IoT Gateway Machine Learning Model for Anomaly Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Smart homes with Internet of Things (IoT) devices are vulnerable to cyberattacks due to limited computing resources and lack of integrated security measures, making them susceptible to anomalous operating behaviors that can go undetected.

Innovation Solution

A system comprising an IoT gateway and a backend system that uses machine learning models to detect anomalous behavior in IoT devices by analyzing their operating data, with the ability to update and evolve these models as new data is received, allowing for real-time security actions such as alerts to be sent in case of detected anomalies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If computer security software is deployed on IOT devices, then security protection is improved, but the limited computing resources of IOT devices cannot support it

Engineering Contradiction:
Improvesecurity protectionVSAvoidcomputing resources
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a gateway as an intermediary component between IOT devices and the network. The gateway runs the machine learning model and security analysis, while IOT devices only need to communicate basic operating data. This mediator approach allows security functionality without requiring computing resources on the constrained IOT devices themselves.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional rule-based security systems with machine learning models that can detect anomalous behavior. Instead of requiring IOT devices to run complex security software, the system uses ML models trained on normal operating patterns to identify deviations, substituting mechanical rule-checking with intelligent pattern recognition.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If machine learning models are used to detect anomalous behavior, then detection accuracy is improved, but the system complexity and data processing requirements increase

Engineering Contradiction:
Improveanomaly detection accuracyVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the security system into distinct components: IOT devices that generate data, a gateway that hosts the ML model, and a backend that manages model training and updates. This segmentation allows complex ML functionality to be distributed, with each component having a specific role, thereby managing system complexity through functional decomposition.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements continuous feedback loops where ML models analyze operating data, detect anomalies, and trigger alerts. The models are continuously updated with new data, creating a feedback mechanism that improves detection accuracy over time while maintaining manageable complexity through iterative refinement rather than monolithic complex systems.

Inventive Principle:
Principle #23Feedback

3Measurement precision

If continuous model updates are performed, then prediction accuracy is improved, but the time and computational resources required for training increase

Engineering Contradiction:
Improveprediction accuracyVSAvoidmodel training time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent performs preliminary model training in advance using historical operating data collected from IOT devices. Pre-trained models are deployed to gateways, and updates are performed periodically rather than in real-time. This preliminary action approach allows the system to have ready-to-use models without experiencing training delays during critical detection periods.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements periodic model updates rather than continuous training. Models are retrained at scheduled intervals using accumulated data, balancing the need for updated predictions with the time cost of training. This periodic approach allows the system to maintain accuracy while managing computational resource consumption and training time requirements.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS11038910B1Cybersecurity for a smart home
Publication Date: 2021.06.15 TREND MICRO INC
  • US11038910B1 patent drawing
  • US11038910B1 patent drawing
  • US11038910B1 patent drawing

AI summary

A smart home includes Internet of things (IOT) devices that are paired with an IOT gateway. A backend system is in communication with the IOT gateway to receive IOT operating data of the IOT devices. The backend system generates a machine learning model for an IOT device. The machine learning model is consulted with IOT operating data of the IOT device to detect anomalous operating behavior of the IOT device. The machine learning model is updated as more and newer IOT operating data of the IOT device are received by the backend system.