Agent Device Trusted Identity via Registry Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the context of the Internet of Things, establishing a trusted identity for agent devices with varying processing capabilities and security requirements is challenging, as existing methods often incur high costs and complexity, particularly in providing scalable security solutions that balance implementation costs with security needs.
Innovation Solution
A method is introduced that selects an appropriate authentication model for each agent device based on its specific requirements, generating and embedding authentication information, and maintaining this information in a registry to ensure secure communication between agent devices and application providing apparatuses, allowing for scalable security solutions that adapt to different device needs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure authentication model is implemented in agent devices, then security trust is improved, but device cost and complexity increase
Solution Approach 1:
The patent introduces a registry apparatus as an intermediary that centralizes authentication model management. Instead of embedding complex authentication logic in each agent device, the registry stores authentication model information and verifies identities, allowing simple devices to achieve secure authentication through the intermediary service.
Solution Approach 2:
The patent enables dynamic selection of authentication models based on device capabilities and security requirements. Different authentication models with varying security levels can be chosen and registered, allowing the system to adapt security parameters to match device complexity while maintaining adequate trust.
2Reliability
If authentication resources are provided in agent devices, then trusted relationship establishment is improved, but manufacturing cost increases
Solution Approach 1:
The registry apparatus serves as a centralized intermediary that stores authentication information and models, eliminating the need for each agent device to contain expensive authentication resources. The registry handles verification centrally, reducing per-device manufacturing costs while maintaining trusted relationships.
Solution Approach 2:
The registry apparatus provides universal authentication services to multiple agent devices with different capabilities. By consolidating authentication resource management in a single multi-functional platform, the system avoids duplicating expensive resources in each device while still establishing trusted relationships.
3Productivity
If rapid deployment of agent devices is achieved, then installation efficiency is improved, but security establishment time may be compromised
Solution Approach 1:
Authentication models and verification mechanisms are pre-configured in the registry apparatus before agent devices are deployed. This preliminary setup allows devices to rapidly register and establish secure relationships without time-consuming security configurations during deployment, achieving both speed and security.
4Adaptability or versatility
If scalable security capabilities are provided for different agent devices, then adaptability is improved, but system complexity increases
Solution Approach 1:
The registry apparatus acts as a flexible intermediary that manages diverse authentication models for different device types. It adapts to various security requirements by selecting appropriate authentication models from its stored repertoire, providing scalable security without requiring complex logic in individual devices or overall system architecture.
Data Source
AI summary
A trusted identity may be established for an agent device for performing trusted communication with one or more application providing apparatuses. The method of establishing the trusted identity includes determining which of a number of authentication models is a selected authentication model to be used for uniquely authenticating the agent device. First and second authentication information is generated according to the selected model. The first authentication information is for uniquely authenticating the identity of the device and the second authentication information is for verifying that the agent device has the first authentication information. The first authentication information is embedded in the agent device while the second authentication information is transmitted to a registry apparatus for maintaining a device of agent devices. Authentication model information identifying which is the selected authentication model is also sent to the registry.