Method and system for improving network security
Methods and systems for securing a network including IoT devices are provided. A networking device system can regulate the ability of IoT devices to communicate with their corresponding cloud servers over the Internet, for example, by allowing a device to connect to its associated cloud servers when a user (e.g., an authorized user) requests to use the device. The system can communicate (e.g., directly) with users outside of the network through an app and/or a software development kit installed on user client device(s), where communications received from the app or kit (e.g., to access one or more IoT devices on the network) can be presumed to originate from authorized users.
1. A method of securing a network, involving at least one Internet of Things (“IoT”) device associated with at least one remote server, the at least one IoT device being communicatively coupled to a networking device having at least one data processor, the networking device being configured to provide the at least one IoT device conditional access to the at least one remote server over the Internet, the method comprising:
receiving, at the networking device, a communication from an antivirus application of a client device;
determining, by the networking device, whether the communication includes a user request to access the at least one IoT device;
when the communication includes the user request:
permitting, by the networking device, the client device to access the IoT device; and
permitting, by the networking device, the IoT device to access the at least one remote server; and
when the user request is absent from the communication, restricting, by the networking device, the at least one IoT device from accessing the at least one remote server.
2. The method of claim 1 , wherein the at least one IoT device includes at least one of a webcam or a temperature sensor, the method further comprising restricting the client device from accessing the at least one IoT device when the user request is absent from the communication.
3. The method of claim 1 , wherein the networking device includes a router or a smart home hub.
4. The method of claim 1 , wherein the at least one remote server includes at least one cloud-based server.
5. The method of claim 1 , further comprising authenticating the client device based on a two-factor authentication process that temporarily permits Internet access to the at least one IoT device.
6. The method of claim 5 , wherein the authenticating includes determining that the communication is associated with at least one pre-identified program associated with the at least one IoT device.
7. The method of claim 6 , wherein the at least one pre-identified program is associated with a software development kit (SDK) installed on the client device.
8. The method of claim 1 , further comprising permitting the at least one IoT device access to the at least one remote server based on at least one user-defined rule.
9. The method of claim 8 , wherein the at least one user-defined rule involves Internet access control settings based on time of day.
10. A networking device configured to provide at least one IoT device conditional access to at least one remote server over the Internet, comprising:
a receiver configured to receive a communication from an antivirus application of a client device; and
at least one data processor configured to:
determine whether the communication received from the antivirus application of the client device includes a user request to utilize the at least one IoT device;
permit the client device to access the IoT device when the communication includes the user request;
permit the at least one IoT device to access the at least one remote server when the communication includes the user request; and
restrict the at least one IoT device from accessing the at least one remote server when the user request is absent from the communication.
11. The networking device of claim 10 , wherein the at least one IoT device includes at least one of a webcam or a temperature sensor.
12. The networking device of claim 10 , wherein the at least one remote server includes at least one cloud-based server, the at least one data processor configured to:
restrict the client device from accessing the at least one IoT device when the user request is absent from the communication.
13. The networking device of claim 10 , wherein the at least one data processor is further configured to authenticate the client device based on a two-factor authentication process that temporarily permits Internet access to the at least one IoT device.
14. The networking device of claim 13 , wherein the at least one data processor is configured to authenticate the client device by determining that the communication is associated with at least one pre-identified program associated with the at least one IoT device.
15. The networking device of claim 14 , wherein the at least one pre-identified program is associated with a software development kit (SDK) installed on the client device.
16. The networking device of claim 10 , wherein the at least one data processor is further configured to permit the at least one IoT device access to the at least one remote server based on at least one user-defined rule.
17. The networking device of claim 16 , wherein the at least one user-defined rule involves Internet access control settings based on time of day.
18. A non-transitory computer readable medium for securing a network, the network including a networking device having at least one data processor, the networking device being communicatively coupled to at least one IoT device and configured to provide the at least one IoT device conditional access to at least one remote server over the Internet, the computer readable medium including instructions that, when executed by the at least one data processor, cause the at least one data processor to:
receive, at the networking device, a communication from an antivirus application of a client device;
determine whether the communication includes a user request to access the at least one IoT device;
permit the client device to access the IoT device when the communication includes the user request;
permit the at least one IoT device to access the at least one remote server when the communication includes the user request; and
restrict the at least one IoT device from accessing the at least one remote server when the user request is absent from the communication.
19. The computer readable medium of claim 18 , wherein the at least one IoT device includes at least one of a webcam or a temperature sensor, the computer readable medium including instructions that, when executed by the at least one data processor, cause the at least one data processor to restrict the client device from accessing the at least one IoT device when the user request is absent from the communication.
20. The computer readable medium of claim 18 including instructions that, when executed by the at least one data processor, cause the at least one data processor to authenticate the client device based on a two-factor authentication process that temporarily permits Internet access to the at least one IoT device.