Automated WLAN Device Onboarding via Common-Onboarding-Group
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for onboarding multiple wireless local area network (WLAN) devices require manual intervention for each device, making it time-consuming and inconvenient for users who own multiple WLAN-enabled devices.
Innovation Solution
A system and method for automatically onboarding a group of WLAN devices by exchanging a unique identifier, encryption algorithm, and secret key to form a common onboarding group, with credentials provisioned automatically for subsequent devices through an access point or a private onboarding network, minimizing user input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual onboarding method is used for each device, then credentials can be securely provisioned, but the process becomes time-consuming and labor-intensive when multiple devices need to be onboarded
Solution Approach 1:
The system performs preliminary actions by pre-establishing a secure communication channel between the onboarding server and devices before the actual onboarding process. The server pre-provides credentials and configuration data to the first device, which then automatically shares them with subsequent devices, eliminating the need for repeated manual credential entry for each device.
Solution Approach 2:
The system enables self-service by allowing the first onboarded device to automatically share its credentials with subsequent devices through the secure communication channel. The devices themselves perform the onboarding process without requiring repeated manual intervention, as the system automatically provisions credentials to multiple devices based on the initial manual setup.
2Productivity
If automated onboarding is implemented, then onboarding speed increases, but system complexity increases due to additional protocols and communication mechanisms
Solution Approach 1:
The system applies universality by creating a multi-functional onboarding mechanism where the first device serves multiple purposes: it acts as both a regular device and as an automatic credential distributor to subsequent devices. The secure communication channel serves multiple functions including credential transmission, device identification, and authentication, reducing the need for separate specialized components.
Solution Approach 2:
The system uses an intermediary approach by introducing an onboarding server as a mediator between the user's devices and the wireless network. This server handles the complex credential management and communication protocols, while the devices themselves remain relatively simple. The server acts as the intermediary that manages the complexity of automated onboarding for multiple devices.
3Adaptability or versatility
If individual manual onboarding is performed for each device, then each device can be configured independently, but the process becomes cumbersome when managing multiple devices
Solution Approach 1:
The system merges the onboarding processes of multiple devices into a single operation. Instead of manually configuring each device separately, the user performs one manual onboarding action for the first device, and the system automatically merges this configuration with subsequent devices through the secure communication channel, maintaining independence while reducing operational steps.
Solution Approach 2:
The system enables self-service by allowing the first device to automatically share its configuration with subsequent devices. The devices themselves perform the configuration sharing without requiring user intervention, maintaining the flexibility of individual device configuration while dramatically improving user convenience through automation.
Data Source
AI summary
Methods for seamlessly onboarding commonly owned wireless local area network (WLAN) enabled devices to a wireless network are provided. Generally, the method includes exchanging an UID, encryption algorithm and key between the devices to form a common-onboarding-group (COG), manually provisioning credentials to onboard a first device of the COG, and automatically provisioning credentials to onboard a second device. In one embodiment, the first device registers with the network the UID and an encrypted-connection-profile encrypted using the algorithm, the network responds to a probe from the second device with the UID and encrypted-connection-profile, and the second device decrypts the encrypted-connection-profile using the secret key and joins the network. In another embodiment, the first device monitors the network and responds to a probe from the second device with the UID and encrypted-connection-profile. Alternatively, after onboarding the first device starts a private network and provisions the second device with the connection-profile.