Power Consumption Anomaly Detection for IoT Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The increasing number of network-connected devices in IoT systems poses significant security challenges, as existing security software is inadequate in protecting these systems from sophisticated attacks, particularly in RFID and wireless networks.

Innovation Solution

Implementing a power consumption-based anomaly detection system that monitors and processes power usage data from network devices to detect anomalous behavior, preventing compromised devices from transmitting data within the network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If software-based security measures are used to protect IoT devices, then security protection is provided, but security software can be readily bypassed by attackers

Engineering Contradiction:
Improvesecurity protectionVSAvoidvulnerability to attacks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent replaces software-based security mechanisms with a hardware-based security approach using a tamper-resistant device that physically protects the security function. This hardware device operates independently from the software layer, making it resistant to software-based attacks and bypass attempts. The hardware security module contains security credentials and performs authentication operations that cannot be accessed or modified by software attackers.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Adaptability or versatility

If the number of network-connected devices is increased for IoT applications, then more smart applications can be implemented, but network security becomes increasingly problematic

Engineering Contradiction:
ImproveIoT application capabilityVSAvoidnetwork security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the security function from the network devices by introducing a separate hardware security module for each device. This segmentation allows each device to have its own dedicated security credentials and authentication capabilities, enabling secure scaling of IoT networks. Each segmented security module operates independently, so a compromise in one device does not affect others, thus maintaining network security reliability as the number of devices increases.

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If RFID and wireless networks are widely implemented for IoT, then network connectivity is improved, but security protection becomes inadequate

Engineering Contradiction:
Improvenetwork connectivityVSAvoidsecurity vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary anti-action by pre-configuring hardware-based security credentials in devices before they are deployed to RFID and wireless networks. The tamper-resistant security modules are built into devices beforehand, providing inherent security protection that prevents attackers from exploiting connectivity vulnerabilities. This preliminary security measure is already in place before any network communication occurs, countering potential security threats in advance.

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentUS10097572B1Security for network computing environment based on power consumption of network devices
Publication Date: 2018.10.09 EMC IP HLDG CO LLC
  • US10097572B1 patent drawing
  • US10097572B1 patent drawing
  • US10097572B1 patent drawing

AI summary

Systems, methods, and articles of manufacture comprising processor-readable storage media are provided for detecting anomalies in a computing system based on power consumption of network devices of the computing system. For example, a method includes receiving power consumption data from a computing device operating within a network, wherein the power consumption data indicates reported power usage by the computing device operating within the network, processing the power consumption data to detect anomalous behavior of the computing device operating in the network, and preventing the computing device from transmitting data within the network, when anomalous behavior of the computing device is detected.