Cross-Domain DDS Secure Connections With Centralized Certificate Setup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT systems face cumbersome and inconvenient procedures for establishing secure connections between IoT devices and monitor devices, particularly when device changes occur, and existing communication protocols like MQTT and DDS require repetitive signing processes.
Innovation Solution
A cross-domain secure connect transmission method involving registration, grouping, and connection phases, utilizing network communication protocols like HTTPS, Bluetooth, and DDS, to establish peer-to-peer or multicast connections with simplified certificate management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional DDS secure connection establishment is used, then security is ensured through certificate-based authentication, but the procedure becomes cumbersome and requires repetitive signing processes when devices change
Solution Approach 1:
The patent introduces a cloud server as an intermediary to manage domain certificates and device authentication. Instead of requiring direct peer-to-peer certificate exchange and signing between devices, the cloud server acts as a trusted intermediary that issues and manages domain certificates. This mediator approach maintains security through centralized certificate authority while eliminating the need for users to perform complex signing operations locally.
Solution Approach 2:
The patent performs preliminary actions by pre-establishing domain certificates and authentication credentials on the cloud server before actual device connections are needed. When devices join the network, they automatically inherit these pre-configured security credentials through the cloud server, eliminating the need for real-time certificate signing and exchange during device setup or changes.
2Productivity
If peer-to-peer DDS connection is established between IoT devices and monitor devices, then data transmission reliability and immediacy are improved, but certificate management becomes complex when devices are changed
Solution Approach 1:
The cloud server serves as a mediator that manages domain certificates for multiple devices simultaneously. Instead of each device pair needing individual certificate management, the cloud server maintains domain-level certificates that automatically apply to all devices within that domain. This reduces device complexity by centralizing certificate management while preserving peer-to-peer data transmission efficiency.
Solution Approach 2:
The patent implements universal domain certificates that serve multiple devices within a domain. A single domain certificate issued by the cloud server can be used by multiple IoT devices and monitor devices, eliminating the need for unique certificate pairs for each device combination. This multi-functional approach simplifies certificate management while maintaining secure peer-to-peer connections.
3Ease of operation
If cloud server-mediated communication is used, then device management and certificate distribution are simplified, but transmission delays may occur due to server intermediary
Solution Approach 1:
The patent segments the communication process into two distinct phases: a setup phase that uses cloud server mediation for certificate distribution and device management, and an operational phase that uses direct peer-to-peer connections for data transmission. This segmentation allows the system to enjoy the benefits of simplified management through the cloud server while achieving high-speed transmission through direct device-to-device communication in the operational phase.
Solution Approach 2:
The cloud server performs preliminary actions by pre-distributing domain certificates and establishing security credentials before actual data transmission begins. Once these preliminary setup tasks are completed through the server, subsequent data transmissions occur directly between devices without requiring continuous server mediation, thus achieving both ease of management and high transmission speed.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention discloses a method to set up a cross-domain DDS-secure network and then use it to transmit various kinds of data. To set up the cross-domain DDS-secure network, we first register IoT and monitor devices on the administration website. Second, we group devices based on our needs and then ask the website to generate configurations and certificates for each device. Finally, we download those files and deploy them to each device. In an extremely case, we can accomplish all operations only through a mobile device. During the system operating, all devices establish the DDS-secure connections to each other, and data will transmit on the network securely.