IoT Message Broker Protocol Wrapping for Secure Remote Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In decentralized IoT applications, accessing IoT devices from external networks for maintenance is hindered by security concerns and the complexity of managing numerous device connections, which is exacerbated by the high cost and complexity of VPN solutions and public cloud services.
Innovation Solution
A communication method and system that utilizes an existing IoT message broker to establish a secure and efficient channel for accessing remote IoT devices, wrapping packets of one communication protocol into another supported by the message broker, eliminating the need for additional VPN servers or security mechanisms and simplifying connection management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VPN is used to access IoT devices from external network, then security and reliable transmission channel are improved, but device complexity and system cost increase due to need for VPN server and client connections
Solution Approach 1:
The patent introduces a message broker as an intermediary component that sits between the external network and IoT devices. The broker receives messages from external users, validates them against security policies, and forwards approved messages to the appropriate IoT devices. This mediator approach maintains security and reliability while avoiding the complexity of full VPN implementations, as the broker handles connection management centrally rather than requiring individual VPN client installations on each device.
2Ease of operation
If public cloud services are used for remote IoT device access, then access convenience is improved, but utilization restrictions and complexity are introduced due to business model limitations and undisclosed channel technology
Solution Approach 1:
The patent implements a self-service message broker system that can be deployed and configured by the organization itself rather than relying on external cloud providers. The broker uses open standards and protocols, allowing the organization to maintain full control over the access mechanism. This self-hosted approach eliminates utilization restrictions imposed by cloud service business models and avoids the complexity of integrating with proprietary cloud channel technologies, while still providing convenient remote access capabilities.
3Reliability
If additional security components and VPN infrastructure are added, then access security is improved, but maintenance complexity and performance requirements for IoT devices increase
Solution Approach 1:
The patent extracts the security and connection management functionality from the IoT devices themselves and places it in a centralized message broker. Instead of requiring each IoT device to run VPN client software or security agents, the broker handles all security validation, authentication, and message routing centrally. This extraction reduces the performance requirements and maintenance burden on individual IoT devices while maintaining strong security controls through the broker's centralized policy enforcement.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A communication method for a user terminal (220) and a device terminal (200) to exchange packets through a message broker (222), comprises the user terminal wrapping a first packet (P1) of a first communication protocol into a second packet (P2) with a second communication protocol and sending the second packet to the message broker, and the device terminal receiving the second packet from the message broker and obtaining the first packet wrapped in the second packet; or the device terminal wrapping a third packet (P3) of the first communication protocol into a fourth packet (P4) with the second communication protocol and sending the fourth packet to the message broker, and the user terminal receiving the fourth packet from the message broker and obtaining the third packet wrapped in the fourth packet . The second communication protocol is a communication protocol supported by the message broker.