IoT Control Key Validation to Block Unauthorized Terminal Hijacking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

IoT devices can be hijacked by unauthorized terminals when authorization is canceled but the IoT device remains connected, leading to security risks and user inconvenience.

Innovation Solution

Implement a method where the IoT device periodically checks for the latest control key and disconnects from unauthorized terminals lacking the key, ensuring only authorized devices maintain control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the first terminal authorizes control permission to the second terminal by allocating a control key, then the second terminal can control the IoT device, but the IoT device may be hijacked by the second terminal if the first terminal cancels authorization while the IoT device remains connected to the second terminal

Engineering Contradiction:
Improveauthorization controlVSAvoiddevice security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The IoT device performs preliminary actions by periodically checking whether it is connected to the cloud and proactively obtaining the latest control key before potential hijacking occurs. This advance preparation ensures that when authorization changes occur, the IoT device already has the updated key to maintain security without waiting for reactive measures.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms where the IoT device continuously monitors its connection status with the cloud and the validity of its control key. By periodically checking for authorization changes and updating the control key accordingly, the system creates a closed-loop security mechanism that automatically responds to authorization status changes, preventing hijacking while maintaining ease of operation.

Inventive Principle:
Principle #23Feedback

2Reliability

If the IoT device periodically checks for the latest control key and disconnects from unauthorized terminals, then device security is enhanced, but additional communication overhead and energy consumption are introduced

Engineering Contradiction:
Improvedevice securityVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The IoT device employs periodic action by checking for the latest control key at predetermined time intervals rather than continuously. This approach balances security requirements with energy conservation, as the device wakes up periodically to perform security checks and then returns to low-power states, reducing overall energy consumption while maintaining adequate security monitoring.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The IoT device performs self-service security checks by autonomously determining whether it is connected to the cloud and whether it possesses the latest control key. By handling security verification internally without requiring constant external validation, the device reduces communication overhead and energy expenditure while maintaining security through self-monitoring and self-updating mechanisms.

Inventive Principle:
Principle #25Self-service

3Reliability

If the first terminal cancels authorization for the second terminal, then security is improved, but manual intervention is required and the process is not automated

Engineering Contradiction:
Improveauthorization managementVSAvoidauthorization cancellation process
Core Design Contradiction:
ReliabilityVSExtent of automation

Solution Approach 1:

The system implements automated feedback loops where the IoT device continuously monitors authorization status by checking its connection to the cloud and validating its control key. When the first terminal cancels authorization, the cloud updates the control key, and the IoT device automatically detects this change during its periodic checks, automatically disconnecting from unauthorized terminals without requiring manual intervention, thus enhancing both security and automation.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs preliminary automated actions by proactively checking authorization status before hijacking can occur. The IoT device periodically queries the cloud for the latest control key and automatically compares it with its current key, enabling preemptive authorization management that eliminates the need for manual cancellation processes while maintaining high security standards.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4336801B1Device control method and apparatus
Publication Date: 2025.11.26 HUAWEI TECH CO LTD

AI summary

This application provides a device control method and an apparatus, so that when a second terminal does not have a control permission of an IoT device, the IoT device is not hijacked by the second terminal, and belongs to the field of terminal technologies. The method includes: A first device sends first information to a second device. Then, if the first device determines that the second device does not obtain a first control key, the first device disconnects from the second device. The first device is bound to a third device, the first information is used to notify the second device to obtain a first control key, and the first control key is used by the second device to establish a session with the first device.