US 10,375,094 B2Granted

Wireless sensor network security

AssigneeHitachi, Ltd.

InventorsTakeshi Shibata, Sudhanshu Gaur

Life of this patent

Estimating the term…

Loading patent…

Abstract

In some examples, a computing device may receive sensed data of a first sensor sent in a first transmission. The computing device may associate a first timestamp with the sensed data. Further, the computing device may receive, from other sensors, first signal strength information including first signal strength data and a first signal property related to the first transmission, and a second timestamp corresponding to detection of the first transmission. The computing device may receive, from other sensors, second signal strength information including second signal strength data and a second signal property related to a second transmission, and a third timestamp corresponding to detection of the second transmission. When the third timestamp is later than the first timestamp and the first signal property matches the second signal property, the computing device may indicate that a sensor that sent the second transmission is associated with an anomaly.

Claims20

Dependent claims

A system comprising:

one or more processors;
and
one or more non-transitory computer-readable media maintaining executable instructions, which, when executed by the one or more processors, program the one or more processors to perform operations comprising:
receiving sensed data information sent in a data transmission from a first sensor, the sensed data information including a first sensor identifier (ID) and sensed data of the first sensor;
associating a first timestamp with the sensed data information;
receiving, from a second sensor, a first information transmission including first signal strength information including first signal strength data and a first signal duration related to a first detected transmission detected by the second sensor, and a second timestamp corresponding to a time of detection of the first detected transmission by the second sensor;
receiving, from a third sensor, a second information transmission including second signal strength information including second signal strength data and a second signal duration related to a second detected transmission detected by the third sensor, and a third timestamp corresponding to a time of detection of the second detected transmission by the third sensor;
comparing the second timestamp with the third timestamp and the first signal duration with the second signal duration;
determining that the first detected transmission and the second detected transmission both correspond to a transmission sent by a same detected sensor based at least in part on the second timestamp being within a threshold time of the third timestamp and the first signal duration matching the second signal duration;
based on determining that the first detected transmission and the second detected transmission correspond to the transmission sent by the same detected sensor, determining, based at least partially on the first signal strength data and the second signal strength data, an indicated location of the detected sensor;
and
when the indicated location of the detected sensor does not correspond to a known sensor location, indicating that the detected sensor is associated with an anomaly.

9 more elements

A method comprising:

receiving, by a processor, sensed data of a first sensor sent in a first data transmission;
associating a first timestamp with the sensed data;
receiving, from a second sensor, a first information transmission including first signal strength information including first signal strength data and a first signal duration related to a first detected transmission detected by the second sensor, and a second timestamp corresponding to a time of detection of the first detected transmission by the second sensor;
receiving, from a third sensor, a second information transmission including second signal strength information including second signal strength data and a second signal duration related to a second detected transmission detected by the third sensor, and a third timestamp corresponding to a time of detection of the second detected transmission by the third sensor;
comparing the second timestamp with the third timestamp and the first signal duration with the second signal duration;
determining that the first detected transmission and the second detected transmission both correspond to a transmission sent by a same detected sensor based at least in part on the second timestamp being within a threshold time of the third timestamp and the first signal duration matching the second signal duration;
based on determining that the first detected transmission and the second detected transmission correspond to the transmission sent by the same detected sensor, determining, based at least partially on the first signal strength data and the second signal strength data, an indicated location of the detected sensor;
and
when the indicated location of the detected sensor does not correspond to a known sensor location, indicating an anomaly.

6 more elements

One or more non-transitory computer-readable media maintaining instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving, by a processor, sensed data of a first sensor sent in a first data transmission;
associating a first timestamp with the sensed data;
receiving, from a second sensor, a first information transmission including first signal strength information including first signal strength data and a first signal duration related to a first detected transmission detected by the second sensor, and a second timestamp corresponding to a time of detection of the first detected transmission by the second sensor;
receiving, from a third sensor, a second information transmission including second signal strength information including second signal strength data and a second signal duration related to a second detected transmission detected by the third sensor, and a third timestamp corresponding to a time of detection of the second detected transmission by the third sensor;
comparing the second timestamp with the third timestamp and the first signal duration with the second signal duration;
determining that the first detected transmission and the second detected transmission both correspond to a transmission sent by a same detected sensor based at least in part on the second timestamp being within a threshold time of the third timestamp and the first signal duration matching the second signal duration;
based on determining that the first detected transmission and the second detected transmission correspond to the transmission sent by the same detected sensor, determining, based at least partially on the first signal strength data and the second signal strength data, an indicated location of the detected sensor;
and
when the indicated location of the detected sensor does not correspond to a known sensor location, indicating an anomaly.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/284,621Filed 4 Oct 2016
Published: US 2018/0097830 A15 Apr 2018
Granted: 6 Aug 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification14 codes

H04L 63/1425
By monitoring network traffic: traffic logging, e.g. anomaly detection
G06F 21/552
Detecting local intrusion or implementing counter-measures: involving long-term monitoring or reporting
G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
H04L 67/12
Protocols: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in…

Family

US 2018/0097830 A1Pre-grant publication · published 5 Apr 2018
US 10,375,094 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key