Installable Mutable Intelligent Security Package for IoT Networks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current IoT security mechanisms are inadequate for heterogeneous networks and cannot adapt to evolving IoT technologies, leading to increased security vulnerabilities and insecure data exchanges among IoT devices.

Innovation Solution

An installable mutable intelligent security package (IMISP) that scans IoT devices for anomalies, performs mutual authentication, and self-installs to provide an additional layer of protection, moving between devices within an IoT network to detect and remediate security issues without being detected by malware.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional IoT security mechanisms are used, then device simplicity is maintained, but security reliability deteriorates due to inability to adapt to heterogeneous networks and evolving threats

Engineering Contradiction:

Improvesecurity reliabilityVSAvoidadaptability to heterogeneous networks

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The security package is designed to be mutable and dynamically updatable, allowing it to adapt to heterogeneous IoT networks and evolving threats. The package can be installed, updated, and removed from IoT devices during operation, enabling the security mechanism to evolve alongside network heterogeneity and threat landscapes.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The security package is designed with universal applicability across heterogeneous IoT devices. It can scan for anomalies, perform mutual authentication, and provide security services across different device types, communication protocols, and network configurations, making it adaptable to diverse IoT environments.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If permanently installed security applications are used, then security coverage is ensured, but detectability by malware increases

Engineering Contradiction:

Improvesecurity coverageVSAvoiddetectability by malware

Core Design Contradiction:

ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The security package transitions from a static permanently-installed application to a dynamic installable package that can be added, updated, or removed during operation. This mutability makes it harder for malware to detect and target, as the security presence is not fixed or predictable.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The security package performs self-authentication and self-installation through mutual authentication with the IoT device. This self-service capability reduces the need for permanent pre-installation while maintaining security coverage, as the package can autonomously establish its presence and function.

Inventive Principle:

Principle #25Self-service

3Device complexity

If edge networking configurations with single local nodes are used, then network simplicity is maintained, but security vulnerabilities increase due to fixed communication routes

Engineering Contradiction:

Improvenetwork configuration complexityVSAvoidsecurity vulnerability

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The security package enables dynamic communication patterns by allowing IoT devices to communicate directly with remote management centers, bypassing fixed local node routes. This dynamic routing capability enhances security by preventing attackers from exploiting static communication paths while maintaining network configuration simplicity.

Inventive Principle:

Principle #15Dynamics

4Use of energy by moving object

If IoT devices lack cryptographic stacks, then device size and power consumption are reduced, but data encryption capability is lost

Engineering Contradiction:

Improvepower consumptionVSAvoiddata encryption capability

Core Design Contradiction:

Use of energy by moving objectVSReliability

Solution Approach 1:

The security package acts as an intermediary that provides cryptographic functionality to IoT devices that lack built-in cryptographic stacks. By introducing this external security layer, the patent enables data encryption and authentication capabilities without requiring modifications to the core IoT device architecture, thus maintaining low power consumption while adding security.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12126634B2Installable mutable intelligent security package and security system in Internet of Things networks

Publication Date: 2024.10.22 AT&T INTELLECTUAL PROPERTY I L P

AI summary

Concepts and technologies disclosed herein are directed to an installable mutable intelligent security package (“IMISP”) and security system in Internet of Things (“IoT”) networks. According to one aspect disclosed herein, an IoT device can receive an IMISP. The IMISP can scan a plurality of memory locations of the memory for an IMISP operating system process. In response to finding the IMISP operating system process in a memory location of the plurality of memory locations, the IMISP and the IMISP operating system process can conduct a mutual authentication process. In response to a successful result of the mutual authentication process, the IMISP can self-install in the memory location. The IMISP can then scan the memory of the IoT device for an anomaly. In response to finding the anomaly, the IMISP can generate a report that includes information associated with the anomaly.