IP Library Granted Patent US 12,388,643
Granted Patent B2
US 12,388,643 · App. 17/650,087 · Granted Aug 12, 2025

Authorization management in an internet of things (IoT) network

Inventors: Qi Feng Huo (Haidian District, CN); Xiang Dong Hu (Beijing, CN); Yan Lin Ren (Shanghai, CN); Hong Qing Zhou (Shanghai, CN); Peng Hui Jiang (Beijing, CN); Ling Ling Sh Hu (ShangHai, CN); Zhang Li (Hai Dian district, CN)
Assignee: International Business Machines Corporation
H04L9/3213H04L9/3239H04L63/10H04L9/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,388,643
App. No.
17/650,087
Granted
Aug 12, 2025
Kind
B2
Abstract

In an approach, a processor receives, at an edge node, a message from an IoT device associated with the edge node, the message being embedded with at least one non-fungible token (NFT) and each of the at least one NFT representing a corresponding authorization associated with the IoT device. A processor retrieves, at the edge node, the at least one NFT from the received message. A processor validates, at the edge node, the received message based on the retrieved at least one NFT. A processor, responsive to validating the received message, forwards, by the edge node, the received message to a center node associated with the edge node.

Claims (44)

1. A computer-implemented method comprising:

receiving, at an edge node, a message from an Internet of Things (IoT) device associated with the edge node, the message embedded with a first non-fungible token (NFT), wherein:

the IoT device is authorized to provide a plurality of different types of sensor data; and

each type of sensor data corresponds to a different NFT of a plurality of NFTs created for the IoT device;

retrieving, at the edge node, the first NFT from the received message;

validating, at the edge node, the received message based on the retrieved first NFT; and

responsive to validating the received message, forwarding, by the edge node, the received message to a center node associated with the edge node.

2. The computer-implemented method of claim 1 , wherein the plurality of NFTs are stored on a blockchain.

3. The computer-implemented method of claim 1 , wherein the plurality of NFTs are provided to the IoT device upon a registration phase of the IoT device.

4. The computer-implemented method of claim 1 , wherein the first NFT is associated with a unique identifier of the IoT device.

5. The computer-implemented method of claim 1 , wherein the corresponding authorization comprises information about a resource the IoT device is authorized to provide.

6. The computer-implemented method of claim 1 , wherein:

the message is further signed with a private key associated with the IoT device; and

the validating the received message further comprises validating, at the edge node, the received message further based on a public key corresponding to the private key associated the IoT device.

7. A computer program product comprising:

one or more computer readable storage media; and

program instructions stored on the one or more computer readable storage media to perform operations comprising:

receiving, at an edge node, a message from an Internet of Things (IoT) device associated with the edge node, the message embedded with a first non-fungible token (NFT), wherein:

the IoT device is authorized to provide a plurality of different types of sensor data; and

each type of sensor data corresponds to a different NFT of a plurality of NFTs created for the IoT device;

retrieving, at the edge node, the first NFT from the received message;

validating, at the edge node, the received message based on the retrieved first NFT; and

responsive to validating the received message, forwarding, by the edge node, the received message to a center node associated with the edge node.

8. The computer program product of claim 7 , wherein the plurality of NFTs are stored on a blockchain.

9. The computer program product of claim 7 , wherein the plurality of NFTs are provided to the IoT device upon a registration phase of the IoT device.

10. The computer program product of claim 7 , wherein the first NFT is associated with a unique identifier of the IoT device.

11. The computer program product of claim 7 , wherein the corresponding authorization comprises information about a resource the IoT device is authorized to provide.

12. The computer program product of claim 7 , wherein:

the message is further signed with a private key associated with the IoT device; and

the validating the received message further comprises validating, at the edge node, the received message further based on a public key corresponding to the private key associated the IoT device.

13. A computer system comprising:

a processor set;

one or more computer readable storage media; and

program instructions stored on the one or more computer readable storage media to cause the processor set to perform operations comprising:

receiving, at an edge node, a message from an Internet of Things (IoT) device associated with the edge node, the message embedded with a first non-fungible token (NFT), wherein:

the IoT device is authorized to provide a plurality of different types of sensor data; and

each type of sensor data corresponds to a different NFT of a plurality of NFTs created for the IoT device;

retrieving, at the edge node, the first NFT from the received message;

validating, at the edge node, the received message based on the retrieved first NFT; and

responsive to validating the received message, forwarding, by the edge node, the received message to a center node associated with the edge node.

14. The computer system of claim 13 , wherein the plurality of NFTs are stored on a blockchain.

15. The computer system of claim 13 , wherein the plurality of NFTs are provided to the IoT device upon a registration phase of the IoT device.

16. The computer system of claim 13 , wherein the first NFT is associated with a unique identifier of the IoT device.

17. The computer system of claim 13 , wherein the corresponding authorization comprises information about a resource the IoT device is authorized to provide.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 7, 2022
From: HUO, QI FENG; HU, XIANG DONG; REN, YAN LIN; ZHOU, HONG QING; JIANG, PENG HUI; HU, LING LING SH; LI, ZHANG
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 058903/0538 →
Continuity (1)
Related Publication 20230254147A1 · Aug 10, 2023
References Cited (32)
US 9633197B2 · Lakshmanan · 2017 [cited by applicant]
US 10505726B1 · Andon · 2019 [cited by applicant]
US 10924466B2 · Biyani · 2021 [cited by examiner]
US 11025626B1 · Todd · 2021 [cited by applicant]
US 11075891B1 · Long · 2021 [cited by applicant]
US 11138608B2 · Green · 2021 [cited by examiner]
US 11296937B2 · Nolan · 2022 [cited by examiner]
US 11507698B2 · Sohail · 2022 [cited by examiner]
US 11729004B2 · Panchamia · 2023 [cited by examiner]
US 12014363B2 · Haddad · 2024 [cited by examiner]
US 12093934B2 · Kurian · 2024 [cited by examiner]
US 20170264597A1 · Pizot · 2017 [cited by examiner]
US 20170279682A1 · Dawson · 2017 [cited by examiner]
US 20190036906A1 · Biyani · 2019 [cited by applicant]
US 20200314648A1 · Cao · 2020 [cited by examiner]
US 20210367775A1 · Grau · 2021 [cited by examiner]
US 20220292343A1 · Manuel-Devadoss · 2022 [cited by examiner]
US 20220393883A1 · Panchamia · 2022 [cited by examiner]
IN 202111022945A · 2021 [cited by applicant]
JP 6829927B1 · 2022 [cited by applicant]
WO 2017095036A1 · 2017 [cited by applicant]
“Non-fungible tokens (NFT)”, Printed Dec. 22, 2021, 23 pages, <https://ethereum.org/zh/nft/>. [cited by applicant]
“Project-chip /connectedhomeip”, Github, Printed Dec. 22, 2021, 12 pages. <https://github.com/project-chip/connectedhomeip>. [cited by applicant]
Arcenegui et al., “Secure Combination of IoT and Blockchain by Physically Binding IoT Devices to Smart Non-Fungible Tokens Using PUFs”, Sensors 2021, 21, 3119, <https://www.mdpi.com/1424-8220/21/9/3119/htm>. [cited by applicant]
Asanghanwa et al., “Security for Intelligent, Connected IoT Edge Nodes”, Atmel, 2015, <http://ww1.microchip.com/downloads/en/DeviceDoc/Atmel-8994-Security-for-Intelligent-Connected-IoT-Edge-Nodes_Whitepaper.pdf >. [cited by applicant]
Entriken et al., “EIP-721: Non-Fungible Token Standard,” Ethereum Improvement Proposals, No. 721, Jan. 2018. [Online serial], 15 pages, <https://eips.ethereum.org/EIPS/eip-721>. [cited by applicant]
Lau et al., “Blockchain-based Authentication in IoT Networks”, IEEE, Dec. 13, 2018, 8 pages, <https://ieeexplore.ieee.org/document/8625141>. [cited by applicant]
Li, Shancang, “IoT Node Authentication”, Securing the Internet of Things—Chapter 4, Elsevier, 2017, 27 pages, <https://cdn.ttgtmedia.com/rms/IoTAgenda/Securing-the-Internet-of-Things-ch4.pdf >. [cited by applicant]
Mell et al., “The NIST Definition of Cloud Computing”, National Institute of Standards and Technology, Special Publication 800-145, Sep. 2011, 7 pages. [cited by applicant]
Omar et al., “Capability-Based Non-fungible Tokens Approach for a Decentralized AAA Framework in IoT”, Research gate, Mar. 2020, 24 pages, <https://www.researchgate.net/publication/339621498_Capability-Based_Non-fungibl… [cited by applicant]
Omar, Ahmad Sghaier, “Decentralized Identity and Access Management Framework for Internet of Things Devices”, A thesis presented to the University of Waterloo in fulfillment of the thesis requirement for the degree of D… [cited by applicant]
International Searching Authority, “Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration”, International application No. PCT… [cited by applicant]