IoT Access Rights Assignment via Cryptographic Identity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for accessing and managing Internet of Things (IoT) devices are cumbersome, requiring multiple software applications, unique usernames and passwords, and are prone to errors and security risks such as phishing, especially when used over unsecure networks.
Innovation Solution
A system and method for assigning access rights using cryptographic keypairs, where a user device creates or obtains a crypto-identity and connects to a target device using a public key, allowing secure authentication without traditional password-based methods, and enabling admin rights or role-based access based on trustworthiness and device application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional password-based authentication methods are used for accessing IoT devices, then users can establish connections with devices, but the system becomes vulnerable to phishing attacks and security breaches, especially over unsecure networks
Solution Approach 1:
The patent replaces the mechanical/password-based authentication system with a cryptographic public key infrastructure. Instead of relying on secret passwords that can be phished, the system uses asymmetric cryptography where the target device verifies the user device's identity through cryptographic signatures. This substitution eliminates the vulnerability to phishing attacks while maintaining authentication reliability.
Solution Approach 2:
The patent introduces an intermediary cryptographic verification mechanism between the user device and target device. The executable code acts as a trusted intermediary that establishes secure communication channels and verifies identities through cryptographic protocols, preventing direct exposure to phishing attempts over unsecure networks.
2Adaptability or versatility
If multiple software applications are installed to access different IoT devices from different manufacturers, then device compatibility is improved, but the device complexity and ease of operation deteriorate
Solution Approach 1:
The patent implements a universal authentication mechanism that works across different IoT devices from various manufacturers. The target device discovery and connection system provides multi-functional access to diverse devices through a single interface, eliminating the need for multiple manufacturer-specific applications while maintaining broad device compatibility.
Solution Approach 2:
The patent merges multiple device access functions into a single unified system. The target device discovery mechanism consolidates what would otherwise require separate applications for different device types and manufacturers, combining discovery, authentication, and connection management into one integrated approach.
3Reliability
If multiple unique usernames and passwords are required for different software applications, then security is improved by not reusing credentials, but the ease of operation and time required for authentication worsen
Solution Approach 1:
The patent implements self-service authentication where the user device automatically manages cryptographic identities and authentication credentials. The system generates and manages crypto-identities without user intervention, automatically handling the complexity of multiple credentials while maintaining security, thus improving ease of operation without sacrificing security.
Solution Approach 2:
The patent changes the authentication parameter from manual password entry to automated cryptographic verification. By transforming the authentication mechanism from user-dependent password management to system-managed cryptographic protocols, the patent eliminates the burden of remembering multiple passwords while maintaining strong security through asymmetric cryptography.
4Ease of operation
If cloud services are used to provide software applications, then accessibility is improved, but the risk of unauthorized access to user data increases
Solution Approach 1:
The patent inverts the traditional cloud service model where the client trusts the server. Instead, the target device (IoT device) verifies the user device's identity through cryptographic signatures, reversing the trust relationship. This inversion allows cloud-based application delivery while protecting user data from unauthorized access, as the authentication is device-centric rather than server-centric.
Data Source
AI summary
A system for assigning access rights to a user device. The system includes a source configured to serve the executable code to the user device and a target device. The target device is configured to perform at least one of creating a target device crypto-identity, which is an asymmetric cryptographic keypair consisting of a public key and a corresponding private key; and assigning itself a target device crypto-identity. Upon receiving a connection from the user device having an executable code for connecting and authenticating with a cryptographic algorithm, the target device is configured to receive a user device contact information in an executing environment of the target device and determine whether admin rights have been set in the target device. The system also includes the user device configured to use a resource identifier for obtaining the executable code from the source and executing the executable code in the user device.