UAV Intermediary Pairing for Secure IoT Network Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The increasing severity of cybersecurity attacks, eavesdropping, and data breaches in network communications, particularly in networks with vulnerabilities such as older equipment and IoT devices, necessitates the development of secure device pairing methods for enhancing network security.

Innovation Solution

The implementation of intermediary pairing devices, potentially housed in unmanned aerial vehicles (UAVs), which establish temporary connections between networks using transceivers and execute cybersecurity service functions like firewalls and intrusion detection, while utilizing ambient sensor data for device verification and anomaly detection through multimodal data-fused neural networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If networks connect to provide communication between devices and servers, then communication capability is improved, but cybersecurity risks increase due to vulnerabilities in legacy equipment and IoT devices

Engineering Contradiction:
Improvecommunication capabilityVSAvoidcybersecurity risks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary pairing device that acts as a mediator between networks containing vulnerable legacy equipment and secure networks. This pairing device establishes temporary secure connections, allowing communication while blocking direct access to vulnerable devices. The intermediary validates pairing requests and filters traffic, enabling communication capability while mitigating cybersecurity risks from IoT devices and legacy equipment.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If intermediary pairing devices establish temporary connections between networks, then network security is improved, but device complexity increases

Engineering Contradiction:
Improvenetwork securityVSAvoidpairing device complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The pairing device is designed as a universal multi-functional unit that can operate in different network configurations and support multiple pairing protocols. It performs multiple functions including authentication, encryption, traffic filtering, and session management within a single device. This multi-functionality reduces the need for multiple separate security components, managing complexity while maintaining high network security through centralized control.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Measurement precision

If ambient sensor data is used for device verification and anomaly detection, then detection precision is improved, but use of energy increases due to multimodal data processing

Engineering Contradiction:
Improveanomaly detection precisionVSAvoidenergy consumption for sensor processing
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The system implements partial action by selectively processing sensor data based on risk levels and contextual conditions. Not all ambient sensor data is processed continuously; instead, the system activates full multimodal processing only when anomalies are detected or during high-risk operations. During normal operation, minimal verification is performed, reducing energy consumption while maintaining detection precision when needed through targeted analysis of sensor inputs.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS10511446B2Methods and apparatus for secure device pairing for secure network communication including cybersecurity
Publication Date: 2019.12.17 CISCO TECHNOLOGY INC
  • US10511446B2 patent drawing
  • US10511446B2 patent drawing
  • US10511446B2 patent drawing

AI summary

In one illustrative example, a network cybersecurity procedure may be employed with use of at least one unmanned aerial vehicle (UAV), where the UAV includes an intermediary pairing device for providing a temporary connection between a first network (e.g. a private LAN) and a second network (e.g. the Internet). The network cybersecurity procedure may involve deploying the UAV in proximity to the first network, such that the intermediary pairing device pairs with a first pairing device via a first transceiver and with a second pairing device via a second transceiver. A temporary connection is established between the first network connected via the first pairing device and the second network connected via the second pairing device. Data is communicated between a first device (e.g. IoT device) or server of the first network and a second device or server of the second network over the temporary connection. During this time, the intermediary pairing device executes a cybersecurity service function. Once completed, the UAV may be withdrawn out of proximity of the first network. One or more features of the cybersecurity service function may be updated and the UAV redeployed. Multimodal data fusion techniques with use of a plurality of network and device sensors may be employed for device verification and/or anomaly detection.