Systems and methods for device detection and authorization in a IOT framework

Patent metadata

Field	Value
Publication number	US-9633197-B2
Application number	US-201514640489-A
Country	US
Kind code	B2
Filing date	Mar 6, 2015
Priority date	Mar 6, 2015
Publication date	Apr 25, 2017
Grant date	Apr 25, 2017

Abstract

Provided herein are a method, a device, and a computer-readable medium operable to perform a method of automatically admitting a device to a network. The method can include receiving, from the one or more authorized devices in the network, first data that is associated with one or more sensing modalities, wherein the one or more sensing modalities are detected by the one or more of the one or more of the authorized devices during a defined time window; identifying a new device to be admitted to the network; constructing a time sequence of proximity events of the new device, within the defined time window, based on the first data; determining that the time sequence of the proximity events matches an expected time sequence of expected of proximity events; and admitting the new device to the network based on the determining.

First claim

What is claimed is:

1. A method implemented by a computer for automatically admitting a device to a computer network, the method comprising:
receiving, from the one or more authorized devices in the computer network, first data that is associated with one or more sensing modalities, wherein the one or more sensing modalities are detected by the one or more of the one or more of the authorized devices during a defined time window;
identifying, via a processor, a new device to be admitted to the computer network;
constructing a time sequence of proximity events of the new device, within the defined time window, based on the first data, wherein each proximity event is associated with a physical proximity between the new device and at least one of the one or more sensing modalities;
determining that the time sequence of the proximity events matches an expected time sequence of expected proximity events; and
admitting the new device to the computer network based on the determining.

2. The method of claim 1 , further comprising:
receiving, from the new device, second data associated with the one or more sensing modalities associated with the new device during the defined time window.

3. The method of claim 2 , wherein the time sequence of proximity events of the new device comprises the second data.

4. The method of claim 2 , wherein the constructing the time sequence of proximity events of the new device further comprises determining a path through a physical location associated with the computer network, wherein a physical location of the one or more authorized devices in the computer network forms the path.

5. The method of claim 4 , wherein determining the path is based on the first data and the second data.

6. The method of claim 1 , further comprising:
determining, after a time period, that the new device has not remained in proximity to the physical location of the computer network; and
removing the new device from the computer network.

7. The method of claim 1 , wherein the one or more modalities comprise temperature, visual, audio, heat, motion, particulate concentration.

8. The method of claim 5 , wherein determining the path comprises:
comparing a portion of the second data from the new device to a portion of the first data from one of the one or more authorized devices; and
determining, based on the comparison, a location of the new device relative to the one of the one or more authorized devices.

9. The method of claim 1 , wherein the identifying the new device to be admitted to the computer network, further comprises:
receiving a network discovery signal from the new device; and
providing an activation signal to the one or more authorized device to enter into a data capture mode.

10. The method of claim 1 , wherein the first data comprises individual sensing data from the one or more authorized devices.

11. The method of claim 1 , wherein the individual sensing data comprises a time value that a particular sensing data was acquired.

12. The method of claim 1 , further comprising;
ranking the one or more authorized devices based on a characteristic of the one or more devices; and
assigning a weighting factor based on the ranking, where authorized device with a higher rank are assigned a higher weighting factor,
wherein the determining that the time sequence of the proximity events matches the expected time sequence of expected proximity events is based on the weighting factor that is assigned.

13. The method of claim 12 , wherein the characteristic comprises a number of different sensing modalities, an authentication with a trusted entity.

14. The method of claim 1 , wherein the determining that the time sequence of the proximity events matches the expected time sequence of expected proximity events is based on a predetermined matching threshold of corroborating authorized devices.

15. The method of claim 1 , wherein the determining that the time sequence of the proximity events matches the expected time sequence of expected of proximity events is based on proximity information received using a near-field communication protocol between the new device and one of the one or more authorized devices.

16. A computing device for automatically admitting a device to a computer network, the computing device comprising:
a memory that includes a software application; and
a processor, operably connected to the memory, wherein, when the processor executes software application, the processor is configured to:
receiving, from the one or more authorized devices in the computer network, first data that is associated with one or more sensing modalities, wherein the one or more sensing modalities are detected by the one or more of the one or more of the authorized devices during a defined time window;

identifying a new device to be admitted to the computer network;
constructing a time sequence of proximity events of the new device, within the defined time window, based on the first data, wherein each proximity event is associated with a physical proximity between the new device and at least one of the one or more sensing modalities;
determining that the time sequence of the proximity events matches an expected time sequence of expected proximity events; and
admitting the new device to the computer network based on the determining.

17. The device of claim 16 , wherein the at least one processor is further operable to execute instructions comprising:
receiving, from the new device, second data associated with the one or more sensing modalities associated with the new device during the defined time window.

18. The device of claim 17 , wherein the time sequence of proximity events of the new device comprises the second data.

19. The device of claim 17 , wherein the constructing the time sequence of proximity events of the new device further comprises determining a path through a physical location associated with the computer network, wherein a physical location of the one or more authorized devices in the computer network forms the path.

20. The device of claim 19 , wherein determining the path is based on the first data and the second data.

21. The device of claim 16 , wherein the at least one processor is further operable to execute instructions comprising:
determining, after a time period, that the new device has not remained in proximity to the physical location of the computer network; and
removing the new device from the computer network.

22. The device of claim 16 , wherein the one or more modalities comprise temperature, visual, audio, heat, motion, particulate concentration.

23. The device of claim 20 , wherein determining the path comprises:
comparing a portion of the second data from the new device to a portion of the first data from one of the one or more authorized devices; and
determining, based on the comparison, a location of the new device relative to the one of the one or more authorized devices.

24. The device of claim 16 , wherein the identifying the new device to be admitted to the computer network, further comprises:
receiving a network discovery signal from the new device; and
providing an activation signal to the one or more authorized device to enter into a data capture mode.

25. The device of claim 16 , wherein the first data comprises individual sensing data from the one or more authorized devices.

26. The device of claim 16 , wherein the i

Assignees

• Verisign Inc

Inventors

• Lakshmanan Ashvatth
• Osterweil Eric
• Fregly Andrew

Classifications

• H04L61/1511

  Electricity · mapped topic

• G06F21/44 Primary

  Program or device authentication · CPC title

• H04L61/305

  Electricity · mapped topic

• H04W4/005

  Electricity · mapped topic

• H04W4/008

  Electricity · mapped topic