Detecting Nonfunctional IoT Devices via Network Traffic Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing number of IoT devices in households poses challenges in managing and detecting nonfunctional devices due to limited storage, memory, and processing capabilities, leading to unnoticed updates or subscription expirations, which can result in devices becoming nonfunctional.
Innovation Solution
A system and method for detecting nonfunctional endpoint devices by identifying behavioral profiles through passive monitoring of network traffic at a networking device, determining the absence or presence of functional or nonfunctional patterns, and performing security actions to address the nonfunctional state.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the number of IoT devices in households increases, then the functionality and connectivity of the network is improved, but the difficulty of managing and detecting nonfunctional devices increases
Solution Approach 1:
The patent introduces a networking device (router) as an intermediary that performs passive monitoring of network traffic to detect nonfunctional endpoint devices. This intermediary automatically analyzes behavioral patterns and communicates device status to a remote server, eliminating the need for users to manually monitor each IoT device and resolving the management complexity issue while preserving network functionality.
2Use of energy by moving object
If IoT devices have limited storage, memory, and processing capabilities, then device portability and energy efficiency are improved, but the ability to monitor and detect device functionality deteriorates
Solution Approach 1:
The patent places the monitoring and detection functionality in the networking device (router) rather than in the resource-constrained IoT devices themselves. The router has sufficient processing capabilities to passively monitor network traffic, analyze behavioral patterns, and detect nonfunctional devices, while the IoT devices continue to operate with minimal energy consumption and limited resources.
Solution Approach 2:
The system enables self-service monitoring where the networking device automatically detects and reports nonfunctional endpoint devices to a remote server without requiring user intervention. The behavioral pattern matching and anomaly detection are performed automatically based on observed network traffic, allowing the system to self-manage device health monitoring.
3Ease of operation
If users do not frequently manage or interface with IoT devices, then ease of operation is improved, but the ability to notice when devices become nonfunctional deteriorates
Solution Approach 1:
The patent implements a feedback mechanism where the networking device continuously monitors network traffic and communicates device functionality status to a remote server. The server maintains updated information about each endpoint device's operational state by analyzing behavioral patterns in network traffic, ensuring that device status information is preserved and accessible even when users do not frequently interact with the devices.
Solution Approach 2:
The system performs automatic detection and reporting of nonfunctional devices without requiring user action. The networking device and remote server work together to self-monitor device health, automatically identifying when devices become nonfunctional through behavioral pattern analysis and communicating this information to appropriate parties without user intervention.
4Adaptability or versatility
If devices run multiple subscription services, then service functionality is improved, but the difficulty of monitoring and tracking health status increases
Solution Approach 1:
The patent uses the networking device as an intermediary that consolidates monitoring of multiple subscription services running on endpoint devices. Instead of requiring users to monitor each service individually, the networking device passively monitors all network traffic from each device and analyzes overall behavioral patterns to determine device health status, simplifying the monitoring of devices running multiple services.
Solution Approach 2:
The remote server performs universal monitoring functions that apply to all endpoint devices regardless of which subscription services they run. The behavioral pattern matching and anomaly detection mechanisms are service-agnostic, allowing the system to monitor device health across diverse IoT devices with different service configurations through a unified approach.
Data Source
AI summary
The disclosed computer-implemented method for detecting nonfunctional endpoint devices may include (i) identifying, at a networking device, an endpoint device, (ii) identifying, at the networking device, a behavioral profile of the endpoint device that may include (a) a functional pattern of network behavior of the endpoint device that occurs while the endpoint device is in a functional state and/or (b) a nonfunctional pattern of network behavior of the endpoint device that occurs while the endpoint device is in a nonfunctional state, (iii) passively monitoring, at the networking device, network traffic of the endpoint device, (iv) determining, at the networking device, that the endpoint device is nonfunctional by detecting (a) an absence of the functional pattern in the network traffic and/or (b) a presence of the nonfunctional pattern in the network traffic, and (v) performing a security action. Various other methods, systems, and computer-readable media are also disclosed.