System and method for configuration of a connected device connection

• US 10,581,923 B2
• Filed: 09/05/2017
• Issued: 03/03/2020
• Est. Priority Date: 09/07/2016
• Status: Active Grant

• Current Assignee: Cloud of Things Ltd.
• Original Assignee: Cloud of Things Ltd.
• Inventors: Gnessin, Eliav, Chouraqui, David Ariel
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US16/330,089
• Publication Number:
  US 20190253458A1
• Time in Patent Office: 910 Days
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/148 Migration or transfer of sessions
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

A method for connecting a connected device to a secure network of interconnected computers, the method comprising: sending, by a processing unit of the connected device, to a cloud switch server, an activation request comprising first identification information enabling identification of the connected device; receiving, by the processing unit, from the cloud switch server, connection information enabling connecting the connected device to the secure network of interconnected computers; and establishing, by the processing unit, a connection between the connected device and the secure network of interconnected computers, utilizing the connection information.

Claims

1. A method for switching a connection of a connected device from a first connection to a first secure network of interconnected computers to a second connection to a second secure network of interconnected computers, the method comprising:

obtaining, by a processing resource of a cloud switch server, (a) a cloud device identifier generated by the second secure network of interconnected computers and enabling the second secure network of interconnected computers to identify the connected device, and (b) unique security credentials enabling only the connected device to connect to the second secure network of interconnected computers and to access at least parts thereof; and

sending, by the processing resource, to the connected device, connection information enabling connecting the connected device to the second secure network of interconnected computers, the connection information comprising (a) second identification information enabling identification of the second secure network of interconnected computers, (b) the cloud device identifier; and

(c) the unique security credentials;

wherein the obtaining and sending are performed after receiving, by the processing resource of the cloud switch server, from a user, a switch instruction for switching the connection of the connected device from the first connection to the first secure network of interconnected computers to the second connection to the second secure network of interconnected computers.

2. The method of claim 1 wherein the obtaining and sending are performed upon one or more criteria being met.

3. The method of claim 2 wherein the criteria includes one or more of the following:

a. one or more performance measures of the first secure network of interconnected computers do not meet a corresponding threshold;

b. one or more security requirements are not met by the first secure network of interconnected computers;

c. a first cost of the first connection is higher than a second cost of the second connection;

d. a current time of day is within a predetermined range; and

e. a current geographical location of the connected device is within a predetermined geographical area.

4. The method of claim 1 further comprising receiving, by the cloud switch server, from the second secure network of interconnected computers, at least one message sent by the connected device to the second secure network of interconnected computers.

5. The method of claim 1 further comprising sending, by the cloud switch server, at least one message to the connected device via the second secure network of interconnected computers, utilizing the cloud device identifier.

6. The method of claim 1 wherein the cloud switch server is not part of the first secure network of interconnected computers and of the second secure network of interconnected computers.

7. The method of claim 1 wherein the first connection is disconnected after the second connection is established.

8. The method of claim 1 further comprising migrating past data associated with the connected device and stored on the first secure network of interconnected computers to the second secure network of interconnected computers after the second connection is established.

9. A cloud switch server comprising a processing resource, the processing resource configured to:

obtain (a) a cloud device identifier generated by a second secure network of interconnected computers, other than a first secure network of interconnected computers to which a connected device is connected to, and enabling the second secure network of interconnected computers to identify the connected device, and (b) unique security credentials enabling only the connected device to connect to the second secure network of interconnected computers and to access at least parts thereof; and

send, to the connected device, connection information enabling connecting the connected device to the second secure network of interconnected computers, the connection information comprising (a) second identification information enabling identification of the second secure network of interconnected computers, (b) the cloud device identifier; and

(c) the unique security credentials;

wherein the obtain and send are performed after receiving, by the processing resource, from a user, a switch instruction for switching a connection of the connected device from a first connection to the first secure network of interconnected computers to a second connection to the second secure network of interconnected computers.

10. The cloud switch server of claim 9, wherein the obtain and send are performed upon one or more criteria being met.

11. The cloud switch server of claim 10 wherein the criteria includes one or more of the following:

a. one or more performance measures of the first secure network of interconnected computers do not meet a corresponding threshold;

b. one or more security requirements are not met by the first secure network of interconnected computers;

c. a first cost of the first connection is higher than a second cost of the second connection;

d. a current time of day is within a predetermined range; and

e. a current geographical location of the connected device is within a predetermined geographical area.

12. The cloud switch server of claim 9 wherein the processing resource is further configured to receive, from the second secure network of interconnected computers, at least one message sent by the connected device to the second secure network of interconnected computers.

13. The cloud switch server of claim 9 wherein the processing resource is further configured to send at least one message to the connected device via the second secure network of interconnected computers, utilizing the cloud device identifier.

14. The cloud switch server of claim 9 wherein the cloud switch server is not part of the first secure network of interconnected computers and of the second secure network of interconnected computers.

15. The cloud switch server of claim 9 wherein the first connection is disconnected after the second connection is established.

16. The cloud switch server of claim 9 wherein the processing resource is further configured to migrate past data associated with the connected device and stored on the first secure network of interconnected computers to the second secure network of interconnected computers after the second connection is established.

17. A non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code, executable by at least one processor of a computer to perform a method comprising:

obtaining, by a processing resource of a cloud switch server, (a) a cloud device identifier generated by a second secure network of interconnected computers, other than a first secure network of interconnected computers to which a connected device is connected to, and enabling the second secure network of interconnected computers to identify the connected device, and (b) unique security credentials enabling only the connected device to connect to the second secure network of interconnected computers and to access at least parts thereof; and

sending, by the processing resource, to the connected device, connection information enabling connecting the connected device to the second secure network of interconnected computers, the connection information comprising (a) second identification information enabling identification of the second secure network of interconnected computers, (b) the cloud device identifier; and

(c) the unique security credentials;

wherein the obtain and send are performed after receiving, by the processing resource, from a user, a switch instruction for switching a connection of the connected device from a first connection to the first secure network of interconnected computers to a second connection to the second secure network of interconnected computers.