IoT Message Filtering Based on Device Integrity Status
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices in industrial environments face vulnerabilities that are difficult to patch promptly, leading to potential attacks and production disruptions, and conventional security measures are inadequate for protocols like MQTT and OPC UA.
Innovation Solution
Implement a method for IoT devices that filters messages based on device integrity status, using TLS, DTLS, and QUIC decryption, without altering existing application protocols, to enhance security and resilience against attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional IT security measures (security patches) are installed to prevent attacks, then security is improved, but production interruption occurs during maintenance windows
Solution Approach 1:
The system performs preliminary integrity verification of IoT devices before allowing message processing. By checking device integrity status in advance and filtering messages based on this status, the system prevents attacks without requiring production stoppages for security patch installation
Solution Approach 2:
The patent introduces an intermediary message filtering mechanism that sits between message reception and application processing. This filter checks device integrity status and blocks suspicious messages, providing security without interrupting the production workflow
2Reliability
If zero-trust-based access control is implemented to enhance security, then security is improved, but device complexity increases due to protocol adaptation requirements
Solution Approach 1:
The system segments the security function into a separate message filtering component that operates independently of the application protocols. This allows zero-trust security to be implemented without modifying MQTT, OPC UA, or other industrial protocols, thus avoiding increased device complexity
Solution Approach 2:
An intermediary message filter is introduced that implements zero-trust security principles without requiring changes to existing application protocols. The filter operates at the message level, maintaining protocol compatibility while enhancing security
3Reliability
If device integrity filtering is implemented to block attacked devices, then security is improved, but production failure or interruption may occur
Solution Approach 1:
The system applies partial filtering by checking device integrity status and blocking only suspicious messages while allowing legitimate communication to continue. This selective approach maintains production continuity while providing security
Solution Approach 2:
The system uses device integrity status as feedback to dynamically adjust message filtering. By continuously monitoring integrity status and adapting filtering decisions accordingly, the system can block attacks while maintaining production operations for legitimate devices
Data Source
AI summary
Various embodiments include a method for operating an IoT device having one or more applications which process messages according to application protocols. An example includes: receiving messages for the application protocols at the IoT device; sampling a device integrity status of the IoT device; filtering the messages for the application protocols on the basis of the device integrity status; and, after filtering the messages, processing the messages by the applications according to the application protocols.