Network security systems and methods

Patent metadata

Field	Value
Publication number	US-12052292-B2
Application number	US-202318317584-A
Country	US
Kind code	B2
Filing date	May 15, 2023
Priority date	Feb 14, 2014
Publication date	Jul 30, 2024
Grant date	Jul 30, 2024

Abstract

This disclosure relates to systems and methods for managing connected devices and associated network connections. In certain embodiments, trust, privacy, safety, and/or security of information communicated between connected devices may be established in part through use of security associations and/or shared group tokens. In some embodiments, these security associations may be used to form an explicit private network associated with the user. A user may add and/or manage devices included in the explicit private network through management of various security associations associated with the network's constituent devices.

First claim

What is claimed is:

1. A method of managing operation of connected devices, the method comprising:
exposing, by a gateway device, an indication of a composite service offered by the gateway device based on information included in explicit private network state information associated with a plurality of first connected devices in communication with the gateway device, the explicit private network state information being managed, at least in part, by the gateway device, the composite service comprising one or more actions performed by the plurality of first connected devices;
receiving, by the gateway device from a second connected device, a request to perform the composite service;
determining, by the gateway device based, at least in part, on the explicit private network state information, that the gateway device may initiate performance of the composite service by the plurality of first connected devices in accordance with the request;
generating, by the gateway device based on the determination, one or more command messages configured to control the operation of the plurality of first connected devices to perform the composite service; and
transmitting, by the gateway device, the one or more command messages to the plurality of first connected devices.

2. The method of claim 1 , wherein exposing the indication of the composite service offered by the gateway device comprises exposing the indication of the composite service offered by the gateway device to the second connected device.

3. The method of claim 1 , wherein the explicit private network state information comprises identification information associated with the plurality of first connected devices.

4. The method of claim 3 , wherein the identification information comprises information uniquely associated with at least one connected device of the plurality of first connected devices.

5. The method of claim 4 , wherein the information uniquely associated with the at least one connected device of the plurality of first connected devices comprises at least one of a device universally unique identifier and Internet protocol identification information.

6. The method of claim 3 , wherein the identification information comprises a name assigned to at least one connected device of the plurality of first connected devices by an associated entity.

7. The method of claim 1 , wherein the explicit private network state information comprises information relating to one or more acceptable commands associated with at least one connected device of the plurality of first connected devices.

8. The method of claim 1 , wherein the explicit private network state information comprises security association information associated with the plurality of first connected devices.

9. The method of claim 8 , wherein determining that the gateway device may initiate performance of the composite service by the plurality of first connected devices in accordance with the request is based, at least in part, on the security association information.

10. The method of claim 8 , wherein the security association information comprises a group token.

11. The method of claim 10 , wherein the group token comprises a group key.

12. The method of claim 10 , wherein determining that the gateway device may initiate performance of the composite service by the plurality of first connected devices in accordance with the request comprises determining, based on the request to perform the composite service, that the second device is associated with the group token.

13. The method of claim 12 , wherein the request to perform the composite service received from the second connected device comprises the group token.

14. The method of claim 1 , wherein determining that the gateway device may initiate performance of the composite service by the plurality of first connected devices in accordance with the request comprises determining that the second connected device is associated with the plurality of first connected devices based on the explicit private network state information.

15. The method of claim 1 , wherein the explicit private network state information associated with the plurality of first connected devices comprises information relating to acceptable data that may be communicated to at least one connected device of the plurality of first connected devices.

16. The method of claim 1 , wherein the gateway device comprises at least one of a smartphone, a tablet computer system, a desktop computer system, a laptop computer system, a wearable computing device, a connected vehicle, a telematics system, a security system, a home automation system, a connected thermostat, a connected heating system, a connected cooling system, a utility meter, a medical device, a gaming system, a network infrastructure system, a television, a speaker, and a digital camera.

17. The method of claim 1 , wherein at least one connected device of the plurality of first connected devices comprises at least one of a smartphone, a tablet computer system, a desktop computer system, a laptop computer system, a wearable computing device, a connected vehicle, a telematics system, a security system, a home automation system, a connected thermostat, a connected heating system, a connected cooling system, a utility meter, a medical device, a gaming system, a network infrastructure system, a television, a speaker, and a digital camera.

18. The method of claim 1 , wherein the second connected device comprises at least one of a smartphone, a tablet computer system, a desktop computer system, a laptop computer system, a wearable computing device, a connected vehicle, a telematics system, a security system, a home automation system, a connected thermostat, a connected heating system, a connected cooling system, a utility meter, a medical device, a gaming system, a network infrastructure system, a television, a speaker, and a digital camera.

Assignees

• Intertrust Tech Corp

Inventors

• Maher David P
• Boccon-Gibod Gilles

Classifications

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L67/51

  Discovery or management thereof, e.g. service location protocol [SLP] or web services · CPC title

• H04W12/50

  Secure pairing of devices · CPC title

• H04W4/70

  Services for machine-to-machine communication [M2M] or machine type communication [MTC] · CPC title

• H04W12/08

  Access security · CPC title