IoT Device Dynamic Master Role and Private Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT security methods are inadequate in defending against hacking attacks and do not effectively manage private keys across IoT devices, especially in scenarios where data is transmitted and received between general IoT devices.
Innovation Solution
An IoT device that dynamically determines whether to operate as a master device in an IoT network, generating, distributing, and managing private keys for other devices by using a key generator, communication unit, and arithmetic unit to perform key generation, communication, and security processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a certification center is used to generate and distribute private keys, then security management is centralized and controlled, but the system becomes vulnerable to hacking attacks on the certification center and cannot operate when the certification center is compromised
Solution Approach 1:
The patent extracts the private key generation and distribution function from the certification center and assigns it to the master device. This removes the single point of failure (certification center) that is vulnerable to hacking, while maintaining secure key management through distributed architecture where each IoT device generates its own private keys locally
Solution Approach 2:
The patent introduces an intermediary encryption mechanism where the master device encrypts private keys using public keys before transmission. This intermediary encryption layer protects against hacking attacks even if the transmission channel is compromised, as demonstrated in the embodiment where private keys are encrypted using recipient's public key
2Ease of manufacture
If predetermined image information is used as a security key, then key generation is simplified, but the method cannot be applied to general IoT devices that do not share predetermined image information
Solution Approach 1:
The patent creates a universal key management system that works across all IoT devices regardless of whether they share predetermined information. The master-slave architecture with public key infrastructure enables any IoT device to participate in secure communication without requiring device-specific predetermined image information, making the system universally applicable
Solution Approach 2:
Each IoT device generates its own private keys locally using the key generation unit, rather than relying on external predetermined information. This self-service approach allows devices to autonomously establish security credentials without requiring shared image information or external key distribution
3Device complexity
If private keys are statically managed in IoT devices, then security is simplified, but the system cannot dynamically respond to security threats or device role changes
Solution Approach 1:
The patent implements dynamic key management where the master device can generate, distribute, and revoke private keys based on changing security requirements and device roles. The system dynamically adapts to security threats by allowing the master device to issue new keys or invalidate existing ones, as shown in the embodiment where keys can be redistributed when security conditions change
Data Source
Figure 1
Figure 2
Figure 3A
AI summary
Disclosed herein is an Internet of things (IoT) device which is capable of defending against an attack such as hacking while strengthening security of IoT by dynamically determining whether to operate as a master device in an IoT network, and, when the master device is determined, generating, distributing, and managing private keys of other IoT devices in the IoT network.