Immutable Distributed Database for Connected Device Ownership Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for managing mobile device ownership, such as the 3GPP standard's Equipment Identity Register (EIR), are inefficient and prone to fraud, particularly in the context of IoT devices, as they rely on cumbersome processes and limited database sharing, which can lead to insurance and second-hand buyer losses when devices are stolen or lost.
Innovation Solution
A method utilizing an immutable distributed database, like blockchain, where connected devices manage ownership by publishing assertions using public and private key pairs, allowing secure and efficient transfer of ownership between users through verified instruction messages and acknowledgement processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the 3GPP standard's Equipment Identity Register (EIR) database is used to manage device ownership, then device status can be tracked, but the process is lengthy and database sharing between operators is limited, leading to fraud opportunities
Solution Approach 1:
The centralized EIR database is segmented into a distributed network of nodes that independently verify and store ownership information. This segmentation allows parallel verification across multiple nodes, eliminating the sequential processing bottleneck of the centralized system and enabling faster ownership verification without requiring extensive database sharing agreements between operators.
Solution Approach 2:
The distributed database system serves multiple functions simultaneously: it tracks device ownership, verifies device status, enables rapid ownership transfer, and provides fraud prevention across different telecommunication operators without requiring bilateral database sharing agreements. This multi-functionality resolves the contradiction by making the system universally applicable and efficient across operator boundaries.
2Reliability
If the EIR database is used to block stolen devices, then device theft can be detected, but access is limited to one or several mobile operators and the technology is limited to stolen device declaration
Solution Approach 1:
The distributed database system is designed to be universally accessible to all telecommunication operators and various device types without requiring bilateral sharing agreements. It extends beyond stolen device declaration to include ownership transfer, device location tracking, and status management, thereby resolving the limitation of operator compatibility and use case range while maintaining reliable stolen device detection.
Solution Approach 2:
The distributed database acts as a universal intermediary that mediates between different telecommunication operators and device owners. Instead of requiring direct database sharing between operators, the system provides a common platform that all operators can access, enabling broad adaptability while maintaining secure stolen device detection capabilities.
3Ease of operation
If traditional ownership transfer processes are used for connected devices, then ownership can be transferred, but the process is cumbersome and lengthy, creating security vulnerabilities
Solution Approach 1:
The traditional mechanical process of ownership transfer involving physical device handover, paperwork, and manual verification is replaced with a digital cryptographic system. The connected device cryptographically verifies the new owner's identity and autonomously updates its ownership record in the distributed database, eliminating the need for cumbersome manual processes while enhancing security through cryptographic verification.
Solution Approach 2:
The connected device performs self-service by autonomously verifying the new owner's identity through cryptographic protocols and automatically updating its ownership record in the distributed database. This self-service capability simplifies the ownership transfer process for users while ensuring high security through automated cryptographic verification, resolving the contradiction between ease of operation and reliability.
4Ease of operation
If secret codes are used as proof of ownership for IoT devices, then ownership verification is possible, but the original user may lose or forget the code and the code can be sold to multiple victims
Solution Approach 1:
The vulnerable secret code system is replaced with a cryptographic verification mechanism. Instead of relying on human-memorable codes that can be lost or stolen, the system uses public-key cryptography where the connected device autonomously verifies the owner's identity through cryptographic proofs. This substitution eliminates the security vulnerabilities of secret codes while maintaining ease of operation through automated verification.
Solution Approach 2:
The connected device acts as an intermediary that mediates ownership verification through cryptographic protocols. Instead of directly comparing secret codes between parties, the device autonomously verifies the new owner's identity through cryptographic signatures and updates its records accordingly. This intermediary role eliminates the vulnerabilities of secret code sharing while maintaining simple user interaction.
Data Source
AI summary
This invention relates to a method for managing the status of a connected device by publishing assertions in an immutable distributed database composed of a plurality of compute nodes, a pair of keys comprising a public key and a private key being associated with the connected device. The method comprises the steps of: receiving from a first terminal associated to a first user an instruction message; verifying that the first user is allowed to modify the status of the connected device; sending an assertion request to the immutable distributed database for publishing an assertion comprising the status information.