IP Library Granted Patent US 10,097,529
Granted Patent B2
US 10,097,529 · App. 15/142,001 · Granted Oct 9, 2018

Semiconductor device for controlling access right to server of internet of things device and method of operating the same

Inventors: Bo Gyeong Kang (Seoul, KR); Sang Hwa Jin (Seongnam-si, KR); Dong Jun Shin (Hwaseong-si, KR); Myung Koo Kang (Seoul, KR)
Assignee: SAMSUNG ELECTRONICS CO., LTD.
H04L63/08H04L63/0428H04L63/10H04L67/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,097,529
App. No.
15/142,001
Granted
Oct 9, 2018
Kind
B2
Abstract

A method of operating a hub which authenticates a plurality of IoT devices between a server and the IoT devices in place of the server includes authenticating a first IoT device using one of a plurality of predetermined pairing authentication techniques upon receiving a pairing request from the first IoT device, sending a request for an access right of the first IoT device to the server based on pairing information of the first IoT device and transmitting data of the first IoT device to the server upon receiving approval of the access of right of the first IoT device.

Claims (47)

1. A method of operating a hub which authenticates a plurality of internet of things (IoT) devices, the method comprising:

determining, by the hub, a first security level of a first IoT device using a signal received in a pairing request from the first IoT device;

selecting, by the hub, a first technique among a plurality of predetermined pairing authentication techniques according to the determined first security level;

authenticating, by the hub, the first IoT device using the selected first technique;

sending, by the hub, a request for an access right of the first IoT device to a server based on pairing information of the first IoT device; and

transmitting, by the hub, data of the first IoT device to the server upon receiving approval of the access right of the first IoT device from the server.

2. The method of claim 1 , wherein after the receiving the approval of the first access right, further comprising:

completing, by the hub, pairing with the first IoT device; and

receiving, by the hub, the data of the first IoT device from the first IoT device.

3. The method of claim 1 , wherein before the receiving the approval of the first access right, further comprising:

completing, by the hub, pairing with the first IoT device; and

receiving, by the hub, the data of the first IoT device from the first IoT device.

4. The method of claim 1 , wherein the signal comprises one of an Identifier ID, a password, a media access control (MAC) address, a Wi-Fi protected access (WPA)-related signal, a WPA2-related signal, a digital signature, an ID-based encryption (IBE)-related signal, and a biometrics-related signal.

5. The method of claim 1 , further comprising:

determining, by the hub, a second security level of a second IoT device using a signal received in a pairing request from the second IoT device;

selecting, by the hub, a second technique among the predetermined pairing authentication techniques according to the determined second security level;

authenticating, by the hub, the second IoT device using the second technique;

sending, by the hub, a request for an access right of the second IoT device to the server based on pairing information of the second IoT device; and

transmitting, by the hub, data of the second IoT device to the server upon receiving approval of the access right of the second IoT device.

6. The method of claim 5 , wherein the data of the first IoT device and the data of the second IoT device are transmitted to the server together with authentication information of the hub.

7. The method of claim 5 , wherein the transmitting the data of the second IoT device to the server comprises:

generating, by the hub, a data sheet by processing the data of the first IoT device and the data of the second IoT device into a data format predefined between the server and the hub; and

transmitting, by the hub, the data sheet to the server together with authentication information of the hub.

8. The method of claim 1 , wherein the sending the request for the access right of the first IoT device to the server and receiving the approval of the access right of the first IoT device comprises:

transmitting, by the hub, the pairing information of the first IoT device and authentication information of the hub to the server; and

selecting, by the server, a hub authentication technique from among predetermined hub authentication techniques using the authentication information of the hub;

authenticating, by the server, the hub using the selected hub authentication technique; and

approving, by the server, the access right of the first IoT device.

9. The method of claim 8 , further comprising:

updating and storing, by the hub, access history and authentication history of the first IoT device after authenticating the first IoT device; and

determining, by the hub, an authentication grade of the first IoT device according to the access history and authentication history of the first IoT device and the first technique.

10. The method of claim 9 , wherein the pairing information of the first IoT device comprises the authentication grade of the first IoT device.

11. A semiconductor device comprising:

a communication device configured to receive a pairing request from an internet of things (IoT) device; and

a processor configured to communicate with the communication device, wherein the processor determines a security level of an IoT device using a signal received in a pairing request from the IoT device, selects an authentication technique from among a plurality of predetermined pairing authentication techniques according to the determined security level, authenticates the IoT device using the selected authentication technique, controls the communication device for pairing with the IoT device, sends a request for an access right of the IoT device to a server based on pairing information of the IoT device, and transmits data of the IoT device to the server upon receiving approval of the access right from the server.

12. The semiconductor device of claim 11 , wherein the semiconductor device is a hub.

13. The semiconductor device of claim 11 , wherein the processor transmits authentication information of the semiconductor device to the server together with the pairing information of the IoT device when sending the request for the access right; and

the authentication information of the semiconductor device comprises one of a media access control (MAC) address, a digital signature, and an ID-based encryption (IBE)-related signal.

14. The semiconductor device of claim 13 , wherein the processor generates a data sheet by processing data received from a plurality of IoT devices into a data format predefined between the server and the semiconductor device and transmits the data sheet to the server together with the authentication information of the semiconductor device.

15. The semiconductor device of claim 11 , further comprising a hardware secure module configured to store the predetermined pairing authentication techniques, wherein the processor selects the authentication technique using the signal within the pairing request and the predetermined pairing authentication techniques stored in the hardware secure module.

16. The semiconductor device of claim 15 , wherein the processor evaluates an authentication grade of the IoT device using the selected authentication technique and the pairing information of the IoT device comprises the authentication grade.

17. The semiconductor device of claim 15 , wherein the signal comprises one of an identifier ID, a password, a media access control (MAC) address, a Wi-Fi protected access (WPA)-related signal, a WPA2-related signal, a digital signature, an ID-based encryption (IBE)-related signal, and a biometrics-related signal.

18. A semiconductor device comprising:

a wireless transceiver configured to receiving a pairing request from an internet of things IoT device; and

a processing circuit configured to authenticate the IoT device using one of a plurality of pairing authentication techniques stored within the semiconductor device, send a request to a server for the IoT device to access the server upon authenticating the pairing request, and complete a pairing of the semiconductor device with the IoT device after receiving a response to the request from the server granting approval of the request.

19. The semiconductor device of claim 18 , further comprising a secure hardware module configured to encrypt pairing information of the IoT device.

20. The semiconductor device of claim 19 , wherein the processing circuit authenticates the request using the encrypted pairing information.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 4, 2018
From: KANG, BO GYEONG; JIN, SANG HWA; SHIN, DONG JUN; KANG, MYUNG KOO
To: SAMSUNG ELECTRONICS CO., LTD.
Reel/Frame 047009/0525 →
Priority Claims (1)
KR 10-2015-0125821 · Sep 4, 2015 · national
Continuity (3)
Provisional Application 62155627 · May 1, 2015
Provisional Application 62215386 · Sep 8, 2015
Related Publication 20160323257A1 · Nov 3, 2016