IoT Device Control via Cloud Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing solutions for device control across different Internet of Things (IoT) systems face challenges in secure and efficient authentication and authority setting, particularly when IoT devices from different systems need to interact, often requiring costly security measures and struggling with protocol interconnection stability and standardization.

Innovation Solution

A method for setting device control authority involves receiving access information from a second IoT device, obtaining and authenticating a cloud server's device authentication information, and subsequently setting authority information for the first IoT device, enabling secure device control across systems without the need for local security chips or certificates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional security measures (security chips, certificates) are used for device control across different IoT systems, then security is improved, but device cost and complexity increase

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a cloud server as an intermediary to perform authentication between IoT devices from different systems. Instead of requiring direct authentication between devices (which would need complex local security mechanisms), the cloud server mediates the authentication process by verifying device identities and issuing access tokens, thereby reducing local device complexity while maintaining security.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces physical security mechanisms (security chips, hardware certificates) with a software-based authentication system running on cloud servers. This substitution eliminates the need for expensive hardware security components in each device while achieving equivalent or superior security through centralized credential verification and token-based access control.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Adaptability or versatility

If protocol interconnection methods are used to enable devices from different IoT systems to communicate, then adaptability is improved, but system stability and security worsen due to lack of standardization

Engineering Contradiction:
ImproveadaptabilityVSAvoidsystem stability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent creates a universal authentication framework that works across different IoT systems and protocols. The cloud server implements a standardized authentication interface that can handle various device types and communication protocols, allowing devices from different manufacturers and systems to interoperate securely without requiring protocol-specific security implementations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent changes the authentication parameter from device-specific hardware credentials to cloud-verified access tokens. This parameter transformation allows the system to maintain standardized authentication procedures while supporting diverse device protocols, as the token-based approach abstracts away protocol differences and provides a uniform security layer.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20240214379A1Device control permission setting method and apparatus, and computer device and storage medium
Publication Date: 2024.06.27 SHENZHEN TCL NEW-TECH CO LTD
  • US20240214379A1 patent drawing
  • US20240214379A1 patent drawing
  • US20240214379A1 patent drawing

AI summary

The present application provides a configuration method for a device control privilege, an apparatus, a device, and a storage medium. Access information for a second cloud server sent by a second internet of things device that has established a connection relationship with a first internet of things device is received, and device authentication information of the second cloud server is obtained according to said access information; authentication is performed on the second cloud server on the basis of the device authentication information; and if authentication is passed, privilege information of the second internet of things device with respect to the first internet of things device is configured.