SYSTEM AND METHOD FOR INTERNET OF THINGS (IOT) SECURITY AND MANAGEMENT

• US 20170279620A1
• Filed: 06/13/2017
• Published: 09/28/2017
• Est. Priority Date: 04/30/2010
• Status: Active Grant

• Current Assignee: T-Central, Inc.
• Original Assignee: T-Central, Inc.
• Inventors: Kravitz, David W., Graham, III, Donald Houston, Boudett, Josselyn L., Dietz, Russell S.
• Granted Patent: US 9,832,026 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

System and method for establishing a secure communication between a plurality of Internet of Things (IoT) devices, includes provisioning a first and a second IoT devices by providing a unique identification, a digital identity token and a cryptographic key to each of the first and second IoT devices; authenticating the second IoT device by the first IoT device; inviting the second IoT device by the first IoT device to establish a communication line with the first IoT device; establishing a secure communication line between the first IoT device and the second IoT device by authenticating the communication line between the first IoT device and the second IoT device and issuing a digital certificate to the communication line between the first IoT device and the second IoT device; establishing secure communication lines between the first IoT device, the second IoT device and a plurality of more devices; and grouping the first IoT device, the second IoT device and the plurality of more devices into different groups based on a predetermined criteria.

Claims

1. A method for establishing a secure communication between a plurality of Internet of Things (IoT) devices, each IoT device including a hardware processor and associated memory, the method comprising:

provisioning a first and a second IoT devices by providing a unique identification, a digital identity token and a cryptographic key to each of the first and second IoT devices;

authenticating the second IoT device by the first IoT device;

inviting the second IoT device by the first IoT device to establish a communication line with the first IoT device;

establishing a secure communication line between the first IoT device and the second IoT device by authenticating the communication line between the first IoT device and the second IoT device and issuing a digital certificate to the communication line between the first IoT device and the second IoT device;

establishing secure communication lines between the first IoT device, the second IoT device and a plurality of more devices; and

grouping the first IoT device, the second IoT device and the plurality of more devices into different groups based on a predetermined criteria.

2. The method of claim 1, wherein the secure communication line includes a digital agreement establishing terms of use of the secure communication line between the first and second IoT devices.

3. The method of claim 2, wherein grouping the devices includes group membership and a plurality of associated rules in a respective certification for a respective secure communication line.

4. The method of claim 1, further comprising preventing a third device for which a secure communication line to the first or second IoT device has not been established from communicating with the first or second IoT.

5. The method of claim 1, wherein the first and second IoT devices are components of one or more of an automobile, a medical device, a household appliance, and an aircraft.

6. The method of claim 1, wherein authenticating the second IoT device comprises using the unique identification and the digital identity token of the second IoT device.

7. The method of claim 1, wherein authenticating the second IoT device comprises using an inviter-invitee protocol.

8. A system for establishing a secure communication between a plurality of Internet of Things (IoT) devices, each IoT device including a hardware processor and associated memory, comprising:

a first IoT device including a first unique identification, a first digital identity token and a first cryptographic key; and

a second IoT device including a second unique identification, a second digital identity token and a second cryptographic key to establish a communication line with the first IoT device, wherein the first IoT and the second devices receive a digital certificate, establish a secure communication line therebetween by authenticating an established communication line between the first IoT device and the second IoT device, wherein the first IoT device further establishes secure communication lines with a plurality of more devices, and wherein the first IoT device and the plurality of more devices are grouped into different groups based on a predetermined criteria.

9. The system of claim 8, wherein the secure communication line between the first IoT device and the second IoT device includes a digital agreement establishing terms of use of the secure communication line between the first and second IoT devices.

10. The system of claim 8, wherein the first and second IoT devices are components of an automobile.

11. The system of claim 8, wherein the first and second IoT devices are components of a medical device.

12. The system of claim 8, wherein the first and second IoT devices are components of a household appliance.

13. The system of claim 8, wherein the first and second IoT devices are components of an aircraft.

14. The system of claim 8, wherein a third device for which a secure communication line to the first or second IoT device has not been established is prevented from communicating with the first or second IoT device.

15. A method for establishing a secure communication between a first Internet of Things (IoT) device and a second IoT device, each IoT device including a hardware processor and associated memory, a unique identification, a digital identity token and a cryptographic key, the method comprising:

establishing an unsecure communication line between the first IoT device and the second IoT device;

providing a first digital certificate to each of the first and second IoT devices;

authenticating the second IoT device by the first IoT device;

authenticating the unsecure communication line between the first IoT device and the second IoT device;

providing a second digital certificate to the communication line between the first IoT device and the second IoT device to establish a secure communication line between the first IoT device and the second IoT device;

establishing secure communication lines between the first IoT device and a plurality of more devices; and

grouping the first IoT device, the second IoT device and the plurality of more devices into different groups based on a predetermined criteria.

16. The method of claim 15, wherein authenticating the second IoT device comprises using the unique identification and the digital identity token of the second IoT device.

17. The method of claim 15, further comprising preventing a third IoT device for which a secure communication line to the first or second IoT device has not been established from communicating with the first or second IoT device;

18. The method of claim 15, further comprising inviting the second IoT device by the first IoT device to establish said unsecure communication line, by receiving a digital token from the second IoT device.

19. The method of claim 15, wherein the secure communication line between the first IoT device and the second IoT device includes digital agreement establishing terms of use of the secure communication line between the first and second IoT devices.

20. The method of claim 15, wherein the first and second IoT devices are components of one or more of an automobile, a medical device, a household appliance, and an aircraft.