Decentralized IoT Security via Multi-Chain Blockchain
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current IoT security systems rely on centralized models that are costly, prone to bottlenecks, and have interoperability issues, making them inefficient for large-scale IoT ecosystems and difficult to manage due to diverse ownership and complex machine-to-machine communications.
Innovation Solution
A decentralized IoT security framework using Blockchain technology, with a multi-chain data schema that includes device and event chains, enables secure access and data integrity through smart contracts, reducing reliance on cloud infrastructure and enhancing privacy and reliability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized cloud servers are used for IoT device identification and authentication, then devices can be connected and communicated, but infrastructure costs and maintenance costs increase substantially
Solution Approach 1:
The patent extracts the centralized cloud server dependency from the IoT system by implementing peer-to-peer communication where devices directly authenticate and communicate with each other using cryptographic credentials stored in secure elements, eliminating the need for expensive centralized infrastructure while maintaining reliable device connections
Solution Approach 2:
Devices perform self-authentication and self-communication using embedded secure elements and cryptographic credentials, with each device independently managing its own identity and communication without requiring centralized cloud infrastructure, thereby reducing infrastructure costs while maintaining connection reliability
2Reliability
If centralized cloud servers process all device communications, then device authentication is managed centrally, but the system becomes a bottleneck and point of failure
Solution Approach 1:
The patent segments the authentication and communication function from a centralized cloud server and distributes it across individual devices, where each device maintains its own authentication credentials and communicates directly with peers, eliminating the bottleneck and single point of failure while preserving centralized authentication management through decentralized execution
Solution Approach 2:
The patent introduces secure elements and cryptographic credentials as intermediaries that enable direct device-to-device authentication and communication, replacing the need for continuous cloud server mediation and allowing devices to process communications independently without creating system bottlenecks
3Adaptability or versatility
If cloud servers are used to connect diverse IoT devices from different manufacturers, then device connectivity is achieved, but interoperability and compatibility issues arise
Solution Approach 1:
The patent implements local quality by having each device store and use its own manufacturer-specific credentials and identification information in secure elements, allowing devices to maintain their unique identities while communicating directly with peers using standardized cryptographic protocols, thereby achieving connectivity without increasing interoperability complexity
Solution Approach 2:
The patent applies homogeneity by using standardized cryptographic credential formats and peer-to-peer communication protocols across all devices regardless of manufacturer, creating a uniform interaction model that simplifies interoperability while enabling diverse device connectivity through consistent authentication mechanisms
Data Source
AI summary
The present disclosure relates to a method and system for enabling TOT security using a decentralized TOT security platform that leverages the advanced communication and blockchain security thread model to protect TOT eco-systems. The platform uses a multi-chain data schema including a device chain and an event chain. The multi-chain data schema uses a time-envelope mechanism to generate an event to connect different device chains and enforce a set of security rules through smart contracts. The method comprising receiving an encrypted block from TOT device with event data and verifying the device signature and identity based on certain rules within the device chain. Further, the method comprising determining access to event chain using previous token, current token and timestamp of the encrypted block and updating the event chain upon access determination. The event chain protects data integrity and confidentiality against malicious packets, unauthorized devices, weak encryption and man-in-the-middle attacks.