IoT Gateway Security Substitution for Low-Complexity Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices often lack security features, making them vulnerable to attacks, and existing gateway solutions increase processing load, affecting IoT service quality.
Innovation Solution
A communication control method and device that dynamically specify and execute security functions for IoT devices based on their characteristics, using a gateway to provide advanced security features like authentication and logging without modifying the devices, thereby reducing processing load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a gateway executes security functions for all IoT devices, then security protection is improved, but processing load on the gateway increases
Solution Approach 1:
The patent applies local quality by categorizing IoT devices into different security levels (first level with security functions, second level without security functions) and applying appropriate security processing to each category. The gateway executes security functions selectively based on device characteristics, providing localized security treatment rather than uniform processing for all devices.
Solution Approach 2:
The patent segments the security processing by dividing IoT devices into distinct groups based on their security capabilities. Devices are segmented into those that can execute security functions independently and those that require gateway-mediated security processing, allowing the gateway to focus resources on devices that truly need assistance.
2Reliability
If security functions are added to IoT devices, then security protection is improved, but device complexity increases
Solution Approach 1:
The gateway serves as an intermediary that provides security functions for IoT devices that lack native security capabilities. Instead of requiring every device to have built-in security functions, the gateway mediates security processing on behalf of simpler devices, maintaining their low complexity while still providing protection.
Solution Approach 2:
The gateway provides universal security services to multiple types of IoT devices with different capabilities. It can handle both devices that have security functions and those that don't, making the security system universally applicable across diverse device types without requiring each device to be modified.
3Reliability
If advanced security functions are substituted by gateway, then security protection is improved, but processing load on gateway increases
Solution Approach 1:
The patent applies local quality by categorizing IoT devices into different security levels (first level with security functions, second level without security functions) and applying appropriate security processing to each category. The gateway executes security functions selectively based on device characteristics, providing localized security treatment rather than uniform processing for all devices.
4Reliability
If security functions are executed for all devices, then security protection is improved, but service quality deteriorates
Solution Approach 1:
The patent applies local quality by categorizing IoT devices into different security levels (first level with security functions, second level without security functions) and applying appropriate security processing to each category. The gateway executes security functions selectively based on device characteristics, providing localized security treatment rather than uniform processing for all devices.
Solution Approach 2:
The patent applies partial action by executing security functions only for devices that need them (second level devices without security functions) rather than for all devices. This selective approach avoids unnecessary processing overhead for devices that already have security capabilities, maintaining service quality while providing security where needed.
Data Source
AI summary
A communication control method executed by a processor included in a communication control device that controls communication with a communication device, the method includes, when a communication access to the communication device is detected, specifying a related characteristic corresponding to the communication device by referring to a first memory that stores communication device-related characteristics, determining a security function corresponding to the specified related characteristic by referring to a second memory that stores executable security functions for the communication device-related characteristics, and executing the security function determined at the determining for the communication device of the communication access.