# US 11,310,235 B1 · Internet of things system based on security orientation and group sharing > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,310,235 B1 - Document ID: US11310235B1 - Status: Granted - Kind: B1 - Application number: 17/394,330 - Filed: 2021-08-04 - Granted: 2022-04-19 - Earliest claimed: 2021-08-04 - Assignees: Netfay Inc. - Applicants: Netfay Inc. - Inventors: Kuei-Fu Hsu - Web page: https://patentgrep.com/patent/US11310235B1 ## CPC - H04L 63/101: {Access control lists [ACL]} - G16Y 10/75: Information technology; Communication - G16Y 30/10: Security thereof - H04L 63/029: {Firewall traversal, e.g. tunnelling or, creating pinholes} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/104: {Grouping of entities} - H04L 65/60: Network streaming of media packets - H04L 65/61: for supporting one-way streaming services, e.g. Internet radio - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 67/104: Peer-to-peer [P2P] networks - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04L 67/306: User profiles - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 2463/121: Timestamp - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G16Y: INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT] ## Abstract The present application discloses an Internet of Things (IoT) system, comprising a cloud account server, configured to manage user accounts corresponding to the users respectively, wherein the users comprise a first user; a plurality of IoT devices, communicating with the cloud account server respectively, wherein the plurality of IoT devices including a first IoT device corresponding to the first user, and the first IoT device preserves a first authorization list set by the first user; and a plurality of peripheral devices, including a first peripheral device connected to or communicating with the first IoT device. The first IoT device determines whether other users possess a first authority to access the first peripheral device based on the first authorization list. ## Claims ### Claim 1 An Internet of Things (IoT) system, comprising: a cloud account server, configured to manage user accounts corresponding to users respectively, wherein each of the users can apply for a user account with the cloud account server, and the users comprise a first user; a plurality of IoT devices, communicating with the cloud account server respectively, wherein the plurality of IoT devices include a first IoT device corresponding to the first user, and the first IoT device preserves a first authorization list set by the first user; a plurality of peripheral devices, including a first peripheral device connected to or communicating with the first IoT device; a cloud machine server; a STUN cloud server; and a P2P information exchange cloud server, wherein, the first IoT device determines whether other users possess a first authority to access the first peripheral device based on the first authorization list, and the cloud account server further comprises a private key, and a public key corresponding to the private key; the cloud machine server further comprises a private key, and a public key corresponding to the private key; the STUN cloud server further comprises a private key, and a public key corresponding to the private key; the P2P information exchange cloud server further comprises a private key, and a public key corresponding to the private key; each of the users further possesses a corresponding output/input device, wherein the first user possesses a first output/input device, the first output/input device comprises a private key, and a public key corresponding to the private key; the plurality of IoT devices further comprise a second IoT device corresponding to a second user, wherein the first IoT device comprises a private key, and a public key corresponding to the private key, and the second IoT device comprises a private key, and a public key corresponding to the private key; and the first peripheral device further comprises a private key, and a public key corresponding to the private key. ### Claim 2 (depends on 1) The IoT system of claim 1, wherein the first peripheral device comprises at least one of a first storage resource device, a first surveillance resource device, and a first displaying resource device. ### Claim 3 (depends on 2) The IoT system of claim 2, wherein when the first peripheral device comprises the first storage resource device, the first authority includes at least one of a folder-setting authority, a file-reading authority, and a file-writing authority for the first storage resource device. ### Claim 4 (depends on 3) The IoT system of claim 3, wherein the folder-setting authority includes at least one of a read-only setting authority, and a read/write setting authority. ### Claim 5 (depends on 2) The IoT system of claim 2, wherein when the first peripheral device comprises the first surveillance resource device, the first authority includes at least one of a live-view authority, a recording authority, a replaying authority, and a system parameter setting authority. ### Claim 6 (depends on 2) The IoT system of claim 2, wherein when the first peripheral device comprises the first displaying resource device, the first authority includes at least one of a receiving pushed multimedia authority, and an authority for synchronously playing a content of remote IoT devices. ### Claim 7 (depends on 2) The IoT system of claim 2, wherein when the first peripheral device comprises the first storage resource device, the first user accessing a content stored in the first storage resource device. ### Claim 8 (depends on 2) The IoT system of claim 2, wherein when the first peripheral device comprises the first storage resource device and the first displaying resource device, the first user playing a content stored in the first storage resource device by use of the first displaying resource device. ### Claim 9 (depends on 2) The IoT system of claim 2, wherein when the first peripheral device comprises the first storage resource device and the first surveillance resource device, at least one of the following operations being performed: the first user playing a real-time video content of the first surveillance resource device in real time; the first user storing a content recorded from the first surveillance resource device in the first storage resource device; the first user replaying a content recorded from the first surveillance resource device and stored in the first storage resource device; the second user playing a real-time video content of the first surveillance resource device in real time when a second user possesses the first authority; and the second user replaying a content recorded from the first surveillance resource device and stored in the first storage resource device when the second user possesses the first authority. ### Claim 10 (depends on 2) The IoT system of claim 2, wherein when the first peripheral device comprises the first storage resource device and a second user possesses the first authority, the second user accessing a content stored in the first storage resource device. ### Claim 11 (depends on 2) The IoT system of claim 2, wherein: the plurality of IoT devices further comprise a second IoT device corresponding to a second user, and the second IoT device preserves a second authorization list set by the second user; the plurality of peripheral devices further comprise a second peripheral device connected to or communicating with the second IoT device, wherein the second IoT device determines whether other users possess a second authority to access the second peripheral device based on the second authorization list, and the second peripheral device comprises at least one of a second storage resource device, a second surveillance resource device, and a second displaying resource device; the plurality of IoT devices further comprise a third IoT device corresponding to a third user, and the third IoT device preserves a third authorization list set by the third user; the plurality of peripheral devices further comprise a third peripheral device connected to or communicating with the third IoT device, wherein the third IoT device determines whether other users possess a third authority to access the third peripheral device based on the third authorization list, and the third peripheral device comprises at least one of a third storage resource device, a third surveillance resource device, and a third displaying resource device. ### Claim 12 (depends on 11) The IoT system of claim 11, wherein when the first peripheral devices comprise the first storage resource device, the first displaying resource device and the first surveillance resource device, the second peripheral devices comprise the second displaying resource device, and the second user possesses the first authority, at least one of the following operations being performed: the second user playing a content stored in the first storage resource device by use of the first displaying resource device; the second user playing a content stored in the first storage resource device by use of the second displaying resource device; the second user playing a real-time video content of the first surveillance resource device by use of the second displaying resource device; and the second user replaying a content recorded from the first surveillance resource device and stored in the first storage resource device by use of the second displaying resource device. ### Claim 13 (depends on 11) The IoT system of claim 11, wherein when the first peripheral device comprises the first displaying resource device, the second peripheral device comprises the second displaying resource device, the third peripheral device comprises the third displaying resource device, and the second user possesses the first authority and the third authority, at least one of the following operations being performed: the second user synchronously playing the same content of the first displaying resource device by use of the second displaying resource device; the second user synchronously playing the same content of the third displaying resource device by use of the second displaying resource device; the second user synchronously playing the same content of the first displaying resource device by use of the third displaying resource device; and the second user synchronously playing the same content of the third displaying resource device by use of the first displaying resource device. ### Claim 14 (depends on 11) The IoT system of claim 11, wherein when the first peripheral devices comprise the first displaying resource device and the first storage resource device, the second peripheral devices comprise the second displaying resource device and the second storage resource device, the third peripheral devices comprise the third displaying resource device and the third storage resource device, and the second user possesses the first authority and the third authority, at least one of the following operations being performed: the second user playing a content stored in the second storage resource device by use of the first displaying resource device; the second user playing a content stored in the second storage resource device by use of the third displaying resource device; the second user playing a content stored in the first storage resource device by use of the third displaying resource device; and the second user playing a content stored in the third storage resource device by use of the first displaying resource device. ### Claim 15 (depends on 11) The IoT system of claim 11, wherein when the first peripheral devices comprise the first surveillance resource device and the first storage resource device, the second peripheral devices comprise the second surveillance resource device and the second storage resource device, the third peripheral devices comprise the third surveillance resource device and the third storage resource device, and the second user possesses the first authority and the third authority, at least one of the following operations being performed: the second user accessing a content stored in the first storage resource device; the second user accessing a content stored in the third storage resource device; the second user storing a video content recorded from the first surveillance resource device in the first storage resource device; the second user storing a video content recorded from the second surveillance resource device in the first storage resource device; the second user storing a video content recorded from the third surveillance resource device in the first storage resource device; the second user storing a video content recorded from the first surveillance resource device in the third storage resource device; the second user storing a video content recorded from the second surveillance resource device in the third storage resource device; and the second user storing a video content recorded from the third surveillance resource device in the third storage resource device. ### Claim 16 (depends on 1) The IoT system of claim 1, wherein the first user makes selections from the user accounts to create a first user friend list. ### Claim 17 (depends on 16) The IoT system of claim 16, wherein the first authorization list further comprises: a first friend authorization list, configured to preserve at least one user account selected from the first user friend list by the first user, so as to authorize the first authority to the user corresponding to the at least one user account. ### Claim 18 (depends on 17) The IoT system of claim 17, wherein the first IoT device downloads and stores the information of the at least one user account preserved in the first friend authorization list from the cloud account server. ### Claim 19 (depends on 18) The IoT system of claim 18, wherein when the first IoT device does not communicate with, and then communicates again with the cloud account server, the first IoT device downloads and stores the updated information of user's account. ### Claim 20 (depends on 1) The IoT system of claim 1, wherein the first user makes selections from the user accounts to create a first user group list. ### Claim 21 (depends on 20) The IoT system of claim 20, wherein the first authorization list further comprises: a first group authorization list, configured to preserve at least one group selected from the first user group list by the first user, so as to authorize the first authority to the users corresponding to the user accounts within the at least one group. ### Claim 22 (depends on 21) The IoT system of claim 21, wherein the first IoT device downloads and stores the information of the at least one user account in the at least one group of the first group authorization list from the cloud account server. ### Claim 23 (depends on 22) The IoT system of claim 22, wherein when the first IoT device does not communicate with, and then communicates again with the cloud account server, the first IoT device downloads and stores the updated information of user's account. ### Claim 24 (depends on 1) The IoT system of claim 1, wherein the first authorization list further comprises: a first others authorization list, configured to preserve the user accounts managed by the cloud account server, so as to authorize the first authority to all the users. ### Claim 25 (depends on 1) The IoT system of claim 1, further comprising: a cloud machine server, configured to register a plurality of identification (ID) respectively corresponding to the plurality of IoT devices, and information of the user accounts respectively corresponding to the plurality of ID. ### Claim 26 (depends on 1) The IoT system of claim 1, wherein when the first output/input device communicates with the first IoT device, an encrypted communication channel being established by use of the private key for first output/input device, the public key for first output/input device, the private key for first IoT device and the public key for first IoT device through cryptographic algorithms; and the first output/input device or the first IoT device being able to decrypt an encrypted message. ### Claim 27 (depends on 26) The IoT system of claim 26, wherein a timestamp or a nonce is further added in the encrypted communication channel. ### Claim 28 (depends on 1) The IoT system of claim 1, wherein when the first output/input device communicates with the second IoT device, an encrypted communication channel being established by use of the private key for first output/input device, the public key for first output/input device, the private key for second IoT device and the public key for second IoT device through cryptographic algorithms; and the first output/input device or the second IoT device being able to decrypt an encrypted message. ### Claim 29 (depends on 28) The IoT system of claim 28, wherein a timestamp or a nonce is further added in the encrypted communication channel. ### Claim 30 (depends on 1) The IoT system of claim 1, wherein when the first IoT device communicates with the second IoT device, an encrypted communication channel being established by use of the private key for first IoT device, the public key for first IoT device, the private key for second IoT device and the public key for second IoT device through cryptographic algorithms; and the first IoT device or the second IoT device being able to decrypt an encrypted message. ### Claim 31 (depends on 30) The IoT system of claim 30, wherein a timestamp or a nonce is further added in the encrypted communication channel. ### Claim 32 (depends on 1) The IoT system of claim 1, wherein when the cloud account server communicates with the first IoT device, an encrypted communication channel being established by use of the private key for cloud account server, the public key for cloud account server, the private key for first IoT device and the public key for first IoT device through cryptographic algorithms; and the cloud account server or the first IoT device being able to decrypt an encrypted message. ### Claim 33 (depends on 32) The IoT system of claim 32, wherein when the cloud account server is replaced by one of the cloud machine server, the STUN cloud server or the P2P information exchange cloud server, and communicates with the first IoT device by means of the same logic, an encrypted communication channel being established by use of the respective private keys and public keys through cryptographic algorithms; and two parties of the encrypted communication channel being able to decrypt an encrypted message respectively. ### Claim 34 (depends on 33) The IoT system of claim 33, wherein a timestamp or a nonce is further added in the encrypted communication channel. ### Claim 35 (depends on 32) The IoT system of claim 32, wherein a timestamp or a nonce is further added in the encrypted communication channel. ### Claim 36 (depends on 1) The IoT system of claim 1, wherein when the first output/input device communicates with the cloud account server, an encrypted communication channel being established by use of the private key for first output/input device, the public key for first output/input device, the private key for cloud account server and the public key for cloud account server through cryptographic algorithms; and the first output/input device or the cloud account server being able to decrypt an encrypted message. ### Claim 37 (depends on 36) The IoT system of claim 36, wherein when the cloud account server is replaced by one of the cloud machine server, the STUN cloud server or the P2P information exchange cloud server, and communicates with the first output/input device by means of the same logic: an encrypted communication channel being established by use of the respective private keys and public keys through cryptographic algorithms; and two parties of the encrypted communication channel being able to decrypt an encrypted message respectively. ### Claim 38 (depends on 37) The IoT system of claim 37, wherein a timestamp or a nonce is further added in the encrypted communication channel. ### Claim 39 (depends on 36) The IoT system of claim 36, wherein a timestamp or a nonce is further added in the encrypted communication channel. ### Claim 40 (depends on 1) The IoT system of claim 1, wherein when the first IoT device communicates with the first peripheral device, an encrypted communication channel being established by use of the private key for first IoT device, the public key for first IoT device, the private key for first peripheral device and the public key for first peripheral device through cryptographic algorithms; and the first IoT device or the first peripheral device being able to decrypt an encrypted message. ### Claim 41 (depends on 40) The IoT system of claim 40, wherein a timestamp or a nonce is further added in the encrypted communication channel. ### Claim 42 (depends on 1) The IoT system of claim 1, wherein when an error occurs on the first peripheral device, the error information of the first peripheral device being pushed automatically to some receivers based on a receiver list preset by the IoT system.