METHOD AND SYSTEM FOR AN INTERNET OF THINGS PLATFORM

• US 20200137043A1
• Filed: 04/16/2019
• Published: 04/30/2020
• Est. Priority Date: 10/31/2018
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: Nec Laboratories Europe GMBH (NEC Corporation)
• Inventors: Cirillo, Flavio
• Granted Patent: US 11,283,788 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/562 Brokering proxy services
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/38 for collecting sensor information
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

A method for performing privacy-preserving data federation in an internet-of-things (IoT) system includes: receiving a data message; determining whether the data message contains new information; based on determining that the data message contains the new information, determining one or more directives to trigger based on the data message; and generating a registration based on the one or more triggered directives.

Claims

1. A method for performing privacy-preserving data federation in an internet-of-things (IoT) system, the method comprising:

receiving a data message;

determining whether the data message contains new information;

based on determining that the data message contains the new information, determining one or more directives to trigger based on the data message; and

generating a registration based on the one or more triggered directives.

2. The method of claim 1,

wherein the one or more triggered directives are selected from a set of directives, each directive of the set of directives comprising corresponding registration generation functions, and

wherein the generating the registration based on the one or more triggered directives comprises:

retrieving the registration generation functions of each of the one or more triggered directives, and

executing the registration generation function on the data message to generate the registration.

3. The method of claim 1, the method further comprising:

determining whether the generated registration is a new registration or relates to, but does not match, an existing registration; and

based on determining that the generated registration is the new registration or relates to, but does not match, the existing registration, outputting the generated registration.

4. The method of claim 3, the method further comprising generating an access policy based on the one or more triggered directives.

5. The method of claim 4,

wherein the one or more triggered directives are selected from a set of directives, each directive of the set of directives comprising corresponding policy generation functions, and

wherein the generating the access policy based on the one or more triggered directives comprises:

retrieving the policy generation functions of each of the one or more triggered directives, and

executing the policy generation function on the data message to generate the access policy.

6. The method of claim 4, the method further comprising:

determining whether the generated access policy is a new access policy or relates to, but does not match, an existing access policy; and

based on determining that the generated access policy is the new access policy or relates to, but does not match, the existing access policy, outputting the generated access policy.

7. The method of claim 4, the method further comprising:

determining whether the generated access policy matches an existing access policy; and

based upon determining that the generated access policy matches an existing access policy, discarding the generated access policy.

8. The method of claim 1, the method further comprising:

determining whether the generated registration matches an existing registration; and

based upon determining that the generated registration matches the existing registration, discarding the generated registration.

9. The method of claim 1, wherein the data message is a data context message or a data availability message.

10. The method of claim 1, wherein it is determined that the data message contains the new information based on the data message identifying:

a new entity in the IoT system, a new attribute of a known entity in the IoT system;

new metadata of the known entity;

or a new metadata value for the known entity.

11. The method of claim 1,

wherein the one or more triggered directives are selected from a set of directives, each directive of the set of directives comprising corresponding conditions, and

wherein the determining the one or more triggered directives comprises:

comparing the data message to the conditions for each directive of the set of directives; and

determining a particular directive of the set of directives is a potential directive to trigger based on the data message matching the conditions of the particular directive.

12. The method of claim 11,

wherein each directive of the set of directives comprises a corresponding priority, and

wherein the determining the one or more triggered directives comprises:

determining that the particular directive is the one or more triggered directives based on the particular directive being the only one of the set of directives having the conditions that match the data message or based on the particular directive having a priority that is equal to or greater than other ones of the set of directives that have the conditions that match the data message.

13. The method of claim 1, wherein one or more of the directives are received from a system administrator.

14. An internet-of-things (IoT) registrar comprising a processor coupled to a non-transitory storage memory containing instructions, which when executed by the processor, cause the IoT registrar to:

receive a data message;

determine whether the data message contains new information;

based on determining that the data message contains the new information, determine one or more directives to trigger based on the data message; and

generate a registration based on the one or more triggered directives.

15. A non-transitory processor-readable storage medium storing instructions that upon execution cause an internet-of-things (IoT) registrar to:

receive a data message;

determine whether the data message contains new information;

based on determining that the data message contains the new information, determine one or more directives to trigger based on the data message; and

generate a registration based on the one or more triggered directives.