Granted Patent B1

US 9,716,595 · App. 15/469,244 · Granted Jul 25, 2017

Inventors: David W. Kravitz (San Jose, CA); Donald Houston Graham, III (Pasadena, CA); Josselyn L. Boudett (Clearwater, FL); Russell S. Dietz (San Ramon, CA)

Assignee: T-Central, Inc.

H04L9/3268H04L9/0819H04L63/0876H04L63/10H04L2209/84

Abstract

Claims (34)

1. A method for establishing a secure communication between a plurality of Internet of Things (IoT) devices, each IoT device including a hardware processor and associated memory, the method comprising:

provisioning a first and a second IoT devices by providing a unique identification, a digital identity token and a cryptographic key to and issuing a first digital certificate to each of the first and second IoT devices;

inviting the second IoT device by the first IoT device to establish a communication line with the first IoT device by receiving a digital token from the second IoT device, authenticating the second IoT device using the unique identification, the digital identity token and the cryptographic key of the second IoT device;

establishing a secure communication line between the first IoT device and the second IoT device by authenticating the established communication line and issuing a second digital certificate to the communication line between the first IoT device and the second IoT device;

preventing a third IoT device for which a secure communication line to the first or second IoT device has not been established from communicating with the first or second IoT device;

establishing secure communication lines between the first IoT device, the second IoT device and a plurality of more IoT devices, each secure communication line including a digital agreement; and

grouping the first IoT device, the second IoT device and the plurality of more IoT devices into different groups based on a predetermined criteria.

2. The method of claim 1 , wherein the secure communication line between the first and second IoT devices includes a digital agreement establishing terms of use of the secure communication line between the first and second IoT devices.

3. The method of claim 1 , further comprising including group membership and a plurality of associated rules in a respective certification for a respective secure communication line.

4. The method of claim 1 , wherein the first and second IoT devices are components of an automobile.

5. The method of claim 1 , wherein the first and second IoT devices are components of a medical device.

6. The method of claim 1 , wherein the first and second IoT devices are components of a household appliance.

7. The method of claim 1 , wherein the first and second IoT devices are components of an aircraft.

8. A system for establishing a secure communication between a plurality of Internet of Things (IoT) devices, each IoT device including a hardware processor and associated memory, comprising:

a first IoT device including a first unique identification, a first digital identity token and a first cryptographic key;

a second IoT device including a second unique identification, a second digital identity token and a second cryptographic key to establish a communication line with the first IoT device by receiving a digital token from the first IoT device, authenticating the first IoT device using the first unique identification, the first digital identity token and the first cryptographic key of the first IoT device; and

an attribute authority (AA) for providing a first digital certificate to the first IoT and second IoT devices, establishing a secure communication line between the first IoT device and the second IoT device by authenticating an established communication line between the first IoT device and the second IoT device, wherein a third IoT device for which a secure communication line to the first or second IoT device has not been established is prevented from communicating with the first or second IoT device, and wherein the attribute authority (AA) further establishes secure communication lines between the first IoT device, the second IoT device and a plurality of more IoT devices, each secure communication line including a digital agreement, and groups the first IoT device, the second IoT device and the plurality of more IoT devices into different groups based on a predetermined criteria.

9. The system of claim 8 , wherein the secure communication line between the first and second IoT devices includes a digital agreement establishing terms of use of the secure communication line between the first and second IoT devices.

10. The system of claim 8 , wherein the first and second IoT devices are components of an automobile.

11. The system of claim 8 , wherein the first and second IoT devices are components of a medical device.

12. The system of claim 8 , wherein the first and second IoT devices are components of a household appliance.

13. The system of claim 8 , wherein the first and second IoT devices are components of an aircraft.

14. A method for establishing a secure communication between a first Internet of Things (IoT) device and a second IoT device, each IoT device including a hardware processor and associated memory, a unique identification, a digital identity token and a cryptographic key, the method comprising:

establishing an unsecure communication line between the first IoT device and the second IoT device;

providing a first digital certificate to each of the first and second IoT devices;

authenticating the second IoT device by the first IoT device using the unique identification, the digital identity token and the cryptographic key of the second IoT device;

authenticating the unsecure communication line between the first IoT device and the second IoT device;

providing a second digital certificate to the communication line between the first IoT device and the second IoT device to establish a secure communication line between the first IoT device and the second IoT device;

preventing a third IoT device for which a secure communication line to the first or second IoT device has not been established from communicating with the first or second IoT device;

establishing secure communication lines between the first IoT device, the second IoT device and a plurality of more IoT devices, each secure communication line including a digital agreement; and

grouping the first IoT device, the second IoT device and the plurality of more IoT devices into different groups based on a predetermined criteria.

15. The method of claim 14 , further comprising inviting the second IoT device by the first IoT device to establish said unsecure communication line, by receiving a digital token from the second IoT device.

16. The method of claim 14 , wherein the secure communication line between the first and second IoT devices includes a digital agreement establishing terms of use of the secure communication line between the first and second IoT devices.

17. The method of claim 14 , wherein the first and second IoT devices are components of one or more of an automobile, a medical device, a household appliance, and an aircraft.

Assignments (1)

Continuity (28)