IoT Control Key Validation to Block Unauthorized Terminal Hijacking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices can be hijacked by unauthorized terminals when authorization is canceled but the IoT device remains connected, leading to security risks and user inconvenience.
Innovation Solution
Implement a method where the IoT device periodically checks for the latest control key and disconnects from unauthorized terminals lacking the key, ensuring only authorized devices maintain control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the first terminal authorizes control permission to the second terminal by allocating a control key, then the second terminal can control the IoT device, but the IoT device may be hijacked by the second terminal if the first terminal cancels authorization while the IoT device remains connected to the second terminal
Solution Approach 1:
The IoT device performs preliminary actions by periodically checking whether it is connected to the cloud and proactively obtaining the latest control key before potential hijacking occurs. This advance preparation ensures that when authorization changes occur, the IoT device already has the updated key to maintain security without waiting for reactive measures.
Solution Approach 2:
The system implements feedback mechanisms where the IoT device continuously monitors its connection status with the cloud and the validity of its control key. By periodically checking for authorization changes and updating the control key accordingly, the system creates a closed-loop security mechanism that automatically responds to authorization status changes, preventing hijacking while maintaining ease of operation.
2Reliability
If the IoT device periodically checks for the latest control key and disconnects from unauthorized terminals, then device security is enhanced, but additional communication overhead and energy consumption are introduced
Solution Approach 1:
The IoT device employs periodic action by checking for the latest control key at predetermined time intervals rather than continuously. This approach balances security requirements with energy conservation, as the device wakes up periodically to perform security checks and then returns to low-power states, reducing overall energy consumption while maintaining adequate security monitoring.
Solution Approach 2:
The IoT device performs self-service security checks by autonomously determining whether it is connected to the cloud and whether it possesses the latest control key. By handling security verification internally without requiring constant external validation, the device reduces communication overhead and energy expenditure while maintaining security through self-monitoring and self-updating mechanisms.
3Reliability
If the first terminal cancels authorization for the second terminal, then security is improved, but manual intervention is required and the process is not automated
Solution Approach 1:
The system implements automated feedback loops where the IoT device continuously monitors authorization status by checking its connection to the cloud and validating its control key. When the first terminal cancels authorization, the cloud updates the control key, and the IoT device automatically detects this change during its periodic checks, automatically disconnecting from unauthorized terminals without requiring manual intervention, thus enhancing both security and automation.
Solution Approach 2:
The system performs preliminary automated actions by proactively checking authorization status before hijacking can occur. The IoT device periodically queries the cloud for the latest control key and automatically compares it with its current key, enabling preemptive authorization management that eliminates the need for manual cancellation processes while maintaining high security standards.
Data Source
AI summary
This application provides a device control method and an apparatus, so that when a second terminal does not have a control permission of an IoT device, the IoT device is not hijacked by the second terminal, and belongs to the field of terminal technologies. The method includes: A first device sends first information to a second device. Then, if the first device determines that the second device does not obtain a first control key, the first device disconnects from the second device. The first device is bound to a third device, the first information is used to notify the second device to obtain a first control key, and the first control key is used by the second device to establish a session with the first device.