IP Library Granted Patent US 10,924,283
Granted Patent B2
US 10,924,283 · App. 15/620,015 · Granted Feb 16, 2021

Dynamically-changing identity for IoT devices with blockchain validation

Inventors: Rajiv Asati (Morrisville, NC); Nagendra Kumar Nainar (Morrisville, NC); Carlos M. Pignataro (Raleigh, NC)
Assignee: Cisco Technology, Inc.
H04L9/3239G06F16/2228H04L12/281H04L12/2809H04L63/123G06F16/2255H04L63/0823H04L2209/38H04L2209/805
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,924,283
App. No.
15/620,015
Granted
Feb 16, 2021
Kind
B2
Abstract

Techniques for use in generating a dynamically-changing IoT device identity with robust blockchain validation are provided. When entering a communication network, an IoT device performs a procedure for registration. The procedure includes communicating, in a transaction, data associated with the IoT device to a network device (e.g. a fog router). The data includes, amongst other data items, an identity for addressing communications to and from the IoT device. A transaction number associated with the transaction is received based on a blockchain registration of the transaction. An updated identity of the IoT device is then derived based on the transaction number. In one example, the updated identity of the IoT device may be derived by combining a static address of the IoT device and the transaction number. The steps may be repeated by the device for each one of a plurality of network registrations.

Claims (54)

1. A method, comprising:

at a device,

performing a procedure for registration in a communication network;

in the procedure, communicating, in a transaction with a network device of the communication network, data associated with the device to the network device, the data including an identity for addressing communications to and from the device within the communication network;

determining that the identity of the device is successfully validated in a blockchain, wherein the transaction between the device and the network device is registered in the blockchain as a signed transaction using a private key of the network device;

receiving, based on the determining that the identity of the device is successfully validated in the blockchain, a transaction number associated with the transaction from the network device, wherein the transaction number is generated in response to registration of the transaction in the blockchain and indicative of the identity for addressing communications; and

deriving, based on the determining that the identity of the device is successfully validated in the blockchain, an updated identity of the device using a combination of a) a static address of the device and b) the transaction number associated with the transaction, wherein the static address is hardware-based or network-based.

2. The method of claim 1 , wherein the identity is derived from the static address of the device and a previous transaction number of a previous transaction involving the device.

3. The method of claim 1 , further comprising:

at the device,

receiving, in the communication network, a message addressed to the updated identity; and

sending, in the communication network, a message addressed from the updated identity.

4. The method of claim 1 , wherein the device comprises an Internet of Things (IoT) device, and wherein communicating the data associated with the device further comprises communicating data which includes one or more of a type of the device, a location or geolocation of the device, and an IP address of the device.

5. The method of claim 1 , wherein the communication network comprises a first communication network, the network device comprises a first network device, the transaction comprises a first transaction, and the transaction number comprises a first transaction number generated in response to a first registration of the first transaction in the blockchain, the method further comprising:

at the device,

performing a procedure for registration in a second communication network;

in the procedure, communicating, in a second transaction with a second network device of the second communication network, data associated with the device to the second network device, the data including the updated identity for addressing communications to and from the device within the second communication network;

receiving a second transaction number associated with the second transaction from the second network device, wherein the second transaction number is generated in response to a second registration of the second transaction in the blockchain and is indicative of the updated identify for addressing communications; and

deriving a further updated identity using the second transaction number associated with the second transaction.

6. The method of claim 1 , wherein the updated identity is for addressing communications to and from the device, the method further comprising:

for each one of a plurality of registrations in a plurality of communication networks, repeating the steps of performing, receiving, and deriving.

7. A device, comprising:

one or more processors;

a wireless transceiver coupled to the one or more processors and in communication with one or more antennas, the wireless transceiver controlling the one or more antennas for performing wireless communications;

the one or more processors being configured to:

perform a procedure for registration in a communication network;

in the procedure, communicate, in a transaction with a network device of the communication network, data associated with the device to the network device, the data including an identity for addressing communications to and from the device within the communication network;

determine that the identity of the device is successfully validated in a blockchain, wherein the transaction between the device and the network device is registered in the blockchain as a signed transaction using a private key of the network device;

receive, based on the determination that the identity of the device is successfully validated in the blockchain, a transaction number associated with the transaction from the network device, wherein the transaction number is generated in response to a registration of the transaction in a blockchain and indicative of the identity for addressing communications; and

derive, based on the determination that the identity of the device is successfully validated in the blockchain, an updated identity of the device using a combination of a) a static address of the device and b) the transaction number associated with the transaction, wherein the static address is hardware-based or network-based.

8. The device of claim 7 , wherein the network device comprises a fog router, and wherein the device comprises an Internet of Things (IoT) device.

9. The device of claim 7 , further comprising:

wherein the device comprises an Internet of Things (IoT) device;

wherein the network device comprises a fog router;

wherein the one or more processors are further configured to communicate the data associated with the device by communicating data which includes one or more of a type of the device, a location or geolocation of the device, and an IP address of the device;

wherein the transaction between the device and the fog router is registered in the blockchain as a signed transaction using a private key of the fog router;

wherein the one or more processors are further configured to derive the updated identity by combining the static address of the device and the transaction number; and

wherein the one or more processors are further configured to repeat the steps of performing, receiving, and deriving for each one of a plurality of registrations in a plurality of communication networks.

10. A method comprising:

at a network device of a communication network,

receiving, in a transaction for a procedure for registration of a device, data associated with the device from the device, the data including an identity for addressing communications to and from the device within the communication network;

causing the data to be validated against a blockchain;

determining that the data is successfully validated in the blockchain;

registering the transaction which includes the identity of the device in the blockchain as a signed transaction using a private key of the network device;

receiving a transaction number associated with the transaction that is generated in response to registration of the transaction in the blockchain and indicative of the identity for addressing communications;

sending, based on the determining that the data is successfully validated in the blockchain, the transaction number to the device; and

receiving an updated identity of the device from the device, the updated identity being derived using a combination of a) a static address of the device and b) the transaction number associated with the transaction, wherein the static address is hardware-based or network-based.

11. The method of claim 10 , further comprising:

digitally signing the transaction using the private key of the network device.

12. The method of claim 10 , further comprising:

sending to the device a request to update the blockchain with the transaction.

13. The method of claim 10 , wherein the network device comprises a fog router, and the device comprises an Internet of Things (IoT) device.

14. The method of claim 10 , wherein the updated identity is derived from the static address of the device and a previous transaction number of a previous transaction involving the device.

15. The method of claim 10 , wherein the device comprises an Internet of Things (IoT) device, and wherein communicating the data associated with the device further comprises communicating data which includes one or more of a type of the device, a location or geolocation of the device, and an IP address of the device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 13, 2017
From: ASATI, RAJIV; NAINAR, NAGENDRA KUMAR; PIGNATARO, CARLOS M.
To: CISCO TECHNOLOGY, INC.
Reel/Frame 042692/0533 →
Continuity (1)
Related Publication 20180359095A1 · Dec 13, 2018