IP Library Granted Patent US 11,469,893
Granted Patent B2
US 11,469,893 · App. 16/692,813 · Granted Oct 11, 2022

Systems and methods for establishing secured connections for IoT devices

Inventors: Rolando Herrero (Amherst, NH); Jerry Xiaowen Wu (Westford, MA)
Assignee: JOHNSON CONTROLS TYCO IP HOLDINGS LLP
H04L9/3213H04L9/0869H04L9/3263H04L63/0435H04L63/123H04L63/166
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,469,893
App. No.
16/692,813
Granted
Oct 11, 2022
Kind
B2
Abstract

Aspects of the present disclosure include methods, systems, and non-transitory computer readable media that perform the steps of transmitting a token to a gateway, receiving a response token including an encrypted message, decrypting the encrypted message using a decryption key associated with the token to generate a decrypted message, validating content of the decrypted message, transmitting a certificate request in response to successfully validating the content of the decrypted message, receiving a certificate in response to the request, validating the certificate against a certification authority, and transmitting encrypted data via a secured connection in response to successfully validating the certificate.

Claims (46)

1. A method of establishing a secured connection between an Internet of Things (IoT) device and a gateway, comprising:

transmitting, from the IoT device, a first plurality of tokens that the gateway failed to respond to;

transmitting, from the IoT device, an initialization token to the gateway;

receiving, at the IoT device, a response token including an encrypted message in response to transmitting the initialization token;

decrypting, at the IoT device, the encrypted message using a decryption key associated with the initialization token to generate a decrypted message in response to receiving the response token;

validating, at the IoT device, content of the decrypted message after decrypting the encrypted message;

transmitting, from the IoT device, a certificate request in response to successfully validating the content of the decrypted message;

receiving, at the IoT device, a certificate in response to the request;

validating, at the IoT device, the certificate against a certification authority; and

transmitting, from the IoT device, encrypted data via a secured connection in response to successfully validating the certificate.

2. The method of claim 1 , further comprising, after transmitting the token, continuously transmitting, from the IoT device, a second plurality of tokens at a predetermined interval until validating the content of the decrypted message.

3. The method of claim 1 , further comprising, after validating the content of the decrypted message, ignoring, at the IoT device, a plurality of response tokens.

4. The method of claim 1 , further comprising establishing, at the IoT device, the secured connection with the gateway after validating the content of the decrypted message.

5. The method of claim 4 , wherein the secured connection is a Transport Layer Security (TLS) connection.

6. The method of claim 1 , wherein decrypting the encrypted message comprises generating, at the IoT device, a decryption key based on a token number, wherein the token number is a random number or a pseudo-random number.

7. An Internet of Things (IoT) device, comprising:

memory for storing instructions; and

a processor coupled to the memory and configured to execute the instructions to:

transmit, from the IoT device, a first plurality of tokens that the gateway failed to respond to;

transmit, from the IoT device, an initialization token to the gateway;

receive, at the IoT device, a response token including an encrypted message in response to transmitting the initialization token;

decrypt, at the IoT device, the encrypted message using a decryption key associated with the initialization token to generate a decrypted message in response to receiving the response token;

validate, at the IoT device, content of the decrypted message after decrypting the encrypted message;

transmit, from the IoT device, a certificate request in response to successfully validating the content of the decrypted message;

receive, at the IoT device, a certificate in response to the request;

validate, at the IoT device, the certificate against a certification authority; and

transmit, from the IoT device, encrypted data via a secured connection in response to successfully validating the certificate.

8. The IoT device of claim 7 , wherein the processor is further configured to, after transmitting the token, continuously transmit, from the IoT device, a second plurality of tokens at a predetermined interval until validating the content of the decrypted message.

9. The IoT device of claim 7 , wherein the processor is further configured to, after validating the content of the decrypted message, ignore, at the IoT device, a plurality of response tokens.

10. The IoT device of claim 7 , wherein the processor is further configured to establish, at the IoT device, the secured connection with the gateway after validating the content of the decrypted message.

11. The IoT device of claim 10 , wherein the secured connection is a Transport Layer Security (TLS) connection.

12. The IoT device of claim 7 , wherein decrypting the encrypted message comprises generating, at the IoT device, a decryption key based on a token number, wherein the token number is a random number or a pseudo-random number.

13. A non-transitory computer readable medium comprising instructions stored therein that, when executed by a processor of an Internet of Things (IoT) device, cause the processor to:

transmit, from the IoT device, a first plurality of tokens that the gateway failed to respond to;

transmit, from the IoT device, an initialization token to the gateway;

receive, at the IoT device, a response token including an encrypted message in response to transmitting the initialization token;

decrypt, at the IoT device, the encrypted message using a decryption key associated with the initialization token to generate a decrypted message in response to receiving the response token;

validate, at the IoT device, content of the decrypted message after decrypting the encrypted message;

transmit, from the IoT device, a certificate request in response to successfully validating the content of the decrypted message;

receive, at the IoT device, a certificate in response to the request;

validate, at the IoT device, the certificate against a certification authority; and

transmit, from the IoT device, encrypted data via a secured connection in response to successfully validating the certificate.

14. The non-transitory computer readable medium of claim 13 , further comprising instructions that, when executed by the processor, cause the processor to, after transmitting the token, continuously transmit, from the IoT device, a second plurality of tokens at a predetermined interval until validating the content of the decrypted message.

15. The non-transitory computer readable medium of claim 13 , further comprising instructions that, when executed by the processor, cause the processor to, after validating the content of the decrypted message, ignore, at the IoT device, a plurality of response tokens.

16. The non-transitory computer readable medium of claim 13 , further comprising instructions that, when executed by the processor, cause the processor to establish, at the IoT device, the secured connection with the gateway after validating the content of the decrypted message.

17. The non-transitory computer readable medium of claim 13 , wherein decrypting the encrypted message comprises generating, at the IoT device, a decryption key based on a token number, wherein the token number is a random number or a pseudo-random number.

Assignments (8)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 23, 2024
From: JOHNSON CONTROLS TYCO IP HOLDINGS LLP
To: TYCO FIRE & SECURITY GMBH
Reel/Frame 068494/0384 →
NUNC PRO TUNC ASSIGNMENT Recorded Feb 4, 2022
From: JOHNSON CONTROLS, INC.
To: JOHNSON CONTROLS TYCO IP HOLDINGS LLP
Reel/Frame 058955/0472 →
NUNC PRO TUNC ASSIGNMENT Recorded Feb 4, 2022
From: JOHNSON CONTROLS US HOLDINGS LLC
To: JOHNSON CONTROLS, INC.
Reel/Frame 058955/0394 →
NUNC PRO TUNC ASSIGNMENT Recorded Feb 4, 2022
From: SENSORMATIC ELECTRONICS, LLC
To: JOHNSON CONTROLS US HOLDINGS LLC
Reel/Frame 058957/0138 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 30, 2021
From: SENSORMATIC ELECTRONICS LLC
To: JOHNSON CONTROLS US HOLDINGS LLC
Reel/Frame 058600/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 30, 2021
From: JOHNSON CONTROLS US HOLDINGS LLC
To: JOHNSON CONTROLS INC
Reel/Frame 058600/0080 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 30, 2021
From: JOHNSON CONTROLS INC
To: JOHNSON CONTROLS TYCO IP HOLDINGS LLP
Reel/Frame 058600/0126 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 22, 2019
From: HERRERO, ROLANDO; WU, JERRY XIAOWEN
To: SENSORMATIC ELECTRONCS, LLC
Reel/Frame 051091/0584 →