Network Intermediary for Secure IoT Security Device Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

IoT-based security systems face vulnerabilities due to the need for IoT-enabled mobile devices to establish communication links with security devices, making them susceptible to security breaches, eavesdropping, data corruption, and physical theft, which can lead to unauthorized access.

Innovation Solution

Implementing a network-enabled control system where a security system determines if a client device is connected to a network, authenticates the client's request, and sends a signal to the security device through a network device, rather than the mobile device, to control the security device, creating a closed-loop system that reduces external network vulnerabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If IoT-enabled mobile devices establish direct communication links with security devices, then control functionality is achieved, but security vulnerabilities increase due to susceptibility to breaches, eavesdropping, and unauthorized access

Engineering Contradiction:
Improvecontrol functionalityVSAvoidsecurity vulnerabilities
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a network device as an intermediary component that receives control signals from the mobile device and forwards them to the security device. This mediator architecture eliminates the need for direct communication links between the mobile device and security device, thereby blocking attack vectors such as eavesdropping and unauthorized access while preserving the control functionality. The network device acts as a trusted gateway that validates and relays commands.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Speed

If direct communication links are established between mobile devices and security devices, then real-time control is achieved, but the system becomes vulnerable to data corruption and physical theft

Engineering Contradiction:
Improvereal-time controlVSAvoiddata integrity
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The network device serves as a protected intermediary that maintains data integrity by validating control signals before forwarding them to security devices. This architecture allows real-time control to proceed through the trusted network device while preventing data corruption that would occur over direct, unsecured links. The intermediary ensures reliable communication by filtering and verifying all data transmissions.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Device complexity

If mobile devices directly control security devices, then system simplicity is maintained, but authentication security is weakened

Engineering Contradiction:
Improvesystem architectureVSAvoidauthentication security
Core Design Contradiction:
Device complexityVSObject-affected harmful factors

Solution Approach 1:

The network device functions as an authentication intermediary that verifies control requests before allowing them to reach security devices. This adds a security layer without significantly increasing overall system complexity, as the network device is a standard networking component. The intermediary handles authentication security by validating mobile device credentials and authorizing control commands.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the control system into distinct functional components: the mobile device for user interaction, the network device for authentication and signal relay, and the security device for executing control actions. This segmentation isolates authentication security functions to the network device, strengthening overall security while maintaining manageable system architecture.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11477181B2Network enabled control of security devices
Publication Date: 2022.10.18 HEWLETT PACKARD ENTERPRISE DEV LP
  • US11477181B2 patent drawing
  • US11477181B2 patent drawing
  • US11477181B2 patent drawing

AI summary

Examples described herein provide network enabled control of a security device. Examples include determining that a client device is connected to a network, receiving a request from the client device to instruct a security device to perform an action, wherein the request comprises a key, authenticating the key received from the request, and based on the determination that the client device is authorized to connect to the network, and based on the authentication of the key, sending, by a network device, a signal to instruct the security device to perform the action.