IoT Trustworthiness Management via Dynamic Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security of Internet of Things (IoT) devices is challenging due to their diversity, connectivity, lack of standard protocols, limited ability to be patched, and inadequate industry standards, leading to increased vulnerability to attacks and compromised networks.
Innovation Solution
A Trustworthiness Management (TM) system that includes a TM Server, data collection agents, and query agents to assess and verify the trustworthiness of IoT devices by generating trustworthiness reports, caching previous reports, and providing corrective actions to enhance security and risk management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If IoT devices are deployed with diverse functionalities and connectivity, then the versatility and utility of the system is improved, but the security vulnerability and risk of attacks increases
Solution Approach 1:
The patent introduces a Trust Management Server as an intermediary between IoT devices and the network. This server acts as a mediator that verifies device trustworthiness, validates credentials, and manages security policies, thereby protecting the diverse IoT ecosystem without limiting device versatility
Solution Approach 2:
The system performs preliminary trust assessment and validation before IoT devices are allowed to connect and operate. By pre-evaluating device credentials, security posture, and trustworthiness metrics before network access is granted, the system enables diverse device participation while preventing vulnerable devices from compromising network security
2Duration of action of moving object
If IoT devices operate for long periods without standard patching protocols, then the operational duration is improved, but the reliability and security over time deteriorates
Solution Approach 1:
The Trust Management Server continuously monitors IoT devices throughout their operational lifetime, collecting feedback on security events, vulnerability exposures, and trustworthiness changes. This ongoing feedback loop enables the system to dynamically update trust assessments and enforce security policies even as devices operate for extended periods without traditional patching
Solution Approach 2:
The system implements dynamic trust management where device credentials, security policies, and access permissions are not static but continuously updated based on real-time security assessments, vulnerability databases, and observed device behavior. This dynamic approach maintains security reliability throughout the device's operational lifetime without requiring standardized patching protocols
3Reliability
If a centralized trust management system is implemented to verify all IoT devices, then the security control is improved, but the system complexity and computational overhead increases
Solution Approach 1:
The trust management functionality is segmented into modular components: a central Trust Management Server for policy decisions, local agents on IoT devices for credential storage and validation, and distributed security modules that operate independently. This segmentation reduces overall system complexity by dividing functions into manageable, specialized components
Solution Approach 2:
The Trust Management Server implements a universal framework that handles multiple security functions including device authentication, credential verification, trust assessment, policy enforcement, and vulnerability monitoring through a single integrated system. This multi-functionality reduces complexity compared to having separate specialized systems for each security task
Data Source
AI summary
Device, system, and method of managing trustworthiness of electronic devices. For example, an Internet of Things (IoT) device is able to transmit data to a recipient device. The recipient device operates as a querying device, and utilizes a query agent to query a trust-management server with regard to the trustworthiness of the IoT device. The trust-management server receives from the IoT device a set of values indicating various parameters of the IoT device. The trust-management server generates a trustworthiness report pertaining to the IoT device, and sends the report as a response to the trustworthiness query. Optionally, a caching agent caches copies of trustworthiness reports and provides to querying devices such previous reports, together with an indication of their freshness level.