# US 10,122,685 B2 · Method for automatically establishing wireless connection, gateway device and client device for internet of things using the same > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,122,685 B2 - Document ID: US10122685B2 - Status: Granted - Kind: B2 - Application number: 14/957,608 - Filed: 2015-12-03 - Published: 2017-03-02 - Granted: 2018-11-06 - Earliest claimed: 2015-08-26 - Assignees: Tatung Co., Ltd.; Tatung University - Applicants: Tatung Company; Tatung University - Inventors: Fu-Chiung Cheng; Po-Chung Chang; Tai-Jee Pan - Web page: https://patentgrep.com/patent/US10122685B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 67/125: involving control of end-device applications over a network - H04W 12/08: Access security - H04W 48/20: Selecting an access point - H04W 76/10: Connection setup - H04W 84/04: Large scale networks; Deep hierarchical networks - H04W 84/12: WLAN [Wireless Local Area Networks] - H04W 88/16: Gateway arrangements - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method for automatically establishing a wireless connection, a gateway device and a client device for internet of things (IoT) using the same are provided. According to the provided method, SSID of the gateway device can be composed of an encrypted access password and an index, so that the client device may identify the gateway device to be connected according to the index within the SSID string and acquire the encrypted access password from the SSID string. Therefore, the client device can decrypt the encrypted access password. Accordingly, the wireless connection between the client device and the gateway device can be automatically established since the client device acquires the access password from the SSID of the gateway device. ## Claims ### Claim 1 A method for automatically establishing a wireless connection between a client device and a gateway device of internet of things (IoT) comprising: encrypting an access password of the gateway device, and generating an encryption password by the gateway device; generating a service set identifier (SSID) of the gateway device by the gateway device by using the encryption password, and wirelessly broadcasting a beacon containing the generated SSID by the gateway device, wherein the SSID comprises an index and the encryption password; selecting the SSID according to the index through wirelessly receiving the beacon by the client device, and acquiring the encryption password from the selected SSID by the client device; decrypting the encryption password by the client device and acquiring the access password by the client device; and connecting the selected SSID using the acquired access password by the client device and establishing the wireless connection between the client device and the gateway device. ### Claim 2 (depends on 1) The method of claim 1, wherein the access password is encrypted by executing a keyless encryption algorithm and the encryption password is decrypted by executing a keyless decryption algorithm corresponding to the keyless encryption algorithm. ### Claim 3 (depends on 1) The method of claim 1, further comprising: respectively providing a first passkey and a second passkey to the gateway device and the client device, wherein the first passkey and the second passkey are preset to have the same value, wherein the access password is encrypted by using the first passkey and the encryption password is decrypted by using the second passkey. ### Claim 4 (depends on 3) The method of claim 3, wherein the access password is encrypted by utilizing one of an asymmetric encryption algorithm and a symmetric encryption algorithm. ### Claim 5 (depends on 3) The method of claim 3, wherein the step of encrypting the access password of the gateway device comprises: obtaining operational information of the gateway device; executing a security password encryption algorithm according to the operational information and the access password, so as to generate a security password; and encrypting the security password using the first passkey, so as to generate the encryption password. ### Claim 6 (depends on 5) The method of claim 5, wherein the step of decrypting the encryption password comprises: decrypting the encryption password using the second passkey, so as to acquire the security password; and executing a security password decryption algorithm according to the security password, so as to acquire the operational information and the access password. ### Claim 7 (depends on 6) The method of claim 6, further comprising: authenticating the client device before the wireless connection is established, so as to determine whether the client device is a valid client device; allowing the establishment of the wireless connection if the client device is the valid client device; and denying the establishment of the wireless connection if the client device is an invalid client device. ### Claim 8 (depends on 7) The method of claim 7, wherein the step of authenticating whether the client device is the valid client device before the wireless connection is established comprises: sending authentication information comprising the operational information, acquired by the client device, to the gateway device; comparing the operational information obtained from the authentication information with the operational information of the gateway device; determining the client device is the valid client device if the operational information obtained from the authentication information is matched with the operational information of the gateway device; and determining the client device is the invalid client device if the operational information obtained from the authentication information is mismatched with the operational information of the gateway device or the gateway device has not received the authentication information for a preset period. ### Claim 9 (depends on 7) The method of claim 7, further comprising: respectively replacing the first passkey and the second passkey by a first back-up passkey and a second back-up passkey when an invalid connection request sent from the invalid client device is aware; and disconnecting the wireless connection between the gateway device and the valid client device. ### Claim 10 (depends on 5) The method of claim 5, wherein the operational information comprises at least one of a current date counting by the gateway device and a media access control (MAC) address of the gateway device. ### Claim 11 (depends on 1) The method of claim 1, further comprising: updating the value of the first and the second passkeys after the wireless connection is established. ### Claim 12 (depends on 11) The method of claim 11, wherein the step of updating the value of the first and the second passkeys after the wireless connection is established comprises: updating the value of the first passkey when a trigger condition is fulfilled; sending the updated first passkey to the client device via the wireless connection; and updating the value of the second passkey according to the updated first passkey. ### Claim 13 (depends on 1) The method of claim 1, wherein the wireless connection is established based on Wi-Fi Protected Access (WPA) protocol or Wi-Fi Protected Access2 (WPA2) protocol. ### Claim 14 A gateway device for IoT, adapted for providing a wireless network connection service to at least one client device, the gateway device comprising: a wireless communication circuit, adapted for wirelessly connecting to at least one surrounding client device; a memory circuit, storing a plurality of modules; and a processing unit, coupled to the wireless communication circuit and the memory circuit, wherein the processing unit controls operation of the wireless communication circuit and accesses the memory circuit for executing the modules, and the modules comprises: an encryption module, encrypting an access password of the gateway device, and generating an encryption password; a SSID generating module, generating a SSID of the gateway device by using the encryption password and wirelessly broadcasting a beacon containing the generated SSID, wherein the SSID comprises an index and the encryption password; and a connection module, receiving connection request sent from at least one client device and checking whether an access password of the connection request is correct, and establishing a wireless connection with the at least one client device sending the correct access password. ### Claim 15 (depends on 14) The gateway device for IoT of claim 14, wherein the encryption module executes an keyless encryption algorithm for encrypting the access password. ### Claim 16 (depends on 14) The gateway device for IoT of claim 14, wherein the memory circuit further stores a first passkey and the encryption module further loads the first passkey from the memory circuit and encrypting the access password using the first passkey. ### Claim 17 (depends on 16) The gateway device for IOT of claim 16, wherein the encryption module further obtains operational information of the gateway device, executes a security password encryption algorithm according to the operational information and the access password, so as to generate a security password, and encrypts the security password using the first passkey, so as to generate the encryption password. ### Claim 18 (depends on 17) The gateway device for IoT of claim 17, wherein the modules further comprises: an authentication module, authenticating the client device to be connected before the wireless connection is established, so as to determine whether the client device to be connected is a valid client device, wherein the authentication module allows the establishment of the wireless connection if the client device to be connected is the valid client device, and the authentication module denies the establishment of the wireless connection if the client device to be connected is an invalid client device. ### Claim 19 (depends on 18) The gateway device for IoT of claim 18, wherein the authentication module sends an authentication request to the client device to be connected and receives authentication information, the authentication module compares the operational information obtained from the authentication information with the operational information of the gateway device, and determines the client device is the valid client device if the operational information obtained from the authentication information is matched with the operational information of the gateway device and determines the client device is the invalid client device if the operational information obtained from the authentication information is mismatched with the operational information of the gateway device or the gateway device has not received the authentication information for a preset period. ### Claim 20 (depends on 16) The gateway device for IoT of claim 16, wherein the modules further comprises: a passkey update module, updating the value of the first passkey when a trigger condition is fulfilled, and sending the updated first passkey to the connected client device via the wireless connection. ### Claim 21 A client device for IoT, comprising: a wireless communication circuit, adapted for wirelessly connecting to a gateway device; a memory circuit, storing a plurality of modules; and a processing unit, coupled to the wireless communication circuit and the memory circuit, wherein the processing unit controls operation of the wireless communication circuit and accesses the memory circuit for executing the modules, and the modules comprises: a SSID scanning module, scanning SSIDs of surrounding gateways and selecting one of the SSIDs according to an index through wirelessly receiving a beacon, and acquiring an encryption password from the selected SSID; a decryption module, decrypting the encryption password, and acquiring an access password; and a connection module, sending a connection request comprising the access password to the gateway device having the selected SSID for establishing a wireless connection. ### Claim 22 (depends on 21) The client device for IoT of claim 21, wherein the decryption module executes a keyless decryption algorithm for decrypting the encryption password. ### Claim 23 (depends on 21) The client device for IoT of claim 21, wherein the gateway device has a first passkey and the memory circuit further stores a second passkey preset to have the same value with the first passkey, and the decryption module further loads the second passkey from the memory circuit and decrypting the encryption password using the second passkey. ### Claim 24 (depends on 23) The client device for IoT of claim 23, wherein the decryption module acquires a security password after decrypting the encryption password using the second passkey and the decryption module further executes a security password decryption algorithm according to the security password, so as to acquire operational information of the gateway device and the access password. ### Claim 25 (depends on 24) The client device for IoT of claim 24, wherein the modules further comprises: an authentication module, sending authentication information when receiving an authentication request, wherein the authentication information comprises the operational information acquired from the security password. ### Claim 26 (depends on 23) The gateway device for IoT of claim 23, wherein the modules further comprises: a passkey update module, receiving the first passkey sent from the gateway device, comparing the value of the received first passkey using the second passkey, and updating the value of the second passkey when the value of the first passkey is different from the original second passkey.