the key and gain access to the network
Solution Approach 1:
The patent introduces a wired connection (USB, serial, or Ethernet cable) as an intermediary secure channel to transfer the security string from the host computer to the wireless device. This mediator allows the key material to be transmitted without exposing it to wireless interception, thus maintaining security while enabling automated setup.
Solution Approach 2:
The patent divides the key distribution process into two separate stages: (1) secure transmission of the security string through a wired connection, and (2) wireless communication using the established security. This segmentation allows each stage to use the most appropriate transmission method for its security requirements.
2Reliability
If each station is connected by cable to a PC for key distribution, then security is maintained, but the setup process becomes complex and time-consuming
Solution Approach 1:
The patent enables the wireless device to automatically generate its own security credentials (BSSID, security string) and configure itself to join the network. The host computer simply provides the initial security string, after which the device autonomously completes the setup process, eliminating the need for manual configuration of IP addresses, SSIDs, and other network parameters.
Solution Approach 2:
The patent performs preliminary key generation and security string creation on the host computer before the wireless device joins the network. The security string is pre-encrypted and prepared in advance, so that when the device connects via cable, the configuration can be rapidly transferred without requiring real-time interaction or complex setup procedures.
3Reliability
If manual configuration is required for each station, then security can be controlled, but user patience and technical knowledge are required
Solution Approach 1:
The wireless device automatically generates and configures its own network parameters including BSSID, security string, and encryption settings. The user only needs to initiate the process by connecting via cable, after which the device autonomously completes all configuration steps, making the process accessible to non-technical users while maintaining security controls.
Solution Approach 2:
The wired connection serves as a secure intermediary channel that allows the host computer to programmatically configure the wireless device without requiring the user to manually enter or understand complex security parameters. The configuration data is automatically transferred and applied, eliminating the need for user technical knowledge while maintaining security integrity.
Data Source
AI summary
A method is described of adding a wireless device to a secure wireless local area network (WLAN) that is secured by a wireless network security key. A computer that is independent of the wireless device receives a device key specific to the wireless device, and generates encrypted data by encrypting, using the device key, the wireless network security key. The computer transmits, to the wireless device, a first packet over the WLAN. The first packet includes a multicast address, which includes at least a portion of the encrypted data. The method includes, in response to the wireless device receiving the first packet, decrypting the encrypted data received in the first packet to obtain the wireless network security key. The method includes the wireless device transmitting and receiving encrypted payloads over the WLAN, wherein the encrypted payloads are encrypted using the wireless network security key.