Logical zones for IoT devices

Patent metadata

Field	Value
Publication number	US-10965684-B2
Application number	US-201816194068-A
Country	US
Kind code	B2
Filing date	Nov 16, 2018
Priority date	Apr 18, 2017
Publication date	Mar 30, 2021
Grant date	Mar 30, 2021

Abstract

Methods for logically grouping Internet of Things (IoT) devices are described. One or more logical zones are defined. Each logical zone includes one or more physical zones, one or more virtual zones, or a combination of physical and virtual zones. Each IoT device is associated with at least one logical zone. Communication between the IoT devices is restricted based on the zones with which the IoT devices are associated.

First claim

What is claimed is:

1. A method for a group of Internet of Things enabled devices, comprising:
defining one or more logical zones, wherein each logical zone of the one or more logical zones includes one or more physical zones and one or more virtual zones, and wherein the each logical zone of the one or more logical zones has associated semantics;
in response to the defining the one or more logical zones, associating the group of Internet of Things enabled devices with the one or more logical zones by, for each Internet of Things enabled device in the group of Internet of Things enabled devices:
determining, through a semantic query, whether metadata associated with the each Internet of Things enabled device in the group of Internet of Things enabled devices is relevant to associated semantics of at least one logical zone of the one or more logical zones; and
in response to the determining that metadata associated with the each Internet of Things enabled device in the group of Internet of Things enabled devices is relevant to the associated semantics of the at least one logical zone of the one or more logical zones, associating the each Internet of Things enabled device in the group of Internet of Things enabled devices with the at least one logical zone; and
in response to the associating the group of Internet of Things enabled devices with the one or more logical zones, restricting communication between Internet of Things enabled devices in the group of Internet of Things enabled devices based on trusted communication profiles, wherein the trusted communication profiles include information about the one or more logical zones with which the Internet of Things enabled devices in the group of Internet of Things enabled devices are associated, and wherein communication is only allowed between the Internet of Things enabled devices in the group of Internet of Things enabled devices that belong to a same logical zone of the one or more logical zones.

2. The method of claim 1 , wherein a physical zone is a two-dimensional zone that is defined using one or more of: a geo-location boundary, geo-fencing using a global positioning system, a near-field wireless network, and a camera.

3. The method of claim 2 , wherein a physical zone is a three-dimensional zone that includes two or more two-dimensional zones.

4. The method of claim 2 , wherein a virtual zone includes one or more subsets of one or more physical zones.

5. The method of claim 1 , wherein the restricting of the communication between the Internet of Things enabled devices in the group of Internet of Things enabled devices includes:
defining a particular trusted communication profile between the Internet of Things enabled devices in the group of Internet of Things enabled devices for which communication is allowed; and
in response to determining that a particular Internet of Things enabled device does not match the particular trusted communication profile, refusing communication between the particular Internet of Things enabled device and other Internet of Things enabled devices.

6. The method of claim 1 , wherein the restricting of the communication between the Internet of Things enabled devices in the group of Internet of Things enabled devices includes:
allowing communications from an Internet of Things enabled device at a higher hierarchy logical zone to an Internet of Things enabled device at a lower hierarchy logical zone.

7. The method of claim 1 , wherein the restricting of the communication between the Internet of Things enabled devices in the group of Internet of Things enabled devices includes:
in response to an Internet of Things enabled device moving from one logical zone to a new logical zone, allowing communications that were pending prior to the move to the new logical zone.

8. The method of claim 1 , wherein the restricting of the communication between the Internet of Things enabled devices in the group of Internet of Things enabled devices includes:
in response to an Internet of Things enabled device changing ownership, allowing communications that were pending prior to the change of ownership.

Assignees

• IBM

Inventors

• Achtermann Jeffrey M
• Kurtz Harrison
• Mukherjee Maharaj
• Ng Joanna W

Classifications

• H04L67/125

  involving control of end-device applications over a network · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W4/021

  Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences · CPC title