M2M Device Trust Validation via Peer Querying

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current Machine-to-Machine (M2M) communication and validation technologies lack reliability and efficiency in determining whether an unrecognized computing device can be trusted, making them vulnerable to cyber-attacks and prone to errors due to manual validation processes.

Innovation Solution

A system and method for M2M validation where trusted computing devices query each other to verify the trustworthiness of an unrecognized device by checking its identification against stored lists, allowing trusted devices to communicate while blocking untrusted ones, thereby enhancing security and reducing processing resources.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual machine validation is used, then user control is maintained, but the process is tedious and prone to errors

Engineering Contradiction:
Improvevalidation accuracyVSAvoidvalidation convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system enables machines to automatically validate each other through peer querying. When an unrecognized device attempts to join the trusted network, existing trusted devices query each other to verify the newcomer's identity against their stored lists, eliminating the need for manual user validation while maintaining security through automated mutual verification

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Trusted devices pre-store lists of identified trusted devices during initial setup and authentication phases. These pre-populated lists enable rapid automated validation of new devices without requiring real-time manual verification, as the verification data is already prepared and stored in advance

Inventive Principle:
Principle #10Preliminary action

2Reliability

If current M2M validation technologies are used, then basic communication is enabled, but the system is vulnerable to cyber-attacks and lacks reliability

Engineering Contradiction:
Improvesecurity trustworthinessVSAvoidcyber-attack vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system introduces trusted device lists as intermediary verification structures. Each trusted device maintains a list of other trusted devices, acting as a mediator that enables indirect verification of device trustworthiness. When validating a new device, the system queries existing trusted devices' lists to determine if the newcomer is recognized, creating a chain of trust that enhances security against cyber-attacks

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements a feedback mechanism where trusted devices query each other about unrecognized devices attempting to join the network. The query results (whether the device is found in trusted lists or not) feed back into the validation decision process, allowing the system to dynamically adjust acceptance based on peer verification feedback from multiple trusted sources

Inventive Principle:
Principle #23Feedback

3Reliability

If comprehensive device verification is performed, then security is improved, but processing time and resources increase

Engineering Contradiction:
Improvesecurity verificationVSAvoidvalidation processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs partial verification by querying only a subset of trusted devices' lists rather than exhaustively checking all possible trusted devices. When validating a new device, the system queries trusted devices that are relevant or have previously interacted with similar devices, achieving adequate security verification without the excessive processing time required for comprehensive checks of all trusted device lists

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS12028345B2Information security system and method for identifying trusted machines for machine-to-machine (M2M) security and validation
Publication Date: 2024.07.02 BANK OF AMERICA CORP
  • US12028345B2 patent drawing
  • US12028345B2 patent drawing
  • US12028345B2 patent drawing

AI summary

A system for identifying trusted machines for Machine-to-Machine (M2M) validation receives a query message from a first trusted computing device, requesting whether an unrecognized computing device is in a list of trusted devices associated with a second trusted computing device. The system determines whether the unrecognized computing device is in the list of trusted devices by determining whether an identification associated with the unrecognized computing device is among the list of trusted devices. In response to determining that the unrecognized computing device is in the list of trusted devices, the system sends a response message to the first trusted computing device, indicating that the unrecognized computing device is in the list of trusted devices.