IoT Device Access Verification via Proxy Path Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the Web of Things (WoT) system, it is challenging to verify the validity of access from a Web application to an IoT device when a proxy is present between them, as the initial Thing Description (TD) issued by the IoT device does not account for the proxy, leading to uncertainty about the validity of Web requests transmitted through it.
Innovation Solution
The proposed solution involves a control method where the IoT device transmits its TD to a proxy, which rewrites it to include verification history and modification history, allowing the terminal apparatus to verify the validity of the access by comparing the actual communication path of the request with the defined path in the TD, ensuring that the request is executed only if the communication paths match.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a proxy is introduced between the terminal apparatus and the device to enable Web access, then Web access capability is improved, but the ability to verify access validity deteriorates because the initial Thing Description does not account for the proxy
Solution Approach 1:
The proxy apparatus performs preliminary actions by rewriting the Thing Description before it reaches the terminal apparatus. The proxy adds verification history information and modification history information to the TD in advance, so that when the terminal apparatus receives the TD, it already contains the necessary information to verify access validity. This preliminary preparation resolves the contradiction by enabling both Web access through the proxy and verification of access validity.
Solution Approach 2:
The proxy apparatus acts as an intermediary between the device and the terminal apparatus. It mediates the communication by rewriting the TD to include verification information, thereby enabling the terminal apparatus to verify access validity even though the request passes through the proxy. This intermediary role resolves the contradiction by bridging the gap between Web access capability and access validity verification.
2Reliability
If the Thing Description is rewritten to include verification information, then access validity verification is improved, but the complexity of the communication apparatus increases
Solution Approach 1:
The proxy apparatus performs self-service by automatically rewriting the Thing Description with verification information. The system uses its own resources to add the necessary verification data without requiring external intervention or complex additional components. This self-service approach resolves the contradiction by improving verification capability while minimizing the increase in system complexity.
Solution Approach 2:
The proxy apparatus changes parameters of the Thing Description by adding verification history information and modification history information fields. Instead of fundamentally changing the system architecture, it modifies the data structure of the TD to include verification parameters. This parameter change approach resolves the contradiction by enabling verification without requiring complex structural changes to the communication apparatus.
Data Source
AI summary
A control method of a device executed by a processor, the control method includes transmitting specification information of the device to a terminal apparatus, receiving a request generated based on the specification information from the terminal apparatus, and determining whether to execute the request based on a comparison result between a first communication apparatus through which the request passes until the request reaches the device and a second communication apparatus through which the specification information passes until the specification information reaches the terminal apparatus.