IoT Security Probe for Device Isolation and Update Synchronization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The management and security of Internet of Things (IoT) devices are challenging due to insecurity and the lack of synchronization of software updates, especially for low-power devices that are inactive, leading to network vulnerabilities and difficulties in maintaining network and device security.

Innovation Solution

A probe device is introduced that can be implemented as hardware or software, capable of isolating IoT devices with security vulnerabilities, facilitating security updates, and reporting security parameters to vendors, while operating as a security update node within a communication network to ensure synchronization and protection of IoT devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a probe device is introduced to manage and secure IoT devices, then network security and device synchronization are improved, but device complexity and system overhead increase

Engineering Contradiction:
Improvenetwork securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The probe device serves as an intermediary component deployed within the network to manage security updates and monitor IoT devices. It acts as a mediator between external security management systems and internal IoT devices, centralizing security functions to improve reliability while managing complexity through role specialization.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If security updates are synchronized for all IoT devices, then network security is improved, but energy consumption and operational complexity increase for low-power devices

Engineering Contradiction:
Improvesecurity synchronizationVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The probe device intermediates security update distribution to low-power IoT devices, allowing them to remain in sleep mode while the probe manages update synchronization. This eliminates the need for continuous device activation, reducing energy consumption while maintaining security synchronization through centralized management.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If the probe device monitors and isolates vulnerable devices, then network security is improved, but processing overhead and operational complexity increase

Engineering Contradiction:
Improvesecurity protectionVSAvoidoperational complexity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The probe device implements automated monitoring and isolation capabilities that operate autonomously without requiring manual intervention. It self-manages security parameter collection, vulnerability detection, and device isolation, reducing operational complexity while maintaining continuous security protection through automated processes.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20230247425A1Drop-in probe that facilitates management and configuration of internet of things network connected devices
Publication Date: 2023.08.03 AT&T INTELLECTUAL PROPERTY I L P
  • US20230247425A1 patent drawing
  • US20230247425A1 patent drawing
  • US20230247425A1 patent drawing

AI summary

Management and configuration of internet of things network connected devices is facilitated herein. A probe device comprises a memory that stores executable instructions that, when executed by a processor, facilitate performance of operations that comprise determining a first identity and a first operational parameter of a first device and a second identity and a second operational parameter of a second device. The first device and the second device can be associated with a defined communication network. The probe device can be provisioned within the defined communication network and can operate as a security update probe node for the first device and the second device. The operations can also comprise facilitating a first security update at the first device and a second security update at the second device based on a determination that the first device and the second device have delegated responsibility for security synchronization to the probe device.