Hub-Based IoT Security Control for Resource-Limited Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current security solutions for IoT devices are inadequate due to their limited computing capabilities and vulnerabilities, making them susceptible to malicious attacks, data theft, and privacy infringement, especially in the context of the Internet of Things (IoT) and Industrial Internet of Things (IIoT), where compromised devices can lead to catastrophic failures of critical infrastructure.

Innovation Solution

A method and system for controlling IoT devices from a node (hub) in a network infrastructure, analyzing characteristics such as functionality, information security, and impact on human life, adjusting settings accordingly, and managing access rights to enhance security, using a secure operating system and machine learning models to predict device behavior and vulnerabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security policies or anti-virus applications are implemented on IoT devices, then information security is improved, but device complexity and resource consumption increase beyond the capabilities of limited IoT platforms

Engineering Contradiction:
Improveinformation securityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a hub device as an intermediary that performs security analysis and control functions. The hub analyzes IoT devices based on functionality characteristics, information security characteristics, and impact on human life, then adjusts settings and manages access rights. This transfers the computational burden of security policies from resource-constrained IoT devices to the more capable hub, resolving the contradiction between security requirements and device limitations.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If centralized control and monitoring are implemented for IoT devices, then security management is improved, but network traffic volume and processing requirements increase

Engineering Contradiction:
Improvesecurity managementVSAvoidnetwork traffic volume
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent implements local quality by making security control decisions at the hub level based on device-specific characteristics rather than applying uniform centralized monitoring to all devices. The hub analyzes each IoT device's functionality, security characteristics, and potential impact on human life to determine appropriate security measures and access rights. This localized approach reduces unnecessary network traffic compared to comprehensive centralized monitoring while maintaining effective security management.

Inventive Principle:
Principle #3Local quality

3Reliability

If access rights and settings are adjusted dynamically based on analysis, then information security is improved, but device complexity and control mechanisms increase

Engineering Contradiction:
Improveinformation securityVSAvoidcontrol mechanisms
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The hub acts as an intermediary that manages the complexity of dynamic access control and settings adjustment. Rather than requiring IoT devices themselves to implement complex dynamic control mechanisms, the hub performs the analysis of device characteristics and implements the necessary access right adjustments and setting changes. This transfers the control mechanism complexity from individual IoT devices to the hub, maintaining security while preserving device simplicity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20220294789A1System and method for controlling an IoT device from a node in a network infrastructure
Publication Date: 2022.09.15 AO KASPERSKY LAB
  • US20220294789A1 patent drawing
  • US20220294789A1 patent drawing
  • US20220294789A1 patent drawing

AI summary

Disclosed herein are systems and methods for controlling an IoT device from a node (hub) in a network infrastructure. In one aspect, an exemplary method comprises, analyzing the IoT device based on at least one of: characteristics of functionalitites of the IoT device, characteristics of information security of the IoT device, and characteristics of an impact on human life by the IoT device and/or by the security of the IoT device, adjusting the IoT device based on results of the analysis, determining whether the characteristics for which the analysis was performed changed during an operation of the device, and when the characteristics for which the analysis was performed changed, changing one or more settings associated with the IoT device based on the changes determined during the operation of the device.