Cooperative Device Network Security Validation via Core Node Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cooperative device networks face challenges in validating the sufficiency of participating devices for task performance and security key management, leading to potential inefficiencies and insecurity due to the lack of flexible network reconfiguration and adequate security key distribution.

Innovation Solution

A method that constructs a graph representing the network, identifies a core set of nodes, removes devices more than one hop away from the core set, validates the number of security keys, and adjusts them to ensure a resilient and connected network capable of performing tasks securely.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Area of stationary object

If devices are added to expand network coverage, then network area increases, but security risk increases due to insufficient security key distribution

Engineering Contradiction:
Improvenetwork coverage areaVSAvoidnetwork security
Core Design Contradiction:
Area of stationary objectVSReliability

Solution Approach 1:

The patent segments the network into core nodes and peripheral nodes, with core nodes serving as trusted intermediaries for security key distribution. This segmentation allows the network to expand coverage through peripheral nodes while maintaining security through the segmented architecture where only core nodes hold full security credentials.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Core nodes act as intermediaries between trusted authorities and peripheral devices. Instead of directly distributing security keys to all devices, the system uses core nodes as mediators that verify and relay authentication, thereby securing key distribution across expanded network areas.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If security keys are distributed to all devices, then network security improves, but device complexity increases

Engineering Contradiction:
Improvenetwork securityVSAvoidsecurity key management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Security responsibilities are segmented between core nodes and peripheral nodes. Core nodes maintain full security credentials and perform verification, while peripheral nodes have simplified authentication mechanisms. This segmentation reduces device complexity for the majority of nodes while maintaining overall network security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Different security mechanisms are applied to different parts of the network based on their roles. Core nodes implement comprehensive security verification, while peripheral nodes use simplified authentication. This local differentiation of security quality reduces overall system complexity while maintaining security where needed.

Inventive Principle:
Principle #3Local quality

3Reliability

If peripheral devices are removed to ensure security, then network security improves, but network connectivity deteriorates

Engineering Contradiction:
Improvenetwork securityVSAvoidnetwork connectivity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The network is segmented into core and peripheral zones with different security requirements. Peripheral devices can remain connected for productivity purposes while core nodes maintain security. This segmentation allows the system to maintain both security and connectivity by applying appropriate security measures to each segment.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Core nodes serve as intermediaries that enable peripheral devices to connect to the network securely. Instead of directly connecting all devices to trusted authorities (which would be complex), core nodes mediate the connection, allowing peripheral devices to maintain connectivity while security is enforced through the intermediary core nodes.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12088627B2Security and task performance validation for a cooperative device network
Publication Date: 2024.09.10 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US12088627B2 patent drawing
  • US12088627B2 patent drawing
  • US12088627B2 patent drawing

AI summary

A core set of nodes of a graph representing a network of devices is identified, a node of the graph representing a device in the network of devices, an edge of the graph representing an ability to transmit data between two devices represented by corresponding nodes of the graph. A device represented by a node more than one hop from any node in the core set of nodes of the graph is removed from the network of devices, the removing resulting in a validated network of devices. Using a number of devices in the validated network of devices, a number of security keys in use in the validated network is validated. A device in the validated network is caused to perform a task.