NFC Authorization for IoT Network Nodes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

IoT devices often lack security mechanisms, making them vulnerable to malicious attacks, and existing security measures like proprietary interfaces and certificates can be compromised, posing risks to users and infrastructure.

Innovation Solution

Implementing a method where IoT network nodes can only communicate if they receive authorization after a completed NFC connection with a defined mobile communication terminal, using a two-factor or three-factor verification process that includes spatial proximity and encrypted data transfer through a cloud server, ensuring secure access and data integrity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If proprietary interfaces and certificates are used to secure IoT devices, then security is improved, but device complexity and ease of operation deteriorate

Engineering Contradiction:
ImprovesecurityVSAvoidcomplexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a mobile communication terminal as an intermediary device that mediates between the user and the IoT device. This terminal handles the complex authentication process by establishing an NFC connection with the IoT device, verifying certificates, and managing the authorization workflow, thereby shielding the user from technical complexity while maintaining strong security through certificate-based authentication

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If certificates are used for secure data transfer, then security is improved, but vulnerability to hacker attacks increases

Engineering Contradiction:
ImprovesecurityVSAvoidhacker attacks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary authorization actions where the mobile communication terminal establishes an NFC connection with the IoT device before any data transfer occurs. The terminal verifies the IoT device's certificate in advance, obtains authorization from the server, and only then enables communication. This preliminary security check prevents unauthorized access and hacker attacks by ensuring authentication happens before vulnerability exposure

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements a feedback mechanism where the server provides authorization decisions based on certificate verification results. The mobile terminal receives authorization status feedback and adjusts communication permissions accordingly. This closed-loop feedback system continuously monitors and responds to security conditions, dynamically preventing hacker attacks by revoking or granting access based on real-time authorization status

Inventive Principle:
Principle #23Feedback

3Reliability

If NFC connection with mobile terminal is required for authorization, then security is improved, but ease of operation deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces complex manual security configuration mechanisms with NFC-based automatic authentication. Instead of requiring users to manually configure certificates, keys, or security parameters, the system uses NFC's proximity-based communication to automatically establish secure connections and trigger authentication workflows, making strong security as easy as bringing devices close together

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach significantly enhances security by requiring physical proximity and additional authorization steps, reducing the risk of unauthorized access and data breaches, thus protecting IoT devices and infrastructure from attacks.

Implementation Method 1

a completed NFC connection (NFC) with a defined mobile communication terminal (SMART)

Methodology Applied
Scientific EffectNFC (Near Field Communication): Electromagnetic Induction

Data Source

PatentUS12028708B2Method and system for authorizing the communication of a network node
Publication Date: 2024.07.02 SIEMENS SCHWEIZ AG
  • US12028708B2 patent drawing
  • US12028708B2 patent drawing
  • US12028708B2 patent drawing

AI summary

Method and system for authorizing the communication of a network node of a communication network, wherein the communication of the network node is only permitted if the network node receives an authorization after a completed NFC connection with a defined (certified) mobile communication terminal.