Virtual Device Access Control for Shared IoT Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT device sharing systems lack effective access control mechanisms to manage and secure device usage among multiple users, particularly in scenarios where different users have varying access rights to shared devices and their functions.
Innovation Solution
An information processing apparatus and method that utilizes a server to manage device access by generating a virtual device and Web API, allowing only authenticated users to access specific device functions through a unique virtual device interface, thereby enforcing access control without modifying the device itself and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a sharing system allows multiple users to access IoT devices, then device utilization and service coverage are improved, but access control security and user-specific permission management deteriorate
Solution Approach 1:
The patent introduces a server as an intermediary between users and IoT devices. The server generates virtual devices that act as mediators, receiving user requests and translating them into device-specific operations. This intermediary layer enables secure access control by authenticating users and managing permissions without requiring direct user-device connections, thus resolving the contradiction between multi-user access and security.
Solution Approach 2:
The patent creates virtual device copies that represent physical devices in the sharing system. Each virtual device contains the necessary access credentials and permission information, allowing multiple users to access the same physical device through their own virtual device instances. This copying mechanism enables scalable multi-user access while maintaining centralized security control through the server.
2Reliability
If access control mechanisms are implemented for shared devices, then security is improved, but system complexity and implementation difficulty worsen
Solution Approach 1:
The patent extracts the complex access control logic from the IoT devices themselves and relocates it to a centralized server. The server handles user authentication, credential generation, and permission management, while devices only need to verify simple tokens. This extraction reduces device complexity and concentrates security functionality in a manageable central location.
Solution Approach 2:
The server implements a universal access control system that handles multiple devices and users through a single centralized platform. The virtual device mechanism provides a multi-functional solution that works across different device types and user scenarios, reducing overall system complexity by avoiding the need for separate access control implementations at each device.
3Reliability
If virtual devices and Web APIs are generated for each user, then user-specific access control is improved, but processing overhead and server resource consumption worsen
Solution Approach 1:
The server performs preliminary actions by pre-generating virtual devices and caching access credentials before users actually need them. Authentication information and device access tokens are prepared in advance and stored, allowing rapid user access without real-time computation overhead. This preliminary preparation reduces processing demands during actual user operations.
Solution Approach 2:
The patent merges multiple access control functions into a single virtual device object. Each virtual device consolidates user authentication, device permissions, and access credentials into one unified structure, reducing the need for separate processing for each function and minimizing server resource consumption through combined operations.
Data Source
AI summary
According to an aspect of the embodiments, an apparatus includes an information processing apparatus includes a memory, and circuitry coupled to the memory and configured to accept registration of a device available for a user and an available function of the device, generate a Web application programming interface according to the registration, and also generates a virtual device that responds to access to the Web application programming interface in cooperation with the device, notify a terminal of information including an access method to the Web application programming interface corresponding to an authenticated user, based on a result of user authentication using the terminal, and accept access to the Web application programming interface from the terminal and accesses the device via the virtual device.