Unique ID generation for sensors
Systems, methods, and computer-readable media are provided for generating a unique ID for a sensor in a network. Once the sensor is installed on a component of the network, the sensor can send attributes of the sensor to a control server of the network. The attributes of the sensor can include at least one unique identifier of the sensor or the host component of the sensor. The control server can determine a hash value using a one-way hash function and a secret key, send the hash value to the sensor, and designate the hash value as a sensor ID of the sensor. In response to receiving the sensor ID, the sensor can incorporate the sensor ID in subsequent communication messages. Other components of the network can verify the validity of the sensor using a hash of the at least one unique identifier of the sensor and the secret key.
1. A method comprising:
receiving, from a sensor in a network, a first message comprising at least one unique attribute of the sensor or a host component hosting the sensor;
generating, in response to the receiving, a hash value using (a) a one-way hash function, (b) a secret key and (c) the at least one unique attribute, the hash value being a new sensor identification (ID) for the sensor;
sending the new sensor ID to the sensor;
causing the sensor to incorporate the new sensor ID and the at least one unique attribute in subsequent message(s); and
wherein the new sensor ID is a fixed-length hash value determined based upon various lengths of the at least one unique attribute of the sensor or the host component.
2. The method of claim 1 , further comprising:
receiving at least one subsequent message from the sensor; and
determining a second hash value using the one-way hash function, the secret key and the at least one unique attribute.
3. The method of claim 2 , further comprising:
determining that the second hash value is inconsistent with the new sensor ID incorporated in the at least one subsequent message; and
generating a warning report.
4. The method of claim 2 , further comprising:
determining that the second hash value is consistent with the new sensor ID incorporated in the at least one subsequent message; and
receiving an additional message from the sensor.
5. The method of claim 1 , wherein the at least one unique attribute of the sensor or the host component comprises at least one of host name, media access control (MAC) address, and basic input/output system (BIOS) universally unique identifier (UUID) of the host component.
6. The method of claim 1 , wherein the one-way hash function comprises: at least one of hashed message authentication code (HMAC), message digest 2 (MD2), MD4, MD5, secure hash algorithm-1 (SHA-1), SHA-2, or SHA-3.
7. The method of claim 1 , wherein the new sensor ID has an arbitrary length determined based upon various lengths of the at least one unique attribute of the sensor or the host component.
8. The method of claim 7 , wherein the one-way hash function comprises KECCAK.
9. The method of claim 1 , further comprising:
generating a clone component to host the sensor, the clone component imaging the host component;
receiving, from the sensor, a second message comprising at least one new unique attribute of the sensor or the clone component;
determining a second new sensor ID for the sensor using the one-way hash function, the secret key and the at least one new unique attribute;
sending the second new sensor ID to the sensor; and
causing the sensor to incorporate the second new sensor ID and the at least one new unique attribute in subsequent new message(s).
10. A system comprising:
a processor; and
a non-transitory computer-readable storage medium storing instructions which, when executed by the processor, cause the system to perform operations comprising:
receiving, from a sensor in a network, a first message comprising at least one unique attribute of the sensor or a host component hosting the sensor;
generating, in response to the receiving, a hash value using (a) a one-way hash function, (b) a secret key and (c) the at least one unique attribute, the hash value being a sensor identification (ID) for the sensor;
sending the new sensor ID to the sensor;
causing the sensor to incorporate the new sensor ID and the at least one unique attribute in subsequent message(s); and
wherein the new sensor ID is a fixed-length hash value determined based upon various lengths of the at least one unique attribute of the sensor or the host component.
11. The system of claim 10 , wherein the instructions, when executed by the processor, cause the system to perform operations further comprising:
receiving at least one subsequent message from the sensor; and
determining a second hash value using the one-way hash function, the secret key and the at least one unique attribute.
12. The system of claim 11 , wherein the instructions, when executed by the processor, cause the system to perform operations further comprising:
determining that the second hash value is inconsistent with the new sensor ID incorporated in the at least one subsequent message; and
generating a warning report.
13. The system of claim 11 , wherein the instructions, when executed by the processor, cause the system to perform operations further comprising:
determining that the second hash value is consistent with the new sensor ID incorporated in the at least one subsequent message; and
receiving an additional message from the sensor.
14. The system of claim 10 , wherein the at least one unique attribute of the sensor or the host component comprises at least one of host name, media access control (MAC) address, and basic input/output system (BIOS) universally unique identifier (UUID) of the host component.
15. The system of claim 10 , wherein the instructions, when executed by the processor, cause the system to perform operations further comprising:
generating a clone component to host the sensor, the clone component imaging the host component;
receiving, from the sensor, a second message comprising at least one new unique attribute of the sensor or the clone component;
determining a second new sensor ID for the sensor using the one-way hash function, the secret key and the at least one new unique attribute;
sending the second new sensor ID to the sensor; and
causing the sensor to incorporate the second new sensor ID and the at least one new unique attribute in subsequent new message(s).
16. A non-transitory computer-readable storage medium storing instructions for generating a sensor identification (ID) for a sensor in a network, that, when executed by at least one processor of a computing system, cause the computing system to perform operations comprising:
receiving, from the sensor, a first message comprising at least one unique attribute of the sensor or a host component hosting the sensor;
generating, in response to the receiving, a hash value using (a) a one-way hash function, (b) a secret key and (c) the at least one unique attribute, the hash value being a sensor identification (ID) for the sensor;
sending the new sensor ID to the sensor;
causing the sensor to incorporate the new sensor ID and the at least one unique attribute in subsequent message(s); and
wherein the new sensor ID is a fixed-length hash value determined based upon various lengths of the at least one unique attribute of the sensor or the host component.
17. The non-transitory computer-readable storage medium of claim 16 , wherein the instructions, when executed by the at least one processor, cause the computing system to perform operations further comprising:
receiving at least one subsequent message from the sensor; and
determining a second hash value using the one-way hash function, the secret key and the at least one unique attribute.
18. The non-transitory computer-readable storage medium of claim 17 , wherein the instructions, when executed by the at least one processor, cause the computing system to perform operations further comprising:
determining that the second hash value is inconsistent with the new sensor ID incorporated in the at least one subsequent message; and
generating a warning report.