IoT Device Pairing for Secure Cloud Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional secure data management techniques for IoT devices in cloud environments are inadequate, as stolen, copied, or spoofed devices can still access data by mimicking legitimate device IDs, leading to unauthorized access.
Innovation Solution
A system that pairs devices based on unique identification information and requires matching requests from paired devices to authorize data exchange, using a server to verify the pairing and additional checks such as proximity and cryptographic signatures to ensure secure data access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If device IDs are used to control access to data, then data access control is simplified, but security is compromised because stolen or spoofed devices can still access data
Solution Approach 1:
The patent segments the device identification mechanism into two parts: a public-facing device ID and a private pairing key. The device ID can be copied or spoofed, but the private pairing key remains secure and unique to the legitimate device pair. This segmentation allows simplified access control using the public ID while maintaining security through the private key verification mechanism.
Solution Approach 2:
The patent introduces a cloud server as an intermediary between the requesting device and the data store. The server verifies the pairing key and proximity conditions before granting access. This intermediary handles the security verification centrally, allowing the device itself to remain simple while the server ensures secure access control.
2Reliability
If device pairing verification is implemented, then security against stolen devices is improved, but system complexity increases
Solution Approach 1:
The patent performs pairing verification and proximity checks as preliminary actions before data access is granted. The cloud server pre-verifies that the requesting device has a valid pairing key and that the device is in close proximity to the authorized device before allowing any data exchange. This preliminary verification simplifies the overall system by handling security checks centrally rather than requiring complex client-side authentication mechanisms.
Data Source
AI summary
The present disclosure relates generally to secure data management techniques. Techniques are described for pairing devices and using the pairing information for granting or denying requests (e.g., data exchange requests) from the devices, for example, in a cloud environment, including Internet of Things (IoT) cloud. Devices can be paired with each other according to their identification information. Subsequently, when an original request is received from a first device, and a chasing request received from a second device, the pre-registered pairing information is used to determine whether the first and second devices form a valid pair and the original request is granted or denied based upon that determination. For example, the request may be granted only if it is determined that the first device and the second device have been previously paired. In certain embodiments, in addition to the pairing check, additional checks may be performed to determine whether to grant or deny the original request from the first device.