Web-Based Device Automation System with Segmented Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Implementing Internet controllable devices in smart home environments requires knowledge of networking, server management, and network security, making it challenging for users to monitor and control appliances remotely without technical expertise.
Innovation Solution
A web-based device automation system that includes a central server and a hub, allowing everyday objects to be connected to the Internet for remote monitoring and control, with a distributed control scheme that enables event handlers to be executed on either the central server or the hub, optimizing resource utilization and user configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If each device implements full network communication capabilities for remote monitoring and control, then device functionality and connectivity are improved, but device complexity and cost increase
Solution Approach 1:
The system segments network communication functionality into two parts: simplified local communication modules in devices and a comprehensive network server that handles complex networking, server management, and communication protocols. This allows devices to remain simple while achieving full network capability through the server infrastructure.
Solution Approach 2:
A network server acts as an intermediary between devices and the internet, managing all complex networking, server management, and communication protocols. Devices only need basic communication capabilities to interact with the server, which then handles all complex internet connectivity tasks.
2Ease of operation
If devices are connected to the Internet for remote monitoring and control, then user accessibility is improved, but network security requirements and implementation difficulty increase
Solution Approach 1:
The system extracts all network security implementation requirements from individual devices and concentrates them in the network server. The server handles authentication, authorization, and secure communication protocols, while devices only need simple, pre-configured security credentials provided by the server.
Solution Approach 2:
The network server serves as a security intermediary that manages all authentication and authorization between users and devices. It implements network security policies, encrypts communications, and validates device identities, freeing devices from complex security implementation while maintaining strong security controls.
3Extent of automation
If automation applications are deployed to execute event handlers, then system automation capability is improved, but security risks from unauthorized device access increase
Solution Approach 1:
The system implements feedback mechanisms where the network server continuously monitors automation application executions and device access requests. It validates each action against security policies, logs all operations for auditing, and can revoke access rights if suspicious activity is detected, maintaining security while enabling automation.
Solution Approach 2:
The network server acts as a security intermediary that mediates all device access requests from automation applications. It verifies authorization credentials, enforces access control policies, and monitors execution to prevent unauthorized operations, allowing automation while maintaining reliable security controls.
Data Source
AI summary
A secured device access method is implemented in a web-based device automation system whereby the configuration of an automation application for specific devices in a user's automation environment and the installation of the automation application define the security scope for the automation application. Once the automation application is configured and installed, the automation application is only allowed access to the authorized devices in the user's automation environment and the automation application may not access other devices in the user's environment that have not been authorized.