Distributed Ledger Device Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems for managing device associations in IoT networks face challenges such as high maintenance costs, scalability issues, and misalignment of device association data, which can lead to security vulnerabilities and inefficiencies.

Innovation Solution

A distributed ledger system, such as a blockchain, is used to manage device associations by creating entries that include the addresses of user and destination devices, along with a digital signature from the authority device, thereby establishing authorized access and reducing reliance on centralized databases.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a centralized database is used to store device association data, then access control can be managed, but maintenance costs increase and scalability becomes difficult

Engineering Contradiction:
Improveaccess control securityVSAvoidmaintenance cost and scalability
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the centralized database into a distributed ledger system where device association data is distributed across multiple nodes in the network. Each node maintains a copy of the ledger, eliminating the single point of failure and reducing maintenance burden on centralized authorities while improving scalability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a distributed ledger as an intermediary between devices, replacing the need for centralized database management. The ledger acts as a neutral mediator that automatically verifies device associations through cryptographic proofs, reducing maintenance costs and improving scalability without compromising security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If device association data is stored in a centralized database, then authorization can be determined, but data misalignment may occur during transfer or storage

Engineering Contradiction:
Improveauthorization accuracyVSAvoiddata misalignment
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent creates identical copies of the device association data across all ledger nodes through cryptographic hashing. Each node holds a copy of the same data structure, and any modification is detected through hash verification, preventing data misalignment during transfer or storage while maintaining authorization accuracy.

Inventive Principle:
Principle #26Copying

3Adaptability or versatility

If additional devices are added to the device association data, then network coverage improves, but scaling becomes difficult

Engineering Contradiction:
Improvenetwork coverageVSAvoidscaling difficulty
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a dynamic distributed ledger system that automatically adapts to new devices. When a new device joins the network, the ledger dynamically updates across all nodes through consensus mechanisms, allowing seamless scaling without manual intervention or system reconfiguration, thus improving network coverage while maintaining ease of scaling.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS20250055709A1Blockchain for the connected home
Publication Date: 2025.02.13 COMCAST CABLE COMM LLC
  • US20250055709A1 patent drawing
  • US20250055709A1 patent drawing
  • US20250055709A1 patent drawing

AI summary

A request to access a destination device associated may be received from a user device. The request may comprise a digital certificate. The digital certificate may comprise a public key of the user device. A distributed ledger address of the user device may be determined by applying a deterministic function to the public key of the user device. A distributed ledger entry may be created on a distributed ledger. The distributed ledger entry may comprise the address of the user device. Based on the distributed ledger entry, access to the destination device may be granted to the user device.