IoT Hub Semiconductor Device for Multi-Protocol Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The IoT network system faces challenges in maintaining security and authentication across various IoT devices, leading to potential damage when malicious users exploit vulnerabilities in the network.

Innovation Solution

A semiconductor device with a communication module and processor that receives pairing requests from IoT devices, selects appropriate authentication techniques, and manages access rights by communicating with a server, using authentication information such as MAC addresses or digital signatures to ensure secure data transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple authentication techniques are supported for different IoT devices, then security and adaptability are improved, but device complexity increases

Engineering Contradiction:
Improveauthentication technique compatibilityVSAvoidsecurity management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The semiconductor device is designed to support multiple authentication techniques (MAC address-based, digital signature-based, and IBE-based authentication) within a single device, enabling it to universally authenticate different types of IoT devices with varying security requirements. This multi-functional approach allows the device to adapt to diverse authentication protocols without requiring separate security modules for each technique.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The device dynamically changes authentication parameters by selecting different authentication techniques based on the specific IoT device being authenticated. The processor can switch between MAC address verification, digital signature validation, and IBE certificate checking depending on the device type and security level required, thereby adjusting the authentication parameter set to match the specific authentication scenario.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If authentication information is transmitted to the server for access right approval, then security control is improved, but communication overhead and processing time increase

Engineering Contradiction:
Improveaccess right control securityVSAvoidaccess right approval time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The semiconductor device performs authentication of IoT devices before granting access rights, and only transmits authentication information and access requests to the server after successful authentication. This preliminary authentication step ensures that only verified devices seek access rights, reducing unnecessary server communications and streamlining the access control process while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The semiconductor device acts as an intermediary between IoT devices and the server, performing local authentication first and then mediating access right requests to the server only when authentication succeeds. This intermediary role filters out unauthenticated devices before they reach the server, reducing server processing load and communication overhead while maintaining centralized access control.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS10097529B2Semiconductor device for controlling access right to server of internet of things device and method of operating the same
Publication Date: 2018.10.09 SAMSUNG ELECTRONICS CO LTD
  • US10097529B2 patent drawing
  • US10097529B2 patent drawing
  • US10097529B2 patent drawing

AI summary

A method of operating a hub which authenticates a plurality of IoT devices between a server and the IoT devices in place of the server includes authenticating a first IoT device using one of a plurality of predetermined pairing authentication techniques upon receiving a pairing request from the first IoT device, sending a request for an access right of the first IoT device to the server based on pairing information of the first IoT device and transmitting data of the first IoT device to the server upon receiving approval of the access of right of the first IoT device.