IoT Group Avatar for Controlled Access to Connected Object Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT solutions treat connected objects as independent entities within groups, lacking aggregation and control over access rights, leading to undesirable exposure of all object characteristics to group members.
Innovation Solution
A method and device for creating a virtual group object through aggregation, using a group avatar that encapsulates connected objects, managing access rights, and providing controlled access to object characteristics.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If connected objects are grouped together to provide extended functionalities, then the service capability is improved, but all characteristics of grouped objects become accessible to group members which compromises privacy and security
Solution Approach 1:
The patent segments the characteristics of connected objects into two distinct categories: basic characteristics that are exposed to group members for service functionality, and detailed characteristics that remain private to individual object owners. This segmentation allows the group to provide extended functionalities through basic characteristics while protecting privacy by keeping detailed characteristics hidden, thus resolving the contradiction between service capability and privacy exposure.
Solution Approach 2:
The patent introduces an intermediary mechanism (the group object with selective characteristic exposure) that mediates between individual object characteristics and group service needs. This intermediary allows controlled access where only necessary basic characteristics are exposed to enable services, while detailed characteristics remain protected, thus resolving the contradiction between service capability and privacy exposure.
2Adaptability or versatility
If connected objects are grouped together to provide extended functionalities, then the service capability is improved, but control over access rights to individual objects is lost
Solution Approach 1:
The patent segments access rights into two levels: group-level access control for basic characteristics that enables service management, and object-level access control for detailed characteristics that maintains individual privacy. This segmentation allows the group owner to control service functionality while individual object owners retain control over their detailed characteristics, thus resolving the contradiction between service capability and access control.
Solution Approach 2:
The patent applies local quality by allowing different access control policies for different characteristics within the same group. Basic characteristics have one access control policy (accessible to group members for service purposes) while detailed characteristics have another policy (restricted to individual owners). This local differentiation resolves the contradiction between service capability and access control by applying appropriate control levels to appropriate characteristics.
3Adaptability or versatility
If all characteristics of grouped objects are made accessible, then service functionality is enhanced, but the complexity of managing access rights increases
Solution Approach 1:
The patent segments characteristics into basic and detailed categories with corresponding access rights, simplifying management by establishing clear rules: basic characteristics are accessible to group members for service functionality, while detailed characteristics are restricted to individual owners. This segmentation reduces the complexity of access rights management compared to managing individual permissions for every characteristic, thus resolving the contradiction between service functionality and management complexity.
Data Source
Figure 1~3
Figure 4~6
Figure 5
AI summary
The invention relates to a method and device for the aggregation of connected objects (O3, O4) in a communications network (1, 3). The connected objects have at least one basic characteristic (C1_O3). The method comprises the following steps implemented on an aggregation device, in order to obtain a group avatar (AV_G) suitable for representing the connected objects: obtaining (E22) at least one basic characteristic (C1_O3); obtaining (E24) at least one characteristic of the group object (C1_OG), linked to a basic characteristic; and creating the group avatar (AV_G) comprising: a structure (SD_O3) comprising a basic characteristic (C1_O3); a structure comprising a group characteristic (C1_OG); a structure (SD_L) for linking the group characteristic to at least one basic characteristic; and a group proxy structure (PY_G) comprising an association between an address of the group avatar (@AV_G) and at least one address of the connected objects (@O3).