System for managing IoT devices

Abstract

Briefly, systems and methods for securely updating an loT system are presented, the methods including: providing the loT system, the loT system including: loT devices operable by a user; an loT hub for electronically coupling the loT devices to the user; a dashboard graphical user interfaces (GUIs) for enabling communication between the loT vendors and the loT user devices, where the dashboard GUIs includes a user dashboard for retrieving loT user device information and for enabling secure data sharing with the loT vendors; receiving a regulatory update requirement by the loT vendor; determining a current status for each of the loT user devices by the loT vendor.

Description

SYSTEM FOR MANAGING IOT DEVICESFIELD OF INVENTION

[0001] Embodiments of the present invention relate to managing loT devices using device vendor information and Al analytics.BACKGROUND

[0002] Internet of Things (loT) devices are proliferating in society. These devices generally have specific functionality and limited processing power. In many instances, the processing power is not sufficient to support security or maintenance applications. As such, loT devices are particularly vulnerable to cyber-attaches. In addition, maintenance and replacement of loT devices may be delayed or altogether missed because loT device owners and loT device vendors cannot easily communicate with one another. Limited communication between owners and vendors may occur for a variety of reasons including, for example, security implementations that limit or exclude data gathering from entities outside of the system owner’s loT network.

[0003] As such, systems for managing loT devices are presented herein.SUMMARY

[0001] Systems and methods for securely updating an loT system are presented, the methods including: providing the loT system, the loT system including: loT devices operable by a user; an loT hub for electronically coupling the loT devices to the user; a dashboard graphical user interfaces (GUIs) for enabling communication between the loT vendors and the loT user devices, where the dashboard GUIs includes a user dashboard for retrieving loT user device information and for enabling secure data sharing with the loT vendors; receiving a regulatory update requirement by the loT vendor; determining a current status for each of the loT user devices by the loT vendor; if the current status for any of the loT user devices is non-compliant with respect to the regulatory update requirement, determining whether any of the non-compliant loT user devices is at end- of-life (EOL); if any of the non-compliant loT user devices is not at EOL, securelyupdating the any of the non-compliant loT user devices corresponding with the regulatory update requirement; and if any of the non-compliant loT user devices is at EOL, removing the any of the non-compliant loT user devices from service. In some embodiments, methods further include: if any of the non-compliant loT user devices is at EOL, facilitating the purchase of a replacement loT user device; and facilitating installation of the replacement loT user device. In some embodiments, methods further include: if the securely updating the any of the non-compliant loT user devices corresponding with the regulatory update requirement is unsuccessful, facilitating the purchase of a replacement loT user device; and facilitating installation of the replacement loT user device. In some embodiments, methods further include: establishing a multi-factor user authentication secure link between the loT device vendor and the user dashboard. In some embodiments, methods further include: establishing a secure link between the user dashboard and the loT hub such that a point-to-point secure tunnel is established between the loT vendor and any of the loT user devices.

[0002] In other embodiments, systems for managing Internet of Things (loT) devices are presented including: loT user devices operable by a user; an loT hub for electronically coupling the loT devices to the user; a dashboard graphical user interfaces (GUIs) for enabling communication between the loT vendors and the loT user devices, where the dashboard GUIs includes a user dashboard for retrieving loT user device information and for enabling secure data sharing with the loT vendors; a multi-factor user authentication secure link between the loT device vendor and the user dashboard; and a secure link between the user dashboard and the loT hub such that a point-to-point secure tunnel is established between the loT vendor and any of the loT user devices. In some embodiments, the multi-factor user authentication secure link utilizes at least four factor authentication mechanisms. In some embodiments, the at least four factor authentication mechanisms are selected from the group consisting of: knowledge factors, possession factors, inherence factors, location factors, and behavior factors. In some embodiments, the at least four factor authentication mechanisms do not include a password.BRIEF DESCRIPTION OF THE DRAWINGS

[0003] FIG. 1 is an illustrative representation of a system for managing loT devices in accordance with embodiments of the present invention;

[0004] FIG. 2 is an illustrative representation of a self-healing layer for managing loT devices in accordance with embodiments of the present invention;

[0005] FIG. 3 is an illustrative representation of a system owner dashboard utilized in a system for managing loT devices in accordance with embodiments of the present invention;

[0006] FIG. 4 is an illustrative representation of a device owner dashboard utilized in a system for managing loT devices in accordance with embodiments of the present invention;

[0007] FIG. 5 is an illustrative representation of a secure loT system in accordance with embodiments of the present invention; and

[0008] FIG. 6 is an illustrative flowchart of methods for securely updating an loT system in accordance with embodiments of the present invention.DETAILED DESCRIPTION

[0009] Embodiments of the present invention will now be described in detail with reference to a few embodiments thereof as illustrated in the accompanying drawings. In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present invention. It will be apparent, however, to one skilled in the art, that the present invention may be practiced without some or all of these specific details. In other instances, well known process steps and / or structures have not been described in detail in order to not unnecessarily obscure the present invention.

[0010] As will be appreciated by one skilled in the art, the present invention may be a system, a method, and / or a computer program product. The computer program product may include a computer readable storage medium (or media) having computer readable program instructions thereon for causing a processor to carry out aspects of the present invention. The computer readable storage medium can be a tangible device thatcan retain and store instructions for use by an instruction execution device. The computer readable storage medium may be, for example, but is not limited to, an electronic storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. A non-exhaustive list of more specific examples of the computer readable storage medium includes the following: a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), a static random access memory (SRAM), a portable compact disc read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanically encoded device such as punch-cards or raised structures in a groove having instructions recorded thereon, and any suitable combination of the foregoing.

[0011] A computer readable storage medium, as used herein, is not to be construed as being transitory signals / per se / , such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission media (e.g., light pulses passing through a fiber-optic cable), or electrical signals transmitted through a wire. Computer readable program instructions described herein can be downloaded to respective computing / processing devices from a computer readable storage medium or to an external computer or external storage device via a network, for example, the Internet, a local area network, a wide area network and / or a wireless network. The network may comprise copper transmission cables, optical transmission fibers, wireless transmission, routers, firewalls, switches, gateway computers and / or edge servers. A network adapter card or network interface in each computing / processing device receives computer readable program instructions from the network and forwards the computer readable program instructions for storage in a computer readable storage medium within the respective computing / processing device. Computer readable program instructions for carrying out operations of the present invention may be assembler instructions, instruction-set-architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, state-setting data, or either source code or object code written in any combination of one or more programming languages, including an object orientedprogramming language such as Smalltalk, C++ or the like, and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The computer readable program instructions may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider). In some embodiments, electronic circuitry including, for example, programmable logic circuitry, field-programmable gate arrays (FPGA), or programmable logic arrays (PLA) may execute the computer readable program instructions by utilizing state information of the computer readable program instructions to personalize the electronic circuitry, in order to perform aspects of the present invention.

[0012] Aspects of the present invention are described herein with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer readable program instructions. These computer readable program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions / acts specified in the flowchart and / or block diagram block or blocks. These computer readable program instructions may also be stored in a computer readable storage medium that can direct a computer, a programmable data processing apparatus, and / or other devices to function in a particular manner, such that the computer readable storage medium having instructions stored therein comprises an article of manufacture including instructions which implement aspects of the function / act specified in the flowchart and / or block diagram block or blocks. The computer readable programinstructions may also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable apparatus or other device to produce a computer implemented process, such that the instructions which execute on the computer, other programmable apparatus, or other device implement the functions / acts specified in the flowchart and / or block diagram block or blocks. The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and / or flowchart illustration, and combinations of blocks in the block diagrams and / or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts or carry out combinations of special purpose hardware and computer instructions.

[0013] The computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide processes for implementing the functions / acts specified in the flowchart and / or block diagram block or blocks.

[0014] FIG. 1 is an illustrative representation of a system 100 for managing Internet of Things (loT) devices in accordance with embodiments of the present invention. In particular, embodiments presented provide platforms featuring an architecture for user and device authentication as well as loT system self-healing. As illustrated, system 100 includes: human-to-machine (H2M) authentication layer 102;machine-to-machine (M2M) encryption and authentication layer 110; and self-healing layer 120. In embodiments, user 104 may access a variety of user loT devices 114 via hub 112. H2M authentication layer embodiments include: smartphone-based login using ultra-sound and ready for voice-activated loT hubs that provide no user credentials for hackers to steal and prevent phishing or man-in-the-middle attacks. In further embodiments, user loT devices 114 are in communication with loT server 122, which in turn is enabled with a variety of application program interfaces 124 that provide communication between users and loT vendors 126. M2M encryption and authentication layer embodiments include: minimum computation loT cypher that authenticates and protects simple end-point devices and data. In addition, self-healing layer embodiments include predictive Artificial Intelligence (Al) analytics to detect anomalous behavior and anticipate device / system failure, which will be discussed in further detail below for FIG. 2.

[0015] FIG. 2 is an illustrative representation of a self-healing layer 200 for managing loT devices in accordance with embodiments of the present invention. In particular, FIG. 2 further illustrates self-healing layer as illustrated in FIG. 1, 120. In general, self-healing layer embodiments allow an loT system to predict, identify and remedy system failures due to a cyberattack, due to a communications failure, or due to physical failures of some of loT components. As illustrated, server database 202 provides a data repository for system 200 as enabled by an loT server (see 122, FIG. 1). Relevant data may be retrieved and sent to a variety of entities including loT hub 204, loT device vendors 210, 3rdparty sources 230, and an Al engine 220. Communication is facilitated between loT device vendors and loT device owners via dashboard 212 and API 214.

[0016] In embodiments, the self-healing layer 200 may be thought of as a data analytics layer, which includes a rules engine and flight envelope parameters, an Al engine 220 for predictive analytics and anomaly detection, and any number of loT device vendor interface APIs. The rules engine and flight envelope parameters allow the system to monitor device outputs or inputs to determine if they are within a safe operating range. In embodiments, a rules engine receives data from all connected devices and runs the data against the loT device operating limits. The rules engine thenapplies rules specified by the system owner or user to control the loT system and to evaluate system state and health. In some embodiments, the rules engine alerts a system owner if a device is operating outside of normal parameters. This may be part of an Al decision to replace a device pre-failure or just alert the system owner. The rules engine can also shut down devices which are behaving erroneously.

[0017] In general, the rules engine is based on a flight-envelope-limit or operational parameters. In aviation, the term flight envelope refers collectively to the operating parameters and capabilities of a specific model or type of aircraft. The various parameters that make up a flight envelope include the aircraft’s maximum altitude, maximum and minimum speed, the maximum amount of g-forces the craft can withstand, climb rate, glide ratio and other factors that define the aircraft’s flight characteristics. Just like aircraft, loT ecosystems and devices also need flight envelopes - pre-defined operating and performance parameters. Any device performing outside of these is an indication that the device is either 1) failing / has failed or 2) the device has been hacked. A device operating within the flight envelope parameters is considered normal. In embodiments, the flight envelope includes at least two sets of “not to exceed” parameters. One is a maximum operating range parameter, the other is a presettable operating range parameter which a user may want to mandate for a particular device. In embodiments, if flight envelope parameters are exceeded, the rules engine can activate a particular system reaction, which will depend on operator settable rules.

[0018] The Al engine 220 for predictive analytics and anomaly detection is part of the self-healing mechanism, which can predict loT device failure in the system based on Meantime Between Failure (MTBF) statistics provided by loT device vendors. Anomaly detection monitors system activity data to detect anomalous behavior and potential hacks as well as identifying other system failure modes. System specific failure modes can be determined by machine learning algorithms informed by extended observations of system data. In embodiments, Al engines include machine learning which can establish a baseline of a system owner’s loT system behavioral pattern and detect abnormal system behavior. The Al can then attempt to match the detected abnormal system behavior to known cyberattack patterns. The Al may then take actions to remediate the damage done by an identified cyberattack.

[0019] loT device vendor interface APIs 214 are portals to loT device vendor databases which include loT device characteristics and MTBF data to be utilized by the Al engine for predictive analytics operations. These APIs 214 are supported by dashboards 212 allowing loT System Owners (SO) and loT Device Vendors (DV) 210 to interact to keep loT systems operational and to request a variety of data and services from each other. MTBF data is one example embodiments, but DVs can also request actual field operations data from SOs to refine their MTBF numbers and even to monitor real time system performance. The same interface is able to process an upgrade, purchase a replacement, or a service as may be needed. This creates a relationship between SOs and DVs with aligned interests to keep loT systems operating reliably. In effect, both parties have a stake in each other’s success. The vendor MTBF Interface API and dashboard UI diagram are discussed in further detail below for FIGS. 3 and 4.

[0020] FIG. 3 is an illustrative representation of a system owner dashboard 300 utilized in a system for managing loT devices in accordance with embodiments of the present invention. In general, a dashboard, as contemplated herein, is a set of intuitive screens through which the SO can interact with the loT hub using a web browser. A dashboard further allows the SO to monitor current loT network state and manage rules in the flight envelope. Dashboard embodiments display device performance and operational limits that the device should not go over including one provided by the device manufacturer which if exceeded, will damage the device. As noted above, API embodiments are supported by dashboards that allow loT SOs and loT DVs to interact to keep loT systems operational and to request a variety of data and services from each other. SO dashboard embodiments illustrated include any number of sections including, for example: device information section 302, device sale history table 304 and device data request section 306. In embodiments, device data requests may include MTBF data request 310, failure statistics request 312, and real-time telemetry request 314. Other data requests may be included without limitation and without departing from embodiments provided herein. These data requests provide data to an Al engine for predictive analytics operations as disclosed herein. In addition, API also includes an loT marketplace through which an SO can purchase replacement devices from a DV (any device vendor) once Al makes the decision to replace.

[0021] FIG. 4 is an illustrative representation of a device vendor dashboard 400 utilized in a system for managing loT devices in accordance with embodiments of the present invention. As noted above, API embodiments are supported by dashboards that allow loT SOs and loT DVs to interact to keep loT systems operational and to request a variety of data and services from each other. DV dashboard embodiments illustrated include any number of sections including, for example: system owner information section 402, device sale history table 404 and device data request section 406. In embodiments, device data requests may include MTBF data request 410, failure statistics 412, and real-time telemetry 414. The API also acts as a secure contact point between SO and DV, which allows the DV to update / patch their devices in the field to be in compliance with current loT laws and directives requiring this type of maintenance.

[0022] FIG. 5 is an illustrative representation of a secure loT system in accordance with embodiments of the present invention. In particular, FIG. 5 further illustrates a particular use case of a system as illustrated in FIG. 2. In general, loT systems require both non-regulatory and regulatory updates. In non-regulatory update examples, a user or vendor may determine whether to install the non-regulatory update. In contrast, in regulatory update examples, a vendor may be required to update the user device due to regulatory requirements. In regulatory update examples, neither the user nor the vendor has a choice whether to install the regulatory update. In addition, regulatory updates are often accompanied by fines or penalties for non-compliance. For example, under the 2023 EU Cyber Resilience Act (CRA) - National authorities will be able to impose fines of up to €15m ($15m) or up to 2.5 % of the firm's worldwide annual turnover for the preceding financial year, whichever is higher. In addition, the 2022 United Kingdom (UK) Product Security and Telecommunications Infrastructure Act (“PSTI Act”) became law that imposes penalty up to a maximum of either £10 million or 4% of global revenues (whichever is greater) can be imposed, as well as a daily penalty of up to £20,000 if non-compliance continues. The UK Secretary of State can also issue compliance notices (requiring compliance within a specific period), stop notices (to prevent breaches) and / or recall notices (requiring a product recall). Stillfurther, the loT Cybersecurity Improvement Act of 2020 (loT CIA) is the first United States federal law regulating the security of loT devices, fines as yet undefined.

[0023] loT systems requiring a mandatory regulatory update would benefit from secure communication since the update would originate from the loT vendor requiring no input from the loT user. That is, the loT user, not having a choice to update could have their loT devices updated without notice or permission. As illustrated, loT system 500 includes loT device vendors 502, dashboard 506, loT hub 510, and loT user devices 512. Communication from loT device vendor 502 proceeds to dashboard 506 via multifactor user authentication secure link 504. Multi-factor user authentication is an authentication system that requires more than one distinct authentication factors for successful authentication. In one embodiment, four factor authentication mechanisms without password are utilized. Examples of factors may include: knowledge factors, possession factors, inherence factors, location factors, and behavior factors. Communication from dashboard 506 proceeds to loT hub 510 via secure link 508. In some embodiments, secure encrypted links or lightweight encryption are utilized. In this manner, a point-to-point secure tunnel is established between the loT device vendor and the loT user device thus minimizing both the supply chain human risk and the supply chain machine-to-machine risk.

[0024] FIG. 6 is an illustrative flowchart 600 of methods for securely updating an loT system in accordance with embodiments of the present invention. At a first step 602, the method receives a regulatory update requirement by the loT device vendor. As noted above, in regulatory update examples, neither the user nor the vendor has a choice whether to install the update. In addition, regulatory updates are often accompanied by fines or penalties for non-compliance. At a next step 604, the method determines the current status for all the loT user devices. Determination of status is accomplished by secure communication between the loT device vendor and the loT user device using systems disclosed above for FIG. 5. The method determines whether the loT user device is at end-of-life (EOL) and whether the loT user device is compliant with the current regulatory requirements. Thus, at a step 606, the method determines whether the loT user device is at EOL. If the method determines, at a step 606 that the loT user device is not at EOL, the method continues to a step 608 to determine whether the loT user deviceis already compliant with the regulatory update. If the method determines at a step 608 that the loT user device is compliant, the method ends. If the method determines at a step 608 that the loT user device is not compliant, the method continues to a step 610 to update the loT user device with the regulatory update. The method continues to a step 612 to determine whether the update is successful. If the method determines at a step 612 that the update is successful, the method ends. If the method determines at a step 612 that the update is not successful or if the method determines at a step 606 that the loT user device is at EOL, the method continues to step 614 to determine whether to replace the loT user device. If the method determines at a step 614 to not replace the loT user device, the method continues to a step 618 to remove the loT user device from service whereupon the method ends. Removal from service may include physical removal of the equipment or electronic disabling of the equipment. If the method determines at a step 614 to replace the loT user device, the method continues to a step 616 to facilitate replacement of the loT user device which may include facilitating purchase of replacement equipment and facilitating installation of new equipment. The method then ends.

[0025] The terms "certain embodiments", "an embodiment", "embodiment", "embodiments", "the embodiment", "the embodiments", "one or more embodiments", "some embodiments", and "one embodiment" mean one or more (but not all) embodiments unless expressly specified otherwise. The terms "including", "comprising", "having" and variations thereof mean "including but not limited to", unless expressly specified otherwise. The enumerated listing of items does not imply that any or all of the items are mutually exclusive, unless expressly specified otherwise. The terms "a", "an" and "the" mean "one or more", unless expressly specified otherwise.

[0026] While this invention has been described in terms of several embodiments, there are alterations, permutations, and equivalents, which fall within the scope of this invention. It should also be noted that there are many alternative ways of implementing the methods, computer program products, and apparatuses of the present invention. Furthermore, unless explicitly stated, any method embodiments described herein are not constrained to a particular order or sequence. Further, the Abstract is provided herein for convenience and should not be employed to construe or limit the overall invention,which is expressed in the claims. It is therefore intended that the following appended claims be interpreted as including all such alterations, permutations, and equivalents as fall within the true spirit and scope of the present invention.

Claims

CLAIMSWhat is claimed is:

1. A method for securely updating an loT system, the method comprising: providing the loT system, the loT system comprising: a plurality of loT devices operable by a user; an loT hub for electronically coupling the plurality of loT devices to the user; a plurality of dashboard graphical user interfaces (GUIs) for enabling communication between the plurality of loT vendors and the plurality of loT user devices, wherein the plurality of dashboard GUIs comprises a user dashboard for retrieving loT user device information and for enabling secure data sharing with the plurality of loT vendors; receiving a regulatory update requirement by one of the plurality of loT vendors; determining a current status for each of the plurality of loT user devices by the loT vendor; if the current status for any of the plurality of loT user devices is non-compliant with respect to the regulatory update requirement, determining whether any of the plurality of non-compliant loT user devices is at end-of-life (EOL); if any of the plurality of non-compliant loT user devices is not at EOL, securely updating the any of the plurality of non-compliant loT user devices corresponding with the regulatory update requirement; and if any of the plurality of non-compliant loT user devices is at EOL, removing the any of the plurality of non-compliant loT user devices from service.

2. The method of claim 1, further comprising: if any of the plurality of non-compliant loT user devices is at EOL, facilitating the purchase of a replacement loT user device; andfacilitating installation of the replacement loT user device.

3. The method of claim 1, further comprising: if the securely updating the any of the plurality of non-compliant loT user devices corresponding with the regulatory update requirement is unsuccessful, facilitating the purchase of a replacement loT user device; and facilitating installation of the replacement loT user device.

4. The method of claim 1, further comprising: establishing a multi-factor user authentication secure link between the plurality of loT device vendor and the user dashboard.

5. The method of claim 4, further comprising: establishing a secure link between the user dashboard and the loT hub such that a point-to-point secure tunnel is established between the loT vendor and any of the plurality of loT user devices.

6. A system for managing Internet of Things (loT) devices comprising: a plurality of loT user devices operable by a user; an loT hub for electronically coupling the plurality of loT devices to the user; a plurality of dashboard graphical user interfaces (GUIs) for enabling communication between the plurality of loT vendors and the plurality of loT user devices, wherein the plurality of dashboard GUIs comprises a user dashboard for retrieving loT user device information and for enabling secure data sharing with the plurality of loT vendors; a multi-factor user authentication secure link between the plurality of loT device vendor and the user dashboard; anda secure link between the user dashboard and the loT hub such that a point-to- point secure tunnel is established between the loT vendor and any of the plurality of loT user devices.

7. The system of claim 6, wherein the multi-factor user authentication secure link utilizes at least four factor authentication mechanisms.

8. The system of claim 7, wherein the at least four factor authentication mechanisms are selected from the group consisting of knowledge factors, possession factors, inherence factors, location factors, and behavior factors.

9. The system of claim 8, wherein the at least four factor authentication mechanisms do not include a password.

Images