IoT Device Bootstrap via Secure Global Registry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing and transferring IoT device ownership and cloud endpoint information without requiring device re-flashing, as IoT devices proliferate and change ownership or cloud providers, is challenging due to the lack of a secure and efficient global registry system.
Innovation Solution
A secure global registry using a private consortium-based blockchain database is implemented to store and manage IoT device information, allowing devices to be manufactured as cloud-agnostic, enabling secure storage, access, and updates of cloud endpoint information without re-flashing, through globally unique identifiers and cryptographic key pairs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure global registry using blockchain is implemented, then device management security and ownership transfer capability are improved, but system complexity increases
Solution Approach 1:
A secure global registry using blockchain technology is introduced as an intermediary system between IoT devices and cloud providers. This registry stores device identifiers, public keys, and ownership information in a decentralized, tamper-proof manner, enabling secure device management and ownership transfer without requiring complex trust relationships between multiple parties. The blockchain acts as a neutral mediator that simplifies the overall system architecture while enhancing security.
2Adaptability or versatility
If cloud endpoint information is stored in a decentralized registry, then adaptability to different cloud providers is improved, but information access efficiency deteriorates
Solution Approach 1:
Device information including globally unique identifiers, public keys, and cloud endpoint details are pre-registered in the secure global registry before the device needs to connect to a cloud provider. This preliminary registration enables devices to quickly retrieve their configuration information and connect to cloud services without time-consuming discovery or authentication processes. The registry is prepared in advance to handle various cloud providers through standardized data structures.
Data Source
AI summary
Described herein is a device (e.g., IoT device) having bootstrap code that communicates with a secure global registry (e.g., private distributed shared blockchain database). The bootstrap code of the device uses a globally unique device identifier of the device to the secure global registry. The bootstrap code receives information from the secure global registry which the bootstrap code uses to obtain information to connect to a cloud-based endpoint. The bootstrap code can download an appropriate software development kit (SDK) associated with the particular cloud based, at least in part, upon the received information. The device can be registered in the secure global registry by creating a globally unique identifier for the device. An initial entry can be created in the secure global registry comprising the globally unique identifier, with the secure global registry stores current cloud-based endpoint information, if any, for the device.