IoT Authorization License Handling for Low-Power Secure Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Internet of Things (IoT) devices face challenges in executing complex calculations and human-computer interactions due to limited resources and computing power, and low-speed networks hinder real-time data processing and security management of integrated core technologies.
Innovation Solution
A method and apparatus for data processing in IoT systems that involve receiving authorization requests from IoT devices, verifying them using device identification and authentication codes, and generating authorization licenses to decrypt encrypted content, enabling lightweight authorization management and content protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If core technologies are integrated into IoT devices, then data processing capability and functionality are improved, but device security and control complexity increase
Solution Approach 1:
The patent extracts the security management function from the IoT device itself and relocates it to a remote server. The device only retains minimal local verification capability, while the server handles complex authorization license verification, authentication code generation, and security policy management. This extraction resolves the contradiction by maintaining security functionality while removing complexity from the resource-constrained device.
Solution Approach 2:
The patent introduces an authorization license as an intermediary mechanism between the device and the server. The license acts as a portable security credential that enables the device to prove its authorization status without requiring continuous complex verification computations. This intermediary simplifies the security management burden on the device while maintaining strong security controls on the server.
2Reliability
If complex security verification is performed on IoT devices, then data security is improved, but device performance and resource consumption increase
Solution Approach 1:
The patent performs security verification preliminarily by generating authorization licenses in advance during device registration or update phases. These pre-generated licenses contain embedded authorization information that can be verified locally without requiring complex real-time computations. The heavy verification work is completed beforehand on the server, reducing runtime computational burden on the device.
Solution Approach 2:
The patent replaces complex mechanical/computational verification processes on the device with cryptographic verification of authorization licenses. Instead of performing heavy security computations locally, the device uses lightweight cryptographic operations to verify license authenticity and extract authorization information, significantly reducing power consumption while maintaining security.
3Speed
If real-time verification is implemented on low-speed networks, then authorization responsiveness is improved, but network bandwidth consumption and latency increase
Solution Approach 1:
The patent extracts the bulk of verification data (authorization license) from the real-time communication stream and stores it locally on the device. This eliminates the need for continuous transmission of large verification datasets over the network. Only small authentication tokens or license identifiers need to be exchanged in real-time, dramatically reducing network bandwidth consumption while maintaining fast authorization responsiveness.
Solution Approach 2:
The patent performs preliminary data preparation by generating and caching authorization licenses locally before real-time operations. This preliminary action allows the device to perform fast local verification without requiring real-time network communication for each authorization check. Network communication is only needed for initial license acquisition or updates, not for every authorization decision.
Data Source
AI summary
Embodiments of the present application provide a method and an apparatus for data processing based on Internet of Things, and the method includes that an Internet of Things platform: receives an authorization request message sent by an Internet of Things device, where the Internet of Things device is deployed with encrypted target content, and the authorization request message carries a device identification and an authentication code of the Internet of Things device; performs verification on the Internet of Things device according to the device identification and the authentication code, and generates a first authorization license for the Internet of Things device after the verification of the Internet of Things device is passed; sends the first authorization license to the Internet of Things device to enable the Internet of Things device to adopt the first authorization license to decrypt the encrypted target content and use decrypted target content.