Cloud Service Security Token Issuance for Lightweight IoT Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT systems face security issues due to devices with unknown administrators or security problems, leading to unintended communication, and lightweight devices with limited computing resources cannot utilize existing cloud services effectively.
Innovation Solution
A service providing system that includes a cloud platform with a security database storing device IDs and corresponding public and private keys, and a communication server that issues security tokens to client devices after verifying encrypted data with the private key, ensuring secure communication and compatibility with lightweight devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing cloud service systems are used, then security is improved through device management, but lightweight devices cannot utilize these services due to limited computing resources
Solution Approach 1:
The patent extracts the cryptographic verification logic from the client device and relocates it to the server side. The server performs the computationally intensive private key operations to verify client public keys, while lightweight clients only need to perform simple encryption and token validation. This extraction resolves the contradiction by maintaining security through server-side verification while reducing client computational requirements.
Solution Approach 2:
The patent introduces a security token as an intermediary mechanism between client devices and the cloud platform. The token contains verification data that allows lightweight devices to authenticate without performing complex cryptographic operations. The server acts as a mediator that issues these tokens after initial verification, enabling subsequent lightweight authentication exchanges.
2Reliability
If security verification is performed on each device connection, then unauthorized access is prevented, but communication complexity increases
Solution Approach 1:
The patent performs security verification in advance during device registration and connection establishment. The server verifies the client's public key against the stored private key before issuing a security token. This preliminary verification ensures that subsequent communications can proceed with simpler token-based authentication, reducing overall communication complexity while maintaining strict access control.
3Reliability
If public key encryption is used for device authentication, then security is enhanced, but processing overhead increases on client devices
Solution Approach 1:
The patent inverts the traditional authentication model by having the client device perform only the lightweight operation of encrypting data with the server's public key, while the server performs the computationally intensive verification using its private key. This inversion resolves the contradiction by maintaining strong security through server-side cryptographic verification while minimizing energy consumption on battery-powered client devices.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
A service providing system includes a cloud platform (CP) including: a security database (200) that stores a device ID and a pair of a public key and a private key corresponding to the device ID; and a communication server (400) that communicates with the security database (200), the communication server: communicating with a client device (100); receiving a request from the client device (100) to issue a security token, the request including a device ID of the client device and data encrypted with a public key; determining whether the encrypted data is decrypted with the private key corresponding to the client device by referring to the security database (200); and in response to the encrypted data being decrypted with the private key, issuing and transmitting the security token to the client device.