Fragmented updating of a distributed device using multiple clients

• US 10,452,381 B2
• Filed: 04/04/2017
• Issued: 10/22/2019
• Est. Priority Date: 04/04/2017
• Status: Active Grant

• Current Assignee: Openpath Security, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Openpath Security, Inc. (Motorola Solutions, Inc.)
• Inventors: Khakpour, Amir Reza, Kazerani, Alexander A., Kamkar, Samy, Peters, Robert J.
• Primary Examiner(s): Jeon, Jae U
• Application Number:
  US15/478,429
• Publication Number:
  US 20180285089A1
• Time in Patent Office: 931 Days
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Disclosed are systems and methods for updating a distributed system device with an update that a system controller fragments and propagates to the system device by way of two or more third party clients. The system controller manages client access rights to a service accessible at different distributed system devices. The system controller has first network connectivity with which to remotely distribute different fragments of an update to different clients. Each system device controls access to the service at different a site and has (i) second network connectivity with which the different clients propagate different fragments of the update to the system device upon entering communication range with the system device, (ii) memory storing different sets of fragments for the update based on different times at which the clients propagate the fragments, and (iii) a processor applying the update once all fragments of the update to the memory.

Claims

1. A method comprising:

partitioning an update for a distributed system device into a plurality of update fragments at a system controller, each update fragment of the plurality of update fragments storing a different and non-overlapping portion of the update for the system device;

distributing different update fragments of the plurality of update fragments from the system controller to different remote clients of a plurality of remote clients over a first wireless network, wherein said distributing prevents any remote client from having access to all of the update as a result of each remote client receiving a different update fragment of the plurality of update fragments and no remote client receiving all of the plurality of update fragments;

receiving a different update fragment from each remote client at the system device via a different second wireless network, wherein the second wireless network has less range than the first wireless network, and wherein said receiving comprises;

establishing, at different times, a different network connection between each particular remote client of the plurality of remote clients and the system device in response to the particular remote client entering in range of the second wireless network;

obtaining at the system device, at least a first update fragment of the plurality of update fragments from a first remote client of the plurality of remote clients using a first network connection that is established with the system device over the second wireless network at a first time when the first remote client enters in range of the second wireless network, and at least a second update fragment of the plurality of update fragments from a second remote client of the plurality of remote clients using a different second connection that is established with the system device over the second wireless network at a different second time when the second remote client enters in range of the second wireless network;

decoding, at the system device, the update in response to receiving different update fragments from each of the plurality of remote clients and all of the plurality of update fragments from the plurality of remote clients, and reordering the plurality of update fragments according to a sequence number of each update fragment, wherein said decoding comprises combining the different update fragments to form the update;

performing a local update of the system device based on the update.

2. The method of claim 1, wherein said receiving is further in response to each remote client requesting access to a service controlled by the system device.

3. The method of claim 2 further comprising unlocking a door for a set of the plurality of remote clients with the system device in response to said system device authorizing access requests from the set of remote clients while simultaneously receiving one or more of the update fragments from the set of remote clients.

4. The method of claim 1, wherein said partitioning comprises signing each update fragment of the plurality of update fragments with an identity of the system controller.

5. The method of claim 1, wherein said partitioning comprises assigning a different sequence number to each update fragment of the plurality of update fragments by the system controller.

6. The method of claim 1, wherein said partitioning comprises assigning a particular target identifier to each update fragment of the plurality of update fragments by the system controller, the particular target identifier matching to at least an identifier of the system device.

7. The method of claim 6 further comprising receiving at the system device from a remote client, an update fragment comprising a different target identifier not matching the identifier of the system device, and dropping said update fragment at the system device.

8. An access control system comprising:

a system controller managing updates to a configuration of a plurality of remotely distributed system devices, and further managing access rights of a plurality of clients to at least one service at the plurality of remotely distributed system devices, the system controller comprising a first network radio that communicates via a first wireless network technology, wherein the system controller remotely distributes different update fragments from a plurality of update fragments for a system device configuration update across different clients of the plurality of clients using the first network radio with each client receiving a different update fragment of the plurality of update fragments and no client receiving all of the plurality of update fragments or all of the system device configuration update; and

a particular system device of the plurality of remotely distributed system devices controlling access to said service at a particular site, the particular system device comprising;

(i) a different second network radio that communicates via a different second wireless network technology, wherein the particular system device receives different update fragments of the plurality of update fragments from the different clients of the plurality of clients via the second network radio upon the different clients entering communication range of the second wireless network technology;

(ii) memory storing;

a first set of the plurality of update fragments in response to a first client of the plurality of clients transmitting the first set of update fragments to the particular system device at a first time coinciding with the first client entering said communication range, and

a second set of the plurality of update fragments in response to a different second client of the plurality of clients transmitting the second set of update fragments to the particular system device at a different second time coinciding with the second client entering said communication range;

(iii) a processor changing the system device configuration by reordering the first and second sets of update fragments, that include all update fragments of the plurality of fragments, based on a sequence number of each update fragment, decoding the system device configuration update from a reordering of the first and second set of update fragments, and applying the system device configuration update to the system device configuration.

9. The system of claim 8, wherein said first wireless network technology is a long-range wireless network technology, and said second wireless network technology is a short-range wireless network technology, and wherein said particular system device is located a distance from the system controller preventing connectivity with the system controller using said second wireless network technology.

10. The system of claim 8, wherein said memory further stores an old set of access privileges for the plurality of clients, the plurality of update fragments comprises a new set of access privileges for the plurality of clients, and the processor changes the system device configuration by replacing the old set of access privileges in the memory with the new set of access privileges.

11. The system of claim 8, wherein said memory further stores an old operating configuration for the particular system device, the plurality of update fragments comprises a new operating configuration, and the processor changes the system device configuration by changing from the old operating configuration to the new operating configuration.

12. The system of claim 8, wherein the plurality of clients are operated by a plurality of different users independent of the access control system, and wherein each client of the plurality of clients comprises said first network radio and said second network radio.

13. A method comprising:

generating an update to a configuration of a remote device at a system controller;

dividing said update into a plurality of fragments at the system controller;

assigning a value, corresponding to a sequence number, to each fragment of the plurality of fragments at the system controller;

distributing, from the system controller, different fragments of the plurality of fragments across different user mobile devices of a plurality of user mobile devices via a first wireless network, wherein said distributing prevents any user mobile device from having access to all of the update;

receiving, at the remote device, different sets of the plurality of fragments from different user mobile devices at different times when each user mobile device enters in range of a different second wireless network used to communicate with the remote device, wherein said receiving comprises the different sets of the plurality of fragments arriving at the remote device with the values out of sequential order;

decoding, at the remote device, the update in response to said receiving and reordering the fragments according to the value assigned to each fragment, wherein said decoding comprises combining the plurality of fragments to form the update; and

updating the configuration of the remote device using the update resulting from said decoding.

14. The method of claim 13 further comprising encrypting each fragment of the plurality of fragments with a private key.

15. The method of claim 14, wherein said updating comprises determining all fragments of the plurality of fragments are received at the remote device, reconstructing the update by decrypting the plurality of fragments with a public key corresponding to said private key, and applying said update at the remote device.

16. The method of claim 13, wherein the plurality of user mobile devices initially communicate with the system controller over a long-range first network and subsequently communicate with the system device over a short-range second network.