IoT Device Disk Image Provisioning via Server Refresh
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices are difficult to manage once deployed, as they can be compromised by third parties, and it is challenging to detect and reverse unauthorized modifications, which can introduce vulnerabilities to the network.
Innovation Solution
A system and method for remotely provisioning disk images on IoT devices, allowing for automatic correction of flaws and removal of unauthorized modifications by periodically refreshing the disk image, eliminating the need for non-volatile memory and enabling secure operation through volatile memory components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Stability of the object's composition
If IoT devices use non-volatile memory to store disk images locally, then device autonomy and persistence are improved, but security and integrity are worsened due to inability to detect or reverse unauthorized modifications
Solution Approach 1:
The patent introduces a server as an intermediary between the device and the disk image storage. The server hosts the disk images and provides them to devices over the network, eliminating the need for devices to store disk images locally. This intermediary approach allows centralized control and verification of disk images while maintaining device autonomy during operation.
Solution Approach 2:
The device is configured to periodically request and receive refreshed disk images from the server. This periodic action ensures that even if unauthorized modifications occur, they will be detected and reversed when the next refresh cycle occurs, maintaining device integrity over time.
2Reliability
If IoT devices store disk images in volatile memory only, then security and integrity are improved through centralized server management, but device complexity and network dependency increase
Solution Approach 1:
The device creates a copy of the disk image from the server into its volatile memory for local execution. This copying approach allows the device to operate autonomously from the copied data while the master copy remains securely managed on the server, balancing local performance with centralized control.
3Ease of repair
If IoT devices use centralized server management for disk images, then security and ease of repair are improved through remote updates, but network dependency and loss of operation increase
Solution Approach 1:
The device requests and receives disk images in advance before they are needed for operation. By proactively fetching disk images from the server and storing them in volatile memory ahead of time, the device minimizes network dependency during critical operation periods while still benefiting from centralized management and update capabilities.
Data Source
AI summary
Described embodiments provide systems and methods for provisioning disk images on remote devices. Described is a device configured to connect to a pre-configured network upon device start-up, transmit a request to a server at a pre-configured network address, receive a response containing a disk image for the device, and populate a memory component of the device with the disk image received. Described is a server configured to, responsive to receiving a request from a device, authenticate the request, identify a disk image corresponding to the device, and transmit the disk image to the device. These systems and methods are well suited for improving security and integrity of deployed special-purpose devices, e.g., as may be used for an “Internet of Things” deployment.