IoT License Verification Using Verifiable Credentials Offline

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing license management systems for IoT devices are inflexible and require significant development effort, especially when licenses need to be renewed or amended during device operation, and they are not suitable for decentralized environments without continuous connectivity to a license server.

Innovation Solution

Implement a decentralized license check using verifiable credentials (VC) infrastructure, where the IoT device itself acts as both the pseudo-holder and verifier, allowing for dynamic license management through pseudo-access generation and validation based on license identifiers, enabling flexible activation and deactivation of performance features.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If traditional license management systems are used for IoT devices, then license protection and integrity protection are provided, but the systems are inflexible and require significant development effort when licenses need to be renewed or amended during device operation

Engineering Contradiction:
Improvelicense flexibilityVSAvoiddevelopment effort
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent applies a universal credential verification mechanism that can handle multiple license scenarios (initial licensing, renewal, amendment) through a single standardized process. The verification function can validate different types of credentials (license files, hardware dongles, cloud-based licenses) using the same underlying technology, eliminating the need for separate development efforts for each licensing scenario.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent enables dynamic license management by allowing license credentials to be updated and renewed during device operation without requiring system reconfiguration. The verification mechanism can validate both static hardware-bound licenses and dynamic cloud-based licenses, adapting to different operational requirements through the same verification framework.

Inventive Principle:
Principle #15Dynamics

2Reliability

If permanent license installation using license files or hardware dongles is used, then licenses can be verified without continuous connectivity to provider systems, but the systems cannot support dynamic license renewal or amendment during device operation

Engineering Contradiction:
Improveoffline verificationVSAvoiddynamic license management
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces an intermediary credential structure that can operate in both offline and online modes. The license verification function can validate credentials locally without continuous connectivity, while also supporting periodic updates and renewals when connectivity is available. This intermediary layer enables the system to maintain reliability during offline operation while preserving adaptability for dynamic license management.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent enables parameter changes in license credentials (such as expiration dates, feature sets, or usage limits) without changing the fundamental verification mechanism. The system can validate static parameters for offline reliability while also supporting dynamic parameter updates through periodic credential refreshes, allowing the same verification system to handle both permanent and time-limited licenses.

Inventive Principle:
Principle #35Parameter changes

3Extent of automation

If verifiable credentials infrastructure is implemented for decentralized license management, then automated license checking with reduced development effort is achieved, but the system requires adherence to specific credential specifications

Engineering Contradiction:
Improveautomated license checkingVSAvoidspecification adherence
Core Design Contradiction:
Extent of automationVSDevice complexity

Solution Approach 1:

The patent segments the license management system into distinct functional components: credential issuance, credential storage, and verification. Each component can be independently implemented and tested, reducing the overall complexity of adhering to verifiable credentials specifications. The verification function can be implemented as a standalone module that works with any credential format meeting the basic specification requirements.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12468786B2Checking a license for the usage of at least one performance property in an internet-of-things (IoT) device
Publication Date: 2025.11.11 SIEMENS AG
  • US12468786B2 patent drawing
  • US12468786B2 patent drawing

AI summary

A method for checking a license for the usage of at least one performance property in an Internet of things device, is provided, having the steps of —ascertaining at least one license condition for the usage of the performance property of the IoT device by at least one attribute contained in a license identifier, —transmitting and storing the license identifier, —checking the license condition by a) generating a pseudo-access which is assigned to the performance property using a pseudo-holding unit and b) checking an authorization for the pseudo-access by checking the attribute of the license identifier using a verification unit, and —activating the at least one performance property if the pseudo-access is confirmed, wherein the license identifier, the pseudo-holding unit, and the verification unit are designed based on a specification for verifiable credentials.