Asynchronous Secure Messaging for IoT Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices face challenges in secure and asynchronous message transmission due to the need for prior handshakes and continuous network connectivity, which can lead to bottlenecks and vulnerabilities to attacks like denial of service.
Innovation Solution
A secure messaging service that allows IoT devices to send encrypted messages without prior negotiation, using device and service certificates for authentication, and enabling asynchronous transmission by including a key material payload, encrypted payload, public certificate, and signature within the message, allowing secure communication even when devices are not continuously connected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If prior handshake and negotiation are required before secure communication, then authentication and encryption can be established, but communication efficiency decreases and vulnerability to denial of service attacks increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring symmetric encryption keys within each IoT device before deployment. These keys are embedded in the device firmware, eliminating the need for real-time key exchange or handshake protocols. When a message needs to be sent, the device can immediately encrypt it using the pre-configured key corresponding to the target device's identifier, enabling secure communication without prior negotiation or continuous connectivity requirements.
2Reliability
If continuous network connectivity is maintained for secure communication, then real-time authentication is possible, but system scalability decreases and denial of service attacks become more effective
Solution Approach 1:
The patent segments the authentication and encryption functions into independent, self-contained operations that can be performed autonomously by each IoT device. Instead of requiring centralized authentication servers or continuous network presence, each device has its own pre-configured cryptographic keys and can independently authenticate and encrypt messages. This segmentation allows devices to communicate securely even when disconnected from the network or authentication services, greatly improving system scalability and reducing the effectiveness of denial of service attacks against centralized components.
3Reliability
If handshake protocols are implemented for device identification, then secure session establishment is achieved, but message transmission overhead increases
Solution Approach 1:
The patent eliminates handshake protocols by performing authentication准备工作 in advance during device manufacturing. Each IoT device is pre-provisioned with symmetric encryption keys mapped to device identifiers. When communication is needed, the sending device directly uses the target device's identifier to select the appropriate pre-configured key and encrypts the message immediately, bypassing any runtime authentication negotiation. This preliminary configuration approach removes all handshake-related delays while maintaining strong authentication security.
Data Source
AI summary
Example implementations relate to secure messages for IoT devices. For example, a system for secure messages for IoT devices may include an IoT device coupled to a network including a plurality of web services. The IoT device may store a service certificate for each of the plurality of web services, generate a secure message for a web service among the plurality of web services using the stored service certificate for the web service, and send the secure message to the web service without first establishing a connection between the IoT device and the web service.