Cross-Chained Hash Validation for IoT Device Hijacking and Data Tampering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Large organizations face challenges in efficiently, securely, and uniformly managing information exchange between internal and external computer systems, particularly due to risks of device hijacking and data tampering by malicious IoT devices.
Innovation Solution
A cross chained aggregated hash token validation system is implemented, using a random cipher text and iterated hash values to secure IoT networks, ensuring network integrity by generating a unique hash key for each device, making it virtually impossible to disconnect, replace, or hijack legitimate devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security mechanisms are used for IoT devices, then device enrollment and authentication can be performed, but the system becomes vulnerable to device hijacking and data tampering by malicious actors
Solution Approach 1:
The system performs preliminary actions by creating a random cipher text and sharing it with each device during enrollment, and by pre-establishing a random peer-to-peer cross reference communication pattern. These preliminary security measures ensure that even if a device is compromised later, the pre-established hash chains and cipher texts prevent hijacking and data tampering.
Solution Approach 2:
The patent introduces an intermediary validation mechanism using cross-chained aggregated hash tokens that mediate between IoT devices and the network. This intermediary layer validates device authenticity and data integrity without requiring direct trust between devices and the network, thereby preventing device hijacking and data tampering.
2Reliability
If a complex validation system is implemented to prevent device hijacking, then security improves, but the complexity of managing IoT networks increases
Solution Approach 1:
The validation system is segmented into modular components: random cipher text generation, peer-to-peer cross reference establishment, hash token generation, and validation. This segmentation allows each component to be implemented and managed independently, reducing overall system complexity while maintaining high security.
Solution Approach 2:
The system uses parameter changes by generating random cipher texts and hash values dynamically during device enrollment and authentication. These random parameters ensure that the validation mechanism remains simple in structure but complex in execution, preventing predictable patterns that could be exploited while keeping management straightforward.
3Reliability
If iterated hash values are generated for each device, then network integrity verification becomes more secure, but the time required for validation increases
Solution Approach 1:
The patent merges multiple validation steps into a single efficient process by combining cipher text generation, hash token creation, and integrity verification into one integrated validation mechanism. This merging reduces the time required for validation while maintaining comprehensive security through cross-chained aggregated hash tokens.
Solution Approach 2:
The system establishes continuous validation through ongoing hash token generation and verification processes that run continuously during device enrollment and authentication. This continuous action ensures network integrity is maintained at all times without requiring periodic re-validation, thereby reducing total validation time.
Data Source
AI summary
A simplified IoT network validation process includes improvements to enrollment of IoT devices onto the IoT network and authentication of active IoT devices during IoT network operation. A random cipher text is created upon device enrollment and shared to each device in the network. Additionally, a random peer-to-peer cross reference communication pattern is established among the devices. Using a device pairing sequence an iterated (e.g., chained) hash value is generated and stored at the server. During the device authentication, upon basic authentication of the request, a server shares a random point to the network (e.g., a randomly selected IoT device) to trigger the hash token generation process. The network devices perform hash token iteration as a ring. Each IoT device uses the previous hash when generating the next hash. The final hash is sent to the server for validation and comparison against stored keys.