Mobile Device IoT Gateway Session Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices, due to their resource constraints and geographical dispersion, face challenges in establishing secure and efficient communication, especially when using unaffiliated mobile devices as gateways, which can lead to security concerns and limited connection times.
Innovation Solution
A method is described to dynamically and securely establish a session between a mobile device and an IoT device by using precomputed session tickets and shifting authentication tasks to a management device, allowing mobile devices to act as IoT gateways while conserving IoT device resources and enhancing security through time-limited session tickets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If unaffiliated mobile devices are used as IoT gateways, then the need for dedicated gateways is reduced and resource constraints of IoT devices are addressed, but security concerns arise and connection time is limited
Solution Approach 1:
A management device is introduced as an intermediary between IoT devices and mobile devices. The management device issues time-limited session tickets that enable secure authentication without requiring dedicated gateway infrastructure. This mediator resolves the security concern by providing centralized control while allowing versatile mobile device participation.
Solution Approach 2:
The patent changes the parameter of session duration by implementing time-limited session tickets. Instead of permanent or long-term gateway assignments, sessions are granted for specific time periods, which enhances security by limiting the window for potential attacks while maintaining adaptability of mobile device usage.
2Device complexity
If unaffiliated mobile devices are used as IoT gateways, then the need for dedicated gateways is reduced, but connection time is limited due to mobile device movement
Solution Approach 1:
The patent implements dynamic session management where mobile devices can be authenticated and granted temporary gateway rights based on their current location and availability. The session tickets enable dynamic allocation of gateway functionality to moving mobile devices without requiring fixed infrastructure, accepting limited connection duration as a trade-off for reduced complexity.
3Reliability
If authentication tasks are performed by IoT devices, then security can be maintained, but IoT device resources are consumed
Solution Approach 1:
The authentication task is extracted from the IoT device and relocated to the management device. The management device performs the computationally intensive authentication operations and issues session tickets, while IoT devices simply present these tickets for verification. This extraction preserves security through centralized authentication while conserving limited IoT device energy resources.
Solution Approach 2:
Instead of performing full authentication at the IoT device, the system uses copied session tickets that can be verified with minimal computational overhead. The management device creates these ticket copies and distributes them to authorized mobile devices, allowing lightweight verification at the IoT device without consuming significant energy.
Data Source
AI summary
A mobile device may include first and second communication interfaces. The mobile device may receive, from another device, a dispatch message to receive data from an Internet of Things (IoT) device. The mobile device may send, to the other device and based on the dispatch message, a device key. The mobile device may receive, from the other device, a session ticket generated by the other device. The IoT device may have previously received a copy of the session ticket. The mobile device may send the session ticket to the IoT device. The mobile device may receive data, from the IoT device and via the first communication interface, based on the session ticket matching the copy of the session ticket. The mobile device may format the data for transmission via the second communication interface. The mobile device may send, via the second communication interface, the data to a network device.