IoT Device Program Distribution for Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional security technologies for IoT devices are inadequate due to limited hardware resources, making them vulnerable to hacking and data leakage, with no effective solutions available to protect the devices themselves.

Innovation Solution

An electronic device and operation method that distribute and store program parts between devices, where a first part is stored locally and a second part is received from an external device to perform specific functions, enhancing security by reducing resource demands and preventing damage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If hardware-based security solutions (TEE, SE) are applied to IoT devices, then security protection is improved, but device complexity and hardware resource requirements increase

Engineering Contradiction:
Improvesecurity protectionVSAvoidhardware resource requirements
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces hardware-based security mechanisms (TEE, SE) with a software-based security approach. The security function is transferred from the hardware domain to the software domain by dividing the program into first and second parts, where the first part is stored in the IoT device's memory and the second part is received from an external device. This substitution eliminates the need for complex hardware security modules while achieving security protection through software-based program distribution and execution control.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Speed

If complete programs are stored and executed locally in IoT devices, then execution speed is improved, but security vulnerability increases

Engineering Contradiction:
Improveprogram execution speedVSAvoidhacking and data leakage vulnerability
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent segments the complete program into two distinct parts: a first part stored locally in the IoT device's memory and a second part received from an external device. This segmentation allows the critical security-related portion of the program (second part) to be obtained externally, reducing the attack surface on the IoT device while maintaining execution capability. The processor executes the program by combining both parts, achieving both speed and security benefits.

Inventive Principle:
Principle #1Segmentation

3Device complexity

If security functions are implemented in software rather than hardware, then device complexity is reduced, but execution time and processing overhead increase

Engineering Contradiction:
Improvehardware security module complexityVSAvoidprogram loading and execution time
Core Design Contradiction:
Device complexityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-storing the first part of the program in the IoT device's memory before execution is needed. When the device needs to execute the program, it only needs to receive and load the second part from the external device, rather than loading the entire program. This preliminary storage of the first part reduces the time required for program loading and execution while maintaining the security benefits of software-based implementation.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10855472B2Electronic device and operation method thereof
Publication Date: 2020.12.01 SAMSUNG ELECTRONICS CO LTD
  • US10855472B2 patent drawing
  • US10855472B2 patent drawing
  • US10855472B2 patent drawing

AI summary

An electronic device that prevents damage and an operation method thereof are provided. The electronic device includes a transceiver, a memory configured to store a first part of a first program, and a processor configured to receive, using the transceiver, a second part of the first program from a second electronic device and perform a first function of the first program by using the first part and the second part.