Remotely managing devices using blockchain and DICE-RIoT
Disclosed are techniques for remotely managing computing devices using blockchain and DICE-RIoT. In one embodiment, a method is disclosed comprising scanning a network to obtain a list of devices on the network; classifying the devices as either controlled, uncontrolled or restricted devices; establishing a secure channel with the controlled devices; issuing one or more control commands to the controlled devices over the secure channel, the one or more control commands included within a signed message, the signed message signed using a private key of the sender and verified using a public key of the receiver, the private key and public key generated during the establishing of the secure channel; receiving a response to the control commands; and logging the control commands and the response in a blockchain.
1. A method comprising:
issuing a control command to a vehicle over a channel, the control command causing the vehicle to perform an action;
receiving a response to the control command; and
logging the response in a blockchain.
2. The method of claim 1 , wherein the control command is generated using a Device Identify Composition Engine-Robust Internet of Things (DICE-RIOT) key generation procedure.
3. The method of claim 1 , further comprising scanning a network to obtain a list of vehicles on the network, the list of vehicles including the vehicle.
4. The method of claim 1 , further comprising establishing the channel by transmitting a triple to the vehicle, the triple including a device identifier, certificate, and public key.
5. The method of claim 1 , wherein the control command causes the vehicle to power off.
6. The method of claim 1 , further comprising transmitting a notification to uncontrolled vehicles instructing the uncontrolled vehicles to perform an operation.
7. The method of claim 1 , wherein logging the response in the blockchain comprises logging a triple of a vehicle generating the control command, a destination public identifier, order information, and a digital signature.
8. A non-transitory computer-readable storage medium for tangibly storing computer program instructions capable of being executed by a computer processor, the computer program instructions defining steps of:
issuing a control command to a vehicle over a channel, the control command causing the vehicle to perform an action;
receiving a response to the control command; and
logging the response in a blockchain.
9. The non-transitory computer-readable storage medium of claim 8 , wherein the control command is generated using a Device Identify Composition Engine-Robust Internet of Things (DICE-RIOT) key generation procedure.
10. The non-transitory computer-readable storage medium of claim 8 , further comprising scanning a network to obtain a list of vehicles on the network, the list of vehicles including the vehicle.
11. The non-transitory computer-readable storage medium of claim 8 , the steps further comprising establishing the channel by transmitting a triple to the vehicle, the triple including a device identifier, certificate, and public key.
12. The non-transitory computer-readable storage medium of claim 8 , wherein the control command causes the vehicle to power off.
13. The non-transitory computer-readable storage medium of claim 8 , further comprising transmitting a notification to uncontrolled vehicles instructing the uncontrolled vehicles to perform an operation.
14. The non-transitory computer-readable storage medium of claim 8 , wherein logging the response in the blockchain comprises logging a triple of a vehicle generating the control command, a destination public identifier, order information, and a digital signature.
15. A device comprising:
a memory; and
a processor configured to:
issue a control command to a vehicle over a channel, the control command causing the vehicle to perform an action;
receive a response to the control command; and
log the response in a blockchain.
16. The device of claim 15 , further comprising scanning a network to obtain a list of vehicles on the network, the list of vehicles including the vehicle.
17. The device of claim 15 , the processor further configured to establish the channel by transmitting a triple to the vehicle, the triple including a device identifier, certificate, and public key.
18. The device of claim 15 , wherein the control command causes the vehicle to power off.
19. The device of claim 15 , further comprising transmitting a notification to uncontrolled vehicles instructing the uncontrolled vehicles to perform an operation.
20. The device of claim 15 , wherein logging the response in the blockchain comprising logging a triple of a vehicle generating the control command, a destination public identifier, order information, and a digital signature.