Local IoT Node Networks With Group-Head Secure UDP/IP Multicast
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT networks in local environments lack effective security measures for secure communication between sensors and actuators, particularly in Ethernet networks, necessitating improved methods to ensure secure multicast communication.
Innovation Solution
A decentralized method for IoT node interaction in local networks, utilizing a group head IoT node to facilitate secure multicast communication via UDP/IP, with each node having a processing unit to execute application logic, and utilizing a PKI for digital certificates and self-organization mechanisms to ensure secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If decentralized application execution is implemented among IoT nodes, then network security and autonomy are improved, but device complexity and coordination overhead increase
Solution Approach 1:
The application logic is segmented into macroblocks that can be independently executed by different IoT nodes. This segmentation allows decentralized execution while maintaining security, as each node processes only its assigned macroblocks rather than requiring full application logic distribution.
Solution Approach 2:
A group head IoT node is introduced as an intermediary to manage secure multicast communication. The group head coordinates message distribution and manages digital certificates, reducing the coordination overhead that would otherwise exist between all node pairs while maintaining decentralized execution.
2Productivity
If secure multicast communication is implemented via UDP/IP, then communication efficiency is improved, but security requirements and complexity increase
Solution Approach 1:
Digital certificates are pre-established through a public key infrastructure before multicast communication begins. This preliminary security setup allows efficient UDP/IP multicast communication to proceed without real-time security negotiations, maintaining both efficiency and security.
Solution Approach 2:
The group head acts as a security intermediary that manages digital certificates and authenticates nodes before they join the multicast group. This centralized security management simplifies the security requirements for individual nodes while maintaining overall system security.
3Adaptability or versatility
If self-organization mechanisms are used for group formation, then network autonomy is improved, but initialization time and complexity increase
Solution Approach 1:
IoT nodes autonomously discover each other and form groups without external intervention. Nodes independently execute service discovery procedures and self-organize into groups based on their capabilities and the application requirements, achieving full network autonomy.
Solution Approach 2:
Nodes pre-establish digital certificates through public key infrastructure before self-organization begins. This preliminary cryptographic setup enables secure autonomous group formation without requiring time-consuming real-time authentication during the self-organization process.
Data Source
Figure 1~2
AI summary
A method is provided for the interaction of Internet-of-Things IoT nodes (110) in a local network (100), wherein the local network (100) represents an Ethernet network or a single pair Ethernet network and has a plurality of IoT nodes (110), and wherein each IoT node (110) has at least one sensor and/or one actuator (111) and a first interface (112) for communication with other IoT nodes (110) in the local network (120).The method comprises the steps of: creating a group (110a) of IoT nodes (110) from the plurality of IoT nodes (110) which together execute an application, wherein at least one of the IoT nodes (110) of the group (110a) each has a processing unit which is suitable for executing at least part of an application logic of the application; determining a group head IoT node (110b) from the IoT nodes (110) of the group (110a), wherein the group head IoT node (110b) is designed to ensure the necessary information for secure multicast communication between the IoT nodes (110) in the group (110a), wherein the multicast communication takes place via a User Datagram Protocol Internet Protocol UDP/IP, and executing the application logic for carrying out at least part of the application via the processing units of the IoT nodes (110).