Systems and methods for an IoT device registry that provides for dynamic trust ratings of registered devices

Patent metadata

Field	Value
Publication number	US-12198147-B2
Application number	US-202217722153-A
Country	US
Kind code	B2
Filing date	Apr 15, 2022
Priority date	Apr 16, 2021
Publication date	Jan 14, 2025
Grant date	Jan 14, 2025

Abstract

A method for determining a trust indicator is provided. The method may include interpreting, via an Internet of Things Universal Identifier (IoT UID) processing circuit, an IoT UID corresponding to a device and identifying, via a record management circuit and based at least in part on the IoT UID, a record in a database corresponding to the device. The method may further include determining, via a trust analysis circuit and based at least in part on the record, a risk indicator of the device and transmitting, via an indicator provisioning circuit, the risk indicator.

First claim

What is claimed is:

1. A method comprising:
interpreting, via an Internet of Things Universal Identifier (IoT UID) processing circuit, an IoT UID corresponding to a device, wherein the IoT UID is generated based at least in part on device property data, corresponding to the device, to provide a Seed of Trust;
identifying, via a record management circuit and based at least in part on the IoT UID, a record in a database corresponding to the device;
determining, via a trust analysis circuit and based at least in part on the record and the Seed of Trust, a risk indicator of the device; and
transmitting, via an indicator provisioning circuit, the risk indicator.

2. The method of claim 1 , wherein the risk indicator is a numeric value.

3. The method of claim 1 , wherein the risk indicator is displayed as a color-coded value.

4. The method of claim 1 , wherein the risk indicator is based at least in part on at least one of a location of the device, a time period, a software, or firmware version of the device.

5. The method of claim 1 , wherein the risk indicator is reflective of the device being a Greenfield device or a Brownfield device.

6. The method of claim 1 , further comprising authorizing an interaction with the device based at least in part on the risk indicator.

7. The method of claim 1 , further comprising prohibiting an interaction with the device based at least in part on the risk indicator.

8. The method of claim 7 , wherein the interaction is an exchange of data with the device or is establishing a network connection with the device.

9. The method of claim 1 , further comprising adjusting the risk indicator based on an event of the device, wherein the event is at least one of a transfer of ownership, patching of the device, or an updating of a software and/or a firmware of the device.

10. The method of claim 1 , further comprising interpreting a device event message and updating the record in an IoT device registry based at least in part on the device event message.

11. An apparatus comprising:
an Internet of Things Universal Identifier (IoT UID) processing circuit structured to interpret an IoT UID corresponding to a device, wherein the IoT UID is generated based at least in part on device property data, corresponding to the device, to provide a Seed of Trust;
a record management circuit structured to identify, based at least in part on the IoT UID, a record in a database corresponding to the device;
a trust analysis circuit structured to determine, based at least in part on the record and the Seed of Trust, a risk indicator of the device; and
an indicator provisioning circuit structured to transmit the risk indicator.

12. The apparatus of claim 11 , wherein the risk indicator is based at least in part on at least one of a location of the device, a time period, a software, or firmware version of the device.

13. The apparatus of claim 11 , wherein the risk indicator is based at least in part on artificial intelligence.

14. The apparatus of claim 11 , further comprising a trust indicator processing circuit structured to authorize an interaction with the device based at least in part on the risk indicator.

15. The apparatus of claim 11 , further comprising a trust indicator processing circuit structured to prohibit an interaction with the device based at least in part on the risk indicator.

16. The apparatus of claim 15 , wherein the interaction is an exchange of data with the device or is establishing a network connection with the device.

17. A method comprising:
interpreting, via an Internet of Things Universal Identifier (IoT UID) processing circuit, an IoT UID corresponding to a device, wherein the IoT UID is generated based at least in part on device property data, corresponding to the device, to provide a Seed of Trust;
generating, via a trust verification circuit, a trust indicator request value that includes the IoT UID corresponding to the device;
transmitting, via a trust indicator request provisioning circuit, the trust indicator request value to an IoT device registrar server; and
interpreting, via a trust indicator processing circuit, a trust indicator generated by the IoT device registrar server based at least in part on the Seed of Trust and in response to the trust indicator request value.

18. The method of claim 17 , wherein the trust indicator is based at least in part on at least one of a location of the device, a time period, a software, or firmware version of the device.

19. The method of claim 17 , further comprising authorizing an interaction with the device based at least in part on the trust indicator.

20. The method of claim 17 , further comprising prohibiting an interaction with the device based at least in part on the trust indicator.

Assignees

• Somos Inc

Inventors

• Brazao Eduardo Correia Da Silva
• Brumer Steven Norman
• Klein Ian Michael
• Kong Li
• Plante Marc Rudloff
• Ramachandran Sridhar
• Shyu Kimberly Tashner
• Sliwa Robert Janusz
• Smith Jeffrey Scott
• Wendt Christopher Anton
• Yu Haofang

Classifications

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L63/126

  the source of the received data · CPC title

• H04L43/0817

  by checking functioning · CPC title

• H04L41/0813

  characterised by the conditions triggering a change of settings · CPC title

• H04L41/0806

  for initial configuration or provisioning, e.g. plug-and-play · CPC title