Controlled Network for IoT Cellular Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

IoT devices in cellular networks face challenges in securing communication and data privacy, with existing solutions failing to effectively monitor and respond to security threats in real-time, leading to potential breaches and unauthorized access.

Innovation Solution

A Controlled Network (CN) system is implemented, which classifies and controls IoT devices by type and behavior, monitors communication patterns, identifies security threats, and takes real-time measures to mitigate risks through a security center module that analyzes data, manages security actions, and maintains threat databases.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If real-time monitoring and analysis of communication parameters is implemented, then security threat detection capability is improved, but system complexity and computational resources increase

Engineering Contradiction:
Improvesecurity threat detection capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the monitoring function into a dedicated Controlled Network layer that operates independently from the core cellular network. This segmentation allows the security monitoring to be implemented as a separate module that can be deployed without overloading the existing network infrastructure, thus improving threat detection while managing system complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary Controlled Network (CN) that sits between the IoT devices and the core cellular network. This intermediary layer performs real-time monitoring and analysis of communication parameters, acting as a buffer that protects the core network from direct computational loads while maintaining security surveillance capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If comprehensive monitoring of communication parameters and characteristics is performed, then security threat identification accuracy is improved, but data processing time and computational load increase

Engineering Contradiction:
Improvethreat identification accuracyVSAvoiddata processing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary classification of IoT devices by type, functionality, and behavior patterns before monitoring their communications. This preliminary action creates device profiles and establishes baseline communication patterns, enabling the system to quickly identify deviations and threats without having to analyze every communication parameter from scratch, thus improving accuracy while reducing processing time.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent dynamically adjusts monitoring parameters and thresholds based on device classification and historical behavior data. By changing monitoring parameters adaptively rather than using fixed thresholds, the system achieves higher threat identification accuracy while processing fewer false positives, thereby reducing overall computational load and processing time.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If real-time security response measures are implemented, then protection effectiveness against security threats is improved, but network intervention complexity increases

Engineering Contradiction:
Improveprotection effectivenessVSAvoidnetwork intervention complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements a closed-loop feedback mechanism where detected security threats trigger automated response measures, and the results of these responses are fed back into the monitoring system. This feedback loop enables the Controlled Network to learn from past security incidents and refine its response strategies, improving protection effectiveness while automating the complexity of network interventions.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent enables the Controlled Network to automatically respond to security threats without requiring manual intervention for each incident. The system self-manages threat response by automatically classifying threats, selecting appropriate countermeasures, and executing them based on predefined security policies, thus improving protection effectiveness while reducing the operational complexity of network intervention.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11399276B2System and method for securing communication and information of IoT devices through a controlled cellular communication network
Publication Date: 2022.07.26 FIRSTPOINT MOBILE GUARD LTD
  • US11399276B2 patent drawing
  • US11399276B2 patent drawing
  • US11399276B2 patent drawing

AI summary

The present invention provides a system for providing security services of IoT devices, said system comprising:at computer device and one or more processors operatively coupled to the storage device on which are stored modules of instruction code which when executed by processors implements a Controlled Network, interfacing a IoT cellular Network, said Cellular Network hosting a plurality of IoT devices;wherein said CN classifies and/or control IoT devices by their type, functionality or behavior;wherein said ICN encapsulates communication in between IoT devices or with the IoT cellular Network or with enterprises devices, said communication including at least part of: control, and data communications;wherein said CN is configured to monitor and analyze parameters and characteristics of said monitored communication in real time or in relation to historically acquired data, including at least one of: time patterns, volumes, destination address, source address, content and context.