Secure offline data offload in a sensor network
Methods and systems for secure data offload in a sensor network. The method comprises offloading data indicative of sensor measurements from a wireless sensing device to a gateway device through a first secure communication channel; and storing the data at the gateway device if there is not currently a second secure communication channel established between the gateway device and the management server. The method continues with offloading the data to the management server when the second secure communication channel is established; and reconciling the data at the management server to generate reconciled sensor measurements in which duplicates have been removed.
1. A method in a management server device for supporting secure offline data logging in sensor networks, wherein the sensor networks include a plurality of wireless sensing devices operative to detect physical events and to generate sensor measurements in response to the detection of the physical events, the method comprising:
receiving, upon establishment of a first secure communication channel between a first gateway device of a plurality of gateway devices and the management server device, data indicative of a first plurality of sensor measurements taken over time, a sequence number for each, and a time stamp for each, wherein the data was transmitted to the first gateway device from a first wireless sensing device of the plurality of wireless sensing devices over a second secure communication channel between the first gateway device and the first wireless sensing device, and wherein the management server device tracks which of the plurality of gateway devices and which of the plurality of wireless sensing devices is associated with which of a plurality of organizations,
receiving, upon establishment of a third secure communication channel between a second gateway device of the plurality of gateway devices and the management server device, data indicative of a second plurality of sensor measurements taken over time, a sequence number for each, and a time stamp for each, wherein the data was transmitted to the second gateway device from the wireless sensing device through a fourth secure communication channel between the second gateway device and the wireless sensing device following disconnection of the second secure communication channel between the first gateway device and the wireless sensing device;
reconciling the data indicative of the first plurality of sensor measurements and the data indicative of the second plurality of sensor measurements based on the sequence numbers and the time stamps to generate reconciled sensor measurements in which duplicates have been removed; and
providing for display a user interface including a representation of the reconciled sensor measurements over time.
2. The method of claim 1 , wherein the management server device associates at least one sensor network with each of a plurality of organizations, and the management server device associates with each of the plurality of organizations a plurality of gateway devices and a plurality of wireless sensing devices, wherein the management server device is to establish secure communication channels with the gateway devices, and each one of the plurality of gateway devices is to establish secure communications channels to be coupled with one or more wireless sensing devices that are operative to detect physical events and to generate sensor measurements in response to the detection of the physical events.
3. The method of claim 1 , wherein the first gateway device, the second gateway device and the first wireless sensing device are associated with the same organization.
4. The method of claim 1 further comprising:
establishing the first secure communication channel between the first gateway device and the management server device based on a first pair of private and public keys of the first gateway device and a second pair of private and public keys of the management server device.
5. The method of claim 4 further comprising:
establishing the third secure communication channel between the second gateway device and the management server device based on a third pair of private and public keys of the first gateway device and the second pair or private and public keys of the management server device.
6. The method of claim 1 , wherein the second gateway device and the first gateway device are the same gateway device, and wherein the second secure communication channel is established following a disconnection of the first secure communication channel between the wireless sensing device and the first gateway device.
7. A management server device for supporting secure offline data logging in sensor networks, wherein the sensor networks include a plurality of wireless sensing devices operative to detect physical events and to generate sensor measurements in response to the detection of the physical events, the management server device comprising:
a non-transitory computer readable storage medium to store instructions; and
a processor coupled with the non-transitory computer readable storage medium to process the stored instructions to:
receive, upon establishment of a first secure communication channel between a first gateway device of a plurality of gateway devices and the management server device, data indicative of a first plurality of sensor measurements taken over time, a sequence number for each, and a time stamp for each, wherein the data was transmitted to the first gateway device from a first wireless sensing device of the plurality of wireless sensing devices over a second secure communication channel between the first gateway device and the first wireless sensing device, and wherein the management server device tracks which of the plurality of gateway devices and which of the plurality of wireless sensing devices is associated with which of a plurality of organizations,
receive, upon establishment of a third secure communication channel between a second gateway device of the plurality of gateway devices and the management server device, data indicative of a second plurality of sensor measurements taken over time, a sequence number for each, and a time stamp for each, wherein the data was transmitted to the second gateway device from the wireless sensing device through a fourth secure communication channel between the second gateway device and the wireless sensing device following disconnection of the second secure communication channel between the first gateway device and the wireless sensing device;
reconcile the data indicative of the first plurality of sensor measurements and the data indicative of the second plurality of sensor measurements based on the sequence numbers and the time stamps to generate reconciled sensor measurements in which duplicates have been removed; and
provide for display a user interface including a representation of the reconciled sensor measurements over time.
8. The management server device of claim 7 , wherein the processor is further to associate at least one sensor network with each of a plurality of organizations, and the processor is to associate with each of the plurality of organizations a plurality of gateway devices and a plurality of wireless sensing devices, wherein the processor is to establish secure communication channels with the gateway devices, and each one of the plurality of gateway devices is to establish secure communications channels to be coupled with one or more wireless sensing devices that are operative to detect physical events and to generate sensor measurements in response to the detection of the physical events.
9. The management server device of claim 7 , wherein the first gateway device, the second gateway device and the first wireless sensing device are associated with the same organization.
10. The management server device of claim 7 , wherein the processor is further to:
establish the first secure communication channel between the first gateway device and the management server device based on a first pair of private and public keys of the first gateway device and a second pair of private and public keys of the management server device.
11. The management server device of claim 10 , wherein the processor is further to:
establish the third secure communication channel between the second gateway device and the management server device based on a third pair of private and public keys of the first gateway device and the second pair or private and public keys of the management server device.
12. The management server device of claim 7 , wherein the second gateway device and the first gateway device are the same gateway device, and wherein the second secure communication channel is established following a disconnection of the first secure communication channel between the wireless sensing device and the first gateway device.