# US 11,122,037 B2 · Internet of things (“IoT”) protection retro-system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,122,037 B2 - Document ID: US11122037B2 - Status: Granted - Kind: B2 - Application number: 15/906,089 - Filed: 2018-02-27 - Published: 2019-08-29 - Granted: 2021-09-14 - Earliest claimed: 2018-02-27 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Manu Kurian - Web page: https://patentgrep.com/patent/US11122037B2 ## CPC - H04L 43/0876: Network utilisation, e.g. volume of load or congestion level - H04L 41/0806: for initial configuration or provisioning, e.g. plug-and-play - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/126: {the source of the received data} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04W 12/06: Authentication - H04W 12/108: Source integrity - H04L 63/1458: {Denial of Service} - H04L 69/18: Multiprotocol handlers, e.g. single devices capable of handling multiple protocols - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Methods for securing communication in a network of IoT devices is provided. Methods include selecting a base IoT hub for operating as an intermediary layer for IoT devices. Methods include selecting from the plurality of IoT devices a selected plurality of IoT devices. Each of the selected IoT devices is configured to send and receive electronic communications. Methods include linking each of the selected plurality of IoT devices to the base IoT hub. Methods include storing, in a data repository within the hub, identification data associated with each of the IoT devices. The communication-types typically associated with each of the selected plurality of IoT devices are stored in the data repository. When an IoT device is activated to send a communication, methods include comparing and analyzing the communication and identification data of the activated device to stored identification data and communication-types of the selected IoT devices. ## Claims ### Claim 1 A system for securing communication on an Internet of Things (“IoT”) network, the system comprising: a plurality of IoT devices, each IoT device including electronics, software, and sensors, each IoT device configured to send and receive electronic communications, each IoT device having an IP address, each IoT device being included in the IoT network; a base IoT hub linked to each IoT device, the base IoT hub comprising: a data repository configured to store identification data for each linked-IoT device and a communication type associated with each linked IoT device; a data analysis engine configured to authenticate communications transmitted from each IoT device to via the base IoT hub prior to executing the communications; and a processor configured to process and execute the communications; the base IoT hub being segmented into a plurality of channels, each channel operating as an individual base IoT hub, each individual base IoT hub comprising an IP address different from an IP address of the base IoT hub and different from the IP address of an active IoT device; wherein, when an IoT device, from the plurality of IoT devices, is activated in response to a sensor being triggered in the IoT device, wherein the IoT device, when activated, is the active IoT device: the active IoT device is configured to transmit a communication via to the IoT base IoT hub; in response to receiving the communication from the active IoT device, the data analysis engine is configured to: compare the communication from the active IoT device to the communication type stored in the data repository and associated with the active IoT device; and compare the identification data for the active IoT device to the identification data associated with the active IoT device in the data repository; when the communication from the active IoT device corresponds to a communication type stored in the data repository and the identification data for the active IoT device corresponds to identification data stored in the data repository, the processor is configured to execute the communication via one of the individual base IoT hubs, the one individual base IoT hub acting as an originator of the communication; and when the communication from the active IoT device does not correspond to a communication type stored in the data repository or the identification data for the active IoT device does not correspond to identification data stored in the data repository, the processor is configured to: terminate the communication from the active IoT device prior to execution; and assign a new IP address to the active IoT device. ### Claim 2 (depends on 1) The system of claim 1, wherein the base hub is further configured to retroactively link 10 an unlinked active IoT device, wherein the active IoT device has generated a communication and the link is retroactively timed to a time prior to generation of the communication. ### Claim 3 (depends on 1) The system of claim 1, wherein the communication from the active IoT device is generated in response to trigger data received by a sensor embedded in the active IoT device. ### Claim 4 (depends on 1) The system of claim 1, wherein communications on the IoT network via the IoT base hub comprise one of: communication between a first IoT device and a second IoT device; communication between an application running in the cloud and an IoT device; and communication between a service in the cloud and an IoT device. ### Claim 5 (depends on 1) The system of claim 1, wherein the identification data for each linked IoT device comprises a user-set configuration. ### Claim 6 (depends on 1) The system of claim 1, wherein, when the communication from the active IoT device is transmitted within a range of 0 to 100 meters, communication protocols are selected from one or more of Wi-Fi, Bluetooth, ZigBee, Z-wave, and 4G LTE. ### Claim 7 (depends on 1) The system of claim 1, wherein, when the communication from the active IoT device is transmitted within a range of 0 to 100 kilometers, communication protocols are selected from one or more of Wi-Fi, 4G LTE, Sigfox, and OnRamp. ### Claim 8 (depends on 1) The system of claim 1, wherein each linked IoT device comprises a direct connection to the internet. ### Claim 9 (depends on 1) The system of claim 1, wherein each linked IoT device is configured to connect to the internet exclusively via the base IoT hub. ### Claim 10 (depends on 1) The system of claim 1, wherein the base IoT hub is further configured to: serve as a proxy for each linked IoT device; and execute all communication for each linked IoT device via the base IoT hub. ### Claim 11 (depends on 10) The system of claim 10, wherein the executing the communication from the active IoT device via the base IoT hub further comprises, masking the IP address of the active IoT device. ### Claim 12 (depends on 1) The system of claim 1, wherein when the communication from the active IoT device does not correspond to a communication type stored in the data repository or the identification data for the active IoT device does not correspond to identification data stored in the data repository, the base hub is further configured to mask identification of the base IoT hub and display the linked IoT device as an individual entity. ### Claim 13 A method for securing communication in a network of Internet of Things (“IoT”) devices, the method comprising: selecting a base IoT hub for operating as an intermediary layer for IoT devices, the base IoT hub comprising a data repository, a data analysis engine, and a processor; linking each of a plurality of IoT devices within the network of IoT devices to the base IoT hub, each IoT device including electronics, software, and sensors, and configured to send and receive electronic communications, each of the IoT devices having an IP address; storing in the data repository within the base IoT hub: identification data for each IoT device; and a communication type associated with each IoT device; segmenting the base IoT hub into a plurality of channels, each channel operating as an individual base IoT hub, each individual base IoT hub comprising an IP address different from an IP address of the base IoT hub and different from the IP address of an active IoT device; receiving a communication at the base IoT hub from an IoT device, the communication transmitted in response to a sensor triggered within the IoT device, wherein the IoT device triggered by the sensor is the active IoT device; authenticating the active IoT device via the data analysis engine within the base IoT hub, the authentication comprising: comparing the communication received from the active IoT device to the communication type stored in the data repository and associated with the active IoT device; and comparing identification data for the active IoT device to the identification data stored in the data repository and associated with the active IoT device; when the communication from the active IoT device corresponds to a communication type stored in the data repository and the identification data for the active IoT device corresponds to the identification data stored in the data repository: masking, in the communication, the identification data of the active IoT device; displaying, in the communication, identification data of one of the individual base IoT hubs; and executing the communication via the one individual base IoT hub, the one individual base IoT hub acting as an originator of the communication; and when the communication from the active IoT device does not correspond to a communication type stored in the data repository or the identification data for the active IoT device does not correspond to identification data stored in the date repository: terminating the communication prior to executing the communication; and assigning a new IP address to the active IoT device. ### Claim 14 (depends on 13) The method of claim 13, wherein, when the communication from the active IoT device is transmitted within a range of 0 to 100 meters, the method further comprises selecting a communication protocols from one or more of Wi-Fi, Bluetooth, ZigBee, Z-wave, and 4G LTE. ### Claim 15 (depends on 13) The method of claim 13, wherein, when the communication from the active IoT device is transmitted within a range of 0 to 100 kilometers, the method further comprises selecting a communication protocol from one or more of Wi-Fi, 4G LTE, Sigfox, and OnRamp. ### Claim 16 (depends on 13) The method of claim 13, wherein each of the IoT devices comprises a direct connection to the internet. ### Claim 17 (depends on 13) The method of claim 13, wherein each of the IoT devices is configured to connect to the internet exclusively via the base IoT hub. ### Claim 18 A method for securing communication in a network of Internet of Things (“IoT”) devices, the method comprising: selecting a base IoT hub for operating as an intermediary layer for IoT devices, the base IoT hub comprising a data repository, a data analysis engine, and a processor; linking each of a plurality of IoT devices to the base IoT hub, the plurality of IoT devices included in the network of IoT devices, each of the plurality of IoT devices including electronics, software and sensors, and configured to send and receive electronic communications, each IoT device having an IP address; storing in the data repository within the base IoT hub: identification data for each IoT device; and a communication type associated with each IoT device; segmenting the base IoT hub into a plurality of channels, each channel operating as an individual base IoT, each individual base IoT hub comprising an IP address different from an IP address of the base IoT hub and different from the IP address of an active IoT device; receiving a communication at the base IoT hub from an IoT device, the communication transmitted in response to a sensor triggered within the IoT device, wherein an IoT device triggered by the sensor is the active IoT device; comparing, at the data analysis engine within the base IoT hub, identification data of the active IoT device to the identification data associated with the active IoT device stored in the data repository; when the identification data for the active IoT device does not correspond to the identification data associated with the active IoT device in the data repository, terminating the communication, via the processor, prior to executing the communication; when the identification data for the active IoT device corresponds to the identification data associated with the active IoT device stored in the data repository: comparing the communication from the active IoT device to the communication type associated with the active IoT device and stored in the data repository; when the communication from the active IoT device corresponds to the communication type associated with the active IoT device stored in the data repository: masking, in the communication, the identification data of the active device; displaying, in the communication, identification data of one of the individual base IoT hubs; and executing the communication via the one individual base IoT hub, the one individual base IoT hub acting as an originator of the communication; and when the communication type from the active IoT device does not correspond to the communication type associated with the active IoT device stored in the data repository, terminating the communication prior to executing the communication and assigning a new IP address to the active IoT device.