Wireless Network Secret Sharing via Voice Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The sharing of secret information to access wireless computing networks is challenging when no security context has been established between source and target subjects, leading to security vulnerabilities such as man-in-the-middle attacks, especially in scenarios like guest access to Wi-Fi networks where complex passphrases are difficult to manage and prone to errors.
Innovation Solution
A method involving the transmission of a public key from a target device, generation and transmission of a verification token, and subsequent encryption of the secret information with the public key, allowing only authorized devices to access the network by uttering the verification token, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If secret information is shared without establishing a security context first, then network access can be granted quickly, but security vulnerabilities such as man-in-the-middle attacks occur
Solution Approach 1:
The system performs preliminary actions by generating and exchanging cryptographic key pairs before actual network access. The source device generates a public-private key pair, shares the public key with the target device, and uses this pre-established cryptographic context to securely transmit the verification token and secret information without requiring manual passphrase entry, thus maintaining both security and access speed
Solution Approach 2:
The patent introduces cryptographic intermediaries (public keys and verification tokens) to mediate the secure sharing of secret information. Instead of directly sharing passphrases, the system uses public keys as intermediaries for encrypted communication and verification tokens as intermediaries for authentication, eliminating the need for manual passphrase transmission while preventing man-in-the-middle attacks
2Reliability
If complex passphrases are used for network security, then security is improved, but ease of operation deteriorates due to difficulty in management and entry errors
Solution Approach 1:
The patent replaces the mechanical system of manual passphrase entry and management with an automated cryptographic system. Instead of requiring users to manually type complex passphrases, the system automatically generates cryptographic keys, establishes secure channels, and transmits authentication tokens, thereby maintaining strong security while dramatically improving ease of operation
Solution Approach 2:
The system implements self-service by automatically performing cryptographic key generation, exchange, and verification without human intervention. The source and target devices autonomously establish secure communication channels and authenticate each other using generated tokens, eliminating the need for users to manually manage complex passphrases while maintaining security
Data Source
AI summary
A solution is proposed for sharing secret information for accessing a wireless computing network. A corresponding method for distributing the secret information by a source (computing) device comprises receiving a public key of the a target (computing) device, transmitting a verification token to the target device, receiving an utterance of the verification token and transmitting the secret information encrypted with the public key in response to the utterance of the verification token. A corresponding method for obtaining the secret information by a target (computing) device comprises transmitting a public key of the target device, receiving a verification token, outputting the verification token and receiving the secret information encrypted with the public key in response to an utterance of the verification token. Corresponding computer programs and computer program products are also proposed. Moreover, a source computing device and a target computing device for implementing the methods are proposed.