Wireless Device Pairing via Pre-Distributed Secret Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems, such as Wi-Fi Direct, require multiple user pairing steps for devices to establish direct connections, leading to inefficiencies and security vulnerabilities, particularly in wireless docking scenarios where latency and user convenience are critical.
Innovation Solution
A system that uses multiple secret data sets to establish secure direct connections between devices, minimizing user pairing and preventing eavesdropping, by generating and distributing third secret data for automated pairing within a group of devices, allowing any capable device to act as an entry point for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple user pairing steps are performed for each direct connection, then security is improved, but device complexity and time consumption increase
Solution Approach 1:
The system performs preliminary pairing actions by establishing secure connections between group members and the first device before direct connections are needed. The third secret data is pre-distributed to all group members through the first secure connection, so when direct connections are established later, the pairing process is automated and does not require repeated user actions.
Solution Approach 2:
The first wireless device acts as an intermediary that facilitates secure direct connections between other group members. It distributes the third secret data to all group members through secure connections, enabling them to establish direct connections without requiring each pair to perform separate pairing procedures.
2Reliability
If traditional pairing procedures are used for each direct connection, then security is maintained, but latency increases
Solution Approach 1:
The third secret data is distributed in advance through secure connections before direct connections are established. This preliminary distribution of pairing credentials eliminates the need for time-consuming pairing procedures when direct connections are needed, reducing latency while maintaining security.
3Device complexity
If indirect communication through access point is used, then device simplicity is maintained, but connection speed and latency worsen
Solution Approach 1:
The communication system is segmented into two types of connections: indirect communication through the access point for control and coordination, and direct connections for data transmission. This segmentation allows devices to maintain simple infrastructure while achieving high-speed direct communication when needed.
4Adaptability or versatility
If direct connections are established without pre-distributed secret data, then connection flexibility is improved, but security worsens due to eavesdropping risks
Solution Approach 1:
The system performs preliminary distribution of the third secret data to all group members through secure connections before direct connections are established. This allows devices to connect flexibly without repeated pairing while maintaining security, as the pre-distributed secret data enables secure authentication.
5Reliability
If user pairing actions are required for each connection, then security is improved, but ease of operation worsens
Solution Approach 1:
The system performs preliminary distribution of pairing credentials (third secret data) to all group members through secure connections. This eliminates the need for repeated user pairing actions when direct connections are established, improving ease of operation while maintaining security through the pre-distributed credentials.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
System for wireless communication comprises a group of wireless devices (110,120,130,140) that include at least one wireless host device (100) securely connected based on first secret data (240) shared by the group. A second secure connection is set-up between a portable wireless device (200) and a wireless host device based on second secret data (250). At least one of the wireless devices is instructed to apply a third secret data for setting up a direct wireless secure connection with the portable wireless device (200). Also the portable wireless device is instructed via the second secure connection to apply the third secret data for setting up the direct secure connections with the wireless devices based on the third secret data. Finally a respective direct wireless secure connection is set-up between the second device and a respective wireless device based on the third secret data. Advantageously latency is reduced in a secure wireless docking system.