IoT Device Password Security Monitoring System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT device security systems fail to determine whether leaked passwords are easily compromised, leading to unauthorized access and inadequate protection against such threats.
Innovation Solution
A computer system and method that monitors IoT device login states, detects unauthorized access, learns IDs and passwords from unauthorized access events, determines if pre-set passwords are easily compromised, and periodically changes them to new, secure passwords.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a password is set for IoT device authentication, then unauthorized access is prevented, but the password may be leaked and compromised over time
Solution Approach 1:
The system automatically changes passwords at predetermined intervals without user intervention. The password management server stores usage history and calculates elapsed time since password creation, then triggers automatic password changes when the time threshold is reached, ensuring periodic security reinforcement.
Solution Approach 2:
The system proactively changes passwords before they can be compromised through brute-force attacks or leaks. By monitoring usage frequency and time elapsed, the system performs password changes in advance of potential security breaches, preventing rather than reacting to compromises.
2Reliability
If password changes are performed frequently, then security is improved, but user operation complexity increases
Solution Approach 1:
The system performs password changes automatically without requiring user action. The password management server handles the entire process including generating new passwords, notifying users, and updating credentials, allowing users to benefit from frequent password changes without manual involvement.
Solution Approach 2:
The password management server acts as an intermediary between the authentication system and users. It automatically manages password lifecycle including generation, distribution, rotation, and revocation, shielding users from the complexity of frequent password changes while maintaining security.
3Measurement precision
If password usage is monitored and analyzed, then easy-to-compromise passwords are detected, but system complexity increases
Solution Approach 1:
The system continuously monitors password usage and provides feedback to the password management server. Usage information including login attempts, time stamps, and device identifiers are fed back to update risk assessments, enabling the system to detect compromised passwords through patterns in the feedback data.
Solution Approach 2:
The system replaces complex manual security analysis with automated information processing. Instead of manual monitoring and analysis, the password management server automatically processes usage logs, applies security policies, and triggers password changes based on algorithmic analysis of usage patterns.
Data Source
AI summary
A computer system, an IoT device monitoring method, and a program in which a security is improved are provided. A computer system for monitoring a connected IoT device 100 monitors a login state of the IoT device 100, detects an unauthorized access based on a result of the monitoring, learns any one or both of an ID or a password of the detected unauthorized access, determines whether a password held in advance by the IoT device is easy to be released, and periodically changes a password of the IoT device to a new password which is different from the password previously held by the IoT device when the determining unit determines that it is easy to be released.