Remotely managing devices using blockchain and DICE-RIoT
Disclosed are techniques for remotely managing computing devices using blockchain and DICE-RIoT. In one embodiment, a method is disclosed comprising scanning a network to obtain a list of devices on the network; classifying the devices as either controlled or uncontrolled devices; establishing a secure channel with the controlled devices; issuing one or more control commands to the controlled devices over the secure channel, the one or more control commands included within a signed message, the signed message signed using a private key of the sender and verified using a public key of the receiver, the private key and public key generated during the establishing of the secure channel; receiving a response to the control commands; and logging the control commands and the response in a blockchain.
1. A method comprising:
scanning a network to obtain a list of devices on the network;
classifying the devices as either controlled or uncontrolled devices;
establishing a secure channel with the controlled devices;
issuing one or more control commands to the controlled devices over the secure channel, the one or more control commands included within a signed message, the signed message signed using a private key of a sender and verified using a public key of a receiver, the private key and public key generated during the establishing of the secure channel;
receiving a response to the control commands; and
logging the control commands and the response in a blockchain.
2. The method of claim 1 , the classifying the devices as either controlled, uncontrolled, or restricted devices comprising identifying one or more devices that support Device Identify Composition Engine-Robust Internet of Things (DICE-RIoT) key generation.
3. The method of claim 1 , the scanning a network to obtain a list of devices on the network comprising scanning for one or more wireless devices.
4. The method of claim 1 , the establishing of the secure channel with the controlled devices comprising transmitting a triple with the controlled devices, the triple including a device identifier, certificate, and public key.
5. The method of claim 1 , the issuing one or more control commands to the controlled devices over the secure channel comprising issuing a control command instructing the controlled devices to power off.
6. The method of claim 1 , further comprising transmitting a notification to the uncontrolled devices, the notification instructing the uncontrolled devices to perform an operation.
7. The method of claim 1 , the logging the control commands and the response in a blockchain comprising logging a triple of a device generating the control commands, a destination public identifier, order information, and a digital signature.
8. A non-transitory computer readable storage medium for tangibly storing computer program instructions capable of being executed by a computer processor, the computer program instructions defining the steps of:
scanning a network to obtain a list of devices on the network;
classifying the devices as either controlled, uncontrolled, or restricted devices;
establishing a secure channel with the controlled devices;
issuing one or more control commands to the controlled devices over the secure channel, the one or more control commands included within a signed message, the signed message signed using a private key of a sender and verified using a public key of a receiver, the private key and public key generated during the establishing of the secure channel;
receiving a response to the control commands; and
logging the control commands and the response in a blockchain.
9. The non-transitory computer readable storage medium of claim 8 , the classifying the devices as either controlled, uncontrolled, or restricted devices comprising identifying one or more devices that support Device Identify Composition Engine-Robust Internet of Things (DICE-RIoT) key generation.
10. The non-transitory computer readable storage medium of claim 8 , the scanning a network to obtain a list of devices on the network comprising scanning for one or more wireless devices.
11. The non-transitory computer readable storage medium of claim 8 , the establishing of the secure channel with the controlled devices comprising transmitting a triple with the controlled devices, the triple including a device identifier, certificate, and public key.
12. The non-transitory computer readable storage medium of claim 8 , the issuing one or more control commands to the controlled devices over the secure channel comprising issuing a control command instructing the controlled devices to power off.
13. The non-transitory computer readable storage medium of claim 8 , the steps further comprising transmitting a notification to the uncontrolled devices, the notification instructing the uncontrolled devices to perform an operation.
14. The non-transitory computer readable storage medium of claim 8 , the logging the control commands and the response in a blockchain comprising logging a triple of a device generating the control commands, a destination public identifier, order information, and a digital signature.
15. A device comprising:
a processor; and
a storage medium for tangibly storing thereon program logic for execution by the processor, the stored program logic comprising:
logic, executed by the processor, for scanning a network to obtain a list of devices on the network;
logic, executed by the processor, for classifying the devices as either controlled, uncontrolled, or restricted devices;
logic, executed by the processor, for establishing a secure channel with the controlled devices;
logic, executed by the processor, for issuing one or more control commands to the controlled devices over the secure channel, the one or more control commands included within a signed message, the signed message signed using a private key of a sender and verified using a public key of a receiver, the private key and public key generated during the establishing of the secure channel;
logic, executed by the processor, for receiving a response to the control commands; and
logic, executed by the processor, for logging the control commands and the response in a blockchain.
16. The device of claim 15 , the classifying the devices as either controlled, uncontrolled, or restricted devices comprising identifying one or more devices that support Device Identify Composition Engine-Robust Internet of Things (DICE-RIoT) key generation.
17. The device of claim 15 , the scanning a network to obtain a list of devices on the network comprising scanning for one or more wireless devices.
18. The device of claim 15 , the establishing of the secure channel with the controlled devices comprising transmitting a triple with the controlled devices, the triple including a device identifier, certificate, and public key.
19. The device of claim 15 , the issuing one or more control commands to the controlled devices over the secure channel comprising issuing a control command instructing the controlled devices to power off.
20. The device of claim 15 , the logging the control commands and the response in a blockchain comprising logging a triple of a device generating the control commands, a destination public identifier, order information, and a digital signature.