Anti-cloning system for internet of things devices

An anti-cloning system, comprising:

• a server configured to verify one or more unique identity values;
• a device configured for a connection to an embedded device having a unique identity value;
• and
• a controller coupled to the device, the controller having:
• a controller memory configured to store a public verification key, and
• a controller processor coupled to the controller memory and configured to:
• verify the unique identity value using the public verification key,
• add the unique identity value to an operating list of embedded device identity values based on a number of unique identity values included in the operating list being less than a threshold number, the operating list being associated with one or more respective embedded devices that are temporarily allowed to be used with the device for a threshold amount of time when the device is unable to connect with the server to verify the one or more unique identity values, and
• enable the device to use the embedded device based on:
• the unique identity value being verified, and
• the unique identity value being added to the operating list.

A method of verifying an embedded device, comprising:

• determining, by a processor on or within a controller, that the embedded device has been connected to a device, the embedded device having a unique identity value;
• verifying, by the processor, a digital signature on the unique identity value of the embedded device;
• adding, by the processor, the unique identity value to an operating list of unique identity values in response to a number of unique identity values included in the operating list being less than a threshold number, the operating list being associated with one or more respective embedded devices that are temporarily allowed to be used with the device for a threshold amount of time when the first device is unable to connect with a server to verify the unique identity value;
• determining, by the processor, whether the unique identity value of the embedded device is included in a consumed devices list stored on the server based on a connection status between the controller and the server;
• and
• enabling, by the processor, the device to use the embedded device in response to:
• the digital signature on the unique identity value being verified,
• the unique identity value being added to the operating list, and
• the unique identity value not being included in the consumed devices list.