Proxy-Based Operational Certificate Issuance for Untrusted IoT Apps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for acquiring operational certificates for untrusted software applications in IoT systems compromise security by divulging sensitive information to the applications.
Innovation Solution
A method involving a proxy engine on an authorized host node that transmits a Certificate Signing Request (CSR) to a Certificate Authority (CA) on behalf of the application, securing the PKI framework details and masking them from the application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a flight data recorder is installed in a drone to meet EASA operational certificate requirements, then the drone can operate in the open category, but the device complexity and cost increase significantly
Solution Approach 1:
The patent combines the flight data recorder functionality with the existing telematics unit that is already required for drone operation. By integrating the recording capabilities into the telematics unit, the system avoids adding separate dedicated recording hardware, thereby reducing overall device complexity while still meeting EASA requirements for flight data recording in open category operations
Solution Approach 2:
The telematics unit is designed to perform multiple functions including communication, navigation, and now flight data recording. This multi-functional approach allows a single device to satisfy multiple regulatory requirements, eliminating the need for separate specialized equipment and reducing system complexity
2Reliability
If continuous flight data recording is implemented to ensure safety and compliance, then operational reliability improves, but energy consumption and device complexity increase
Solution Approach 1:
Instead of continuous recording, the system implements periodic sampling of flight data at predetermined intervals. This approach captures essential flight information for safety and compliance purposes while significantly reducing the energy consumption and processing load compared to continuous recording, as the recorder remains in a low-power state between sampling events
Solution Approach 2:
The system records only the most critical flight parameters and data elements necessary for safety and regulatory compliance, rather than capturing all possible flight data. This selective recording approach achieves the required reliability level while minimizing energy consumption and storage requirements
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of acquiring an operational certificate for an application (140) running on an authorized and/or authenticated host node (130) in a network (100), the method comprising: transmitting, by the application, a request comprising a Certificate Signing Request to a proxy engine(145) running on the authorized and/or authenticated host node; receiving, by the proxy engine, the request, and submitting the Certificate Signing Request to a Certificate Authority (155); signing, by the Certificate Authority, the operational certificate and transmitting a response comprising the signed operational certificate to the proxy engine; and forwarding, by the proxy engine, the signed operational certificate to the application.