# US 10,375,173 B2 · Method and apparatus for determining integrity of data feed for internet of things

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,375,173 B2
- Document ID: US10375173B2
- Status: Granted
- Kind: B2
- Application number: 15/028,382
- Filed: 2014-08-13
- Published: 2016-09-01
- Granted: 2019-08-06
- Earliest claimed: 2013-10-08
- Assignees: Iotic Labs Limited
- Applicants: Iotic Labs Limited
- Inventors: Paul Nigel Green; Mark Nicholas James Wharton
- Web page: https://patentgrep.com/patent/US10375173B2

## CPC

- H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
- H04L 41/0806: for initial configuration or provisioning, e.g. plug-and-play
- H04L 41/0823: characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability (for optimising operational conditions of wireless networks H04W24/02)
- H04L 61/45: Network directories; Name-to-address mapping
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/1433: {Vulnerability analysis}
- H04L 65/1069: Session establishment or de-establishment
- H04L 65/1073: Registration or de-registration
- H04L 65/1083: In-session procedures
- H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46)
- H04L 67/56: Provisioning of proxy services (store-and-forward switching systems in data switching networks H04L12/54)
- H04L 67/561: Adding application-functional data or data for application control, e.g. adding metadata
- H04L 67/562: Brokering proxy services
- H04L 67/60: Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources (admission control or resource allocation H04L47/70)
- H04W 4/60: Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
- H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC]
- H04W 12/106: Packet or message integrity
- H04W 12/108: Source integrity
- H04W 12/12: Detection or prevention of fraud
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04L 63/1458: {Denial of Service}
- Y04S 40/18: Network protocols supporting networked applications, e.g. including control of end-device applications over a network
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- Y04S: SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS

## Abstract

Methods and registrar computers for determining the integrity of a data feed provided by a virtual device. In an example, the method includes maintaining a control directory of virtual devices registered with the registrar computer and a data feed directory comprising entries indicating data feeds available from the registered virtual devices. Each data feed in the data feed directory is assigned an integrity indicator based on the provenance of the data feed.

## Claims

### Claim 1

A registrar computer configured to negotiate communications between a virtual device and a virtual requestor device over a network to allow data feeds to be consumed without exposure to attacks, the registrar computer comprising:
a processing device; and
a memory device having stored thereon instructions, wherein the instructions, when executed by the processing device, cause the registrar computer to perform the steps of:
maintaining a control directory of virtual devices registered with the registrar computer;
maintaining a data feed directory comprising entries indicating data feeds available from one or more of the virtual devices registered in the control directory;
assigning an integrity indicator to one or more data feeds in the data directory based on a provenance of the corresponding data feed, wherein the integrity indicator for a data feed that has been generated by applying a mathematical function to the data feed is further based on an integrity value assigned to the mathematical function and wherein the integrity value is dependent upon the operations that form the mathematical function;
publishing, via the network, a listing of one or more data feeds from the data feed directory that are available to the virtual requester along with the integrity indicator assigned to the one or more data feeds;
receiving from the virtual requestor device, via the network, a request for at least one of the published data feeds, the request including an address associated with the virtual requestor; and
using the control directory and the data feed directory to provide, via the network, an indication of the request received from the virtual requestor device to at least one virtual device from which the requested at least one of the published data feeds is made available whereby the at least one virtual device may use the address associated with the virtual requestor to directly send to the virtual requestor, via the network, the requested at least one data feed and, thereby, to allow the at least one data feed to be consumed without exposure to attacks.

### Claim 2 (depends on 1)

The registrar computer of claim 1, wherein the provenance of the corresponding data feed comprises a list of real devices that have contributed to generation of the corresponding data feed.

### Claim 3 (depends on 1)

The registrar computer of claim 1, wherein the virtual device is configured to act as a proxy for a real device.

### Claim 4 (depends on 1)

The registrar computer of claim 1, wherein the virtual requestor device is configured to act as a proxy for a real requestor device.

### Claim 5

A method for using a registrar computer to negotiate communications
between a virtual device and a virtual requestor device over a network to allow data feeds to be consumed without exposure to attacks, comprising:
maintaining by the registrar computer a control directory of virtual devices registered with the registrar computer;
maintaining by the registrar computer a data feed directory comprising entries indicating data feeds available from one or more of the virtual devices registered in the control directory;
assigning by the registrar computer an integrity indicator to one or more data feeds in the data directory based on a provenance of the corresponding data feed, wherein the integrity indicator for a data feed that has been generated by applying a mathematical function to the data feed is further based on an integrity value assigned to the mathematical function and wherein the integrity value is dependent upon the operations that form the mathematical function;
publishing by the registrar computer, via the network, a listing of one or more data feeds from the data feed directory that are available to the virtual requester along with the integrity indicator assigned to the one or more data feeds;
receiving by the registrar computer from the virtual requestor device, via the network, a request for at least one of the published data feeds, the request including an address associated with the virtual requestor; and
using the control directory and the data feed directory by the registrar computer to provide, via the network, an indication of the request received from the virtual requestor device to at least one virtual device from which the requested at least one of the published data feeds is made available whereby the at least one virtual device may use the address associated with the virtual requestor to directly send to the virtual requestor, via the network, the requested at least one data feed and, thereby, to allow the at least one data feed to be consumed without exposure to attacks.

### Claim 6 (depends on 5)

The method of claim 5, wherein the provenance of the corresponding data feed comprises a list of real devices that have contributed to generation of the corresponding data feed.

### Claim 7 (depends on 5)

The method of claim 5, wherein the virtual device is configured to act as a proxy for a real device.

### Claim 8 (depends on 5)

The method of claim 5, wherein the virtual requestor device is configured to act as a proxy for a real requestor device.