IoT Access Control Filtering for Unauthorized Command Blocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices face issues with unauthorized control commands, leading to power waste, network degradation, and potential DoS attacks, especially in home IoT networks, due to lack of authority verification for control commands.
Innovation Solution
A method and apparatus for determining authority to access IoT devices by receiving and storing access control information, verifying the authority of control commands, and only transmitting or executing commands from authorized devices, using identification and control flags within the access control information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control verification is performed at the reception IoT device for all incoming control commands, then security against unauthorized access is improved, but battery consumption increases and device performance deteriorates due to processing overhead
Solution Approach 1:
The patent implements preliminary access control verification at the transmission IoT device before sending control commands. The transmission device checks whether the reception device is in a controllable state and whether the transmission device has authorization to issue control commands. This preliminary filtering prevents unauthorized or unnecessary commands from being transmitted, thereby securing the system while reducing the reception device's processing burden and battery consumption.
Solution Approach 2:
The patent introduces an access control verification mechanism as an intermediary layer between command generation and command execution. This intermediary layer at the transmission device filters control commands based on authorization status and device state, preventing malformed or unauthorized commands from reaching the reception device, thus improving security without overburdening the reception device's battery.
2Reliability
If access control verification is performed at the reception IoT device, then protection against malicious commands is improved, but network performance degrades due to increased processing time and potential DoS attacks
Solution Approach 1:
The patent performs preliminary access control verification at the transmission IoT device before control commands are transmitted to the reception device. This includes checking whether the reception device is in a controllable state and whether the transmission device has proper authorization. By filtering commands in advance, the system protects against malicious commands while avoiding network performance degradation from processing unnecessary commands at the reception device.
Solution Approach 2:
The patent introduces an intermediary access control verification layer at the transmission device that filters control commands based on authorization and device state. This intermediary mechanism prevents malformed or unauthorized commands from entering the network, thereby protecting the reception device from DoS attacks and maintaining network performance while ensuring security.
3Speed
If the reception IoT device processes all received control commands, then responsiveness to legitimate commands is improved, but power waste occurs due to processing unnecessary or unauthorized commands
Solution Approach 1:
The patent implements preliminary access control verification at the transmission IoT device to determine whether the reception device is in a controllable state and whether the transmission device has authorization. This preliminary action ensures that only legitimate control commands are transmitted, allowing the reception device to maintain high responsiveness to authorized commands while avoiding power waste from processing unauthorized or unnecessary commands.
4Loss of energy
If access control information is stored and verified at the transmission IoT device, then prevention of unnecessary command transmission is improved, but device complexity increases
Solution Approach 1:
The patent stores access control information and performs preliminary verification at the transmission IoT device before transmitting control commands. This approach prevents unnecessary command transmission, thereby reducing power waste. The access control information includes authorization data and device state information, which are verified before command issuance. While this adds some complexity to the transmission device, it significantly reduces overall system power consumption by preventing unnecessary command processing at the reception device.
Data Source
AI summary
A control method for preventing an unnecessary control command from being transmitted to a reception Internet of things (IoT) device in an IoT system, and an electronic device thereof are provided. The control method includes receiving first access control information generated from an external electronic device and storing the first access control information, in response to occurrence of an event for transmitting a first control command to the external electronic device, determining whether the first control command has an authority to control the external electronic device using the first access control information, and, in response to a determination that the first control command has the authority to control the external electronic device, transmitting the first control command to the external electronic device.