Sentinel Appliance for IoT Security Monitoring

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The Internet of Things (IoT) presents unique security challenges due to its decentralized nature, limited processing power, and autonomy of devices, making it difficult to implement traditional security solutions like deep packet inspection and key management across IoT networks, which are prone to attacks such as man-in-the-middle (MITM) threats.

Innovation Solution

A system and method for establishing a trusted key management and security policy using a Key Distribution Center (KDC) and Trusted Execution Environment (TEE) to negotiate and share symmetric keys between IoT devices and intermediary sentinel devices, ensuring secure communication and minimizing the risk of key leakage or malware attacks, while allowing for cross-domain security policies and monitoring.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional security solutions like deep packet inspection and key management are implemented across IoT networks, then security monitoring capability is improved, but device complexity and resource consumption increase beyond what resource-constrained IoT devices can handle

Engineering Contradiction:
Improvesecurity monitoring capabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a sentinel appliance as an intermediary device that performs security monitoring functions. The sentinel appliance intercepts encrypted traffic between IoT devices, performs deep packet inspection and security analysis, then forwards the traffic. This mediator approach allows security monitoring without burdening the resource-constrained IoT devices themselves with complex security functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments security functionality from data plane traffic flow. Security monitoring functions (deep packet inspection, key management, threat detection) are separated into a dedicated sentinel appliance, while IoT devices focus on their primary functions. This segmentation allows security capabilities to be enhanced without increasing complexity at the IoT device level.

Inventive Principle:
Principle #1Segmentation

2Reliability

If encrypted connections are established between IoT devices to protect data, then security against MITM attacks is improved, but the ability to monitor and inspect traffic for security threats worsens

Engineering Contradiction:
Improveprotection against MITM attacksVSAvoidtraffic inspection capability
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The sentinel appliance acts as a trusted intermediary that is inserted into the encrypted communication path. It performs SSL/TLS termination, allowing it to decrypt traffic for inspection while maintaining end-to-end encryption for the actual IoT devices. This enables both encrypted communication protection and security monitoring simultaneously.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system combines multiple security mechanisms: end-to-end encryption between IoT devices, intermediate decryption and inspection by the sentinel appliance, and re-encryption before forwarding. This composite security approach maintains encryption benefits while enabling necessary monitoring capabilities.

Inventive Principle:
Principle #40Composite materials

Data Source

PatentEP3308518B1Sentinel appliance in an internet of things realm
Publication Date: 2022.11.23 MCAFEE LLC
  • EP3308518B1 patent drawingFigure 1
  • EP3308518B1 patent drawingFigure 2
  • EP3308518B1 patent drawingFigure 3

AI summary

In an example, there is disclosed a computing apparatus, comprising : a trusted execution environment (TEE); and a security engine operable to: identify a key negotiation for an encrypted connection between a first device and a second device; request a service appliance key for the key negotiation; receive the service appliance key; and perform a service appliance function on traffic between the first device and the second device. There is also disclosed a method of providing the security engine, and a computer-readable medium having stored thereon executable instructions for providing the security engine.