# US 12,009,946 B2 · Gateway and bridge devices for secure internet of things > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,009,946 B2 - Document ID: US12009946B2 - Status: Granted - Kind: B2 - Application number: 18/044,638 - Filed: 2021-09-15 - Published: 2023-10-19 - Granted: 2024-06-11 - Earliest claimed: 2020-09-16 - Assignees: DataKrew Pte. Ltd. - Applicants: Datakrew Pte. Ltd. - Inventors: Naina Gupta; Arpan Jati; Anupam Chattopadhyay; Sumanta Bose - Web page: https://patentgrep.com/patent/US12009946B2 ## CPC - H04L 12/4625: {Single bridge functionality, e.g. connection of two networks over a single bridge} - H04W 12/03: Protecting confidentiality, e.g. by encryption - G16Y 30/10: Security thereof - H04L 9/002: {Countermeasures against attacks on cryptographic mechanisms (network architectures or network communication protocols for protection against malicious traffic H04L63/1441)} - H04L 9/0852: {Quantum cryptography (transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03)} - H04L 9/14: using a plurality of keys or algorithms - H04L 63/0471: {applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding} - H04W 12/009: {specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks} - H04L 63/123: {received data contents, e.g. message integrity} - H04W 84/18: Self-organising networks, e.g. ad-hoc networks or sensor networks - H04W 88/16: Gateway arrangements - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G16Y: INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT] ## Abstract Gateway and bridge devices for internet of things systems are described. The gateway device is configured to communicate with a server using signals encrypted according to a first encryption protocol and to communicate with bridge device using signals encrypted with a second protocol. The bridge device is configured to decrypt the signals received from the gateway device and to communicate with sensors and actuators. The bridge device is further configured to encrypt data signals from the sensors for sending to the gateway device. ## Claims ### Claim 1 A gateway device comprising: a first interface configured to receive command signals encrypted according to a first encryption protocol from a server and to send data signals encrypted according to the first encryption protocol to the server; a second interface configured to send command signals encrypted according to a second encryption protocol to a bridge device and to receive data signals encrypted according to the second encryption protocol from the bridge device; cryptographic key storage configured to store cryptographic keys for the first encryption protocol and cryptographic keys for the second encryption protocol; and a processor configured to: decrypt command signals encrypted according to the first encryption protocol using the cryptographic keys for the first encryption protocol and encrypt the command signals according to the second encryption protocol; and decrypt data signals encrypted according to the second encryption protocol using the encryption keys for the second encryption protocol and encrypt the data signals according to the first encryption protocol. ### Claim 2 (depends on 1) A gateway device according to claim 1, wherein the first encryption protocol is a transport layer security (TLS) protocol. ### Claim 3 (depends on 1) A gateway device according to claim 1, wherein the second encryption protocol is a lightweight secure data communications protocol. ### Claim 4 (depends on 1) A gateway device according to claim 1, wherein the first encryption protocol and or the second encryption protocol is a hybrid of pre-quantum encryption algorithms and post-quantum algorithms. ### Claim 5 (depends on 1) A gateway device according to claim 1, wherein the processor is further operable to initiate a key exchange with the server and/or the bridge device. ### Claim 6 (depends on 1) A gateway device according to claim 1, wherein the processor is further configured to check and/or transform, and/or filter, and/or consolidate the command signals after decryption and before encryption. ### Claim 7 (depends on 1) A gateway device according to claim 1, wherein the processor is further configured to check and/or transform, and/or filter, and/or consolidate the data signals after decryption and before encryption. ### Claim 8 (depends on 1) A gateway device according to claim 1, wherein the processor is further configured to analyze the data signals and determine integrity of the data signals. ### Claim 9 (depends on 1) A gateway device according to claim 1, wherein the processor is further operable to monitor a power supply and/or tamper inputs to detect physical intrusions. ### Claim 10 (depends on 9) A gateway device according to claim 9, wherein the processor is operable to delete the cryptographic keys stored in the cryptographic key storage if a physical intrusion is detected. ### Claim 11 A bridge device comprising: a device interface configured to send command signals to an actuator device and to receive data signals from a sensor device; a gateway interface configured to receive command signals encrypted according to an encryption protocol from a gateway device and to send data signals encrypted according to the encryption protocol to the gateway device; cryptographic key storage configured to store encryption keys for the encryption protocol; and a processor configured to decrypt command signals encrypted according to the encryption protocol and to send the decrypted command signals to the actuator device and to encrypt data signals received from the sensor device according to the encryption protocol and send the encrypted data signals to the gateway device. ### Claim 12 (depends on 11) A bridge device according to claim 11, wherein the encryption protocol is a lightweight secure data communications protocol. ### Claim 13 (depends on 11) A bridge device according to claim 11, wherein the first encryption protocol and or the second encryption protocol is a hybrid of pre-quantum encryption algorithms and post-quantum algorithms. ### Claim 14 (depends on 11) A bridge device according to claim 11, wherein the processor is further configured to check and/or transform, and/or filter, and/or consolidate the command signals after decryption and before sending to the sensor device. ### Claim 15 (depends on 11) A bridge device according to claim 11, wherein the processor is further configured to check and/or transform, and/or filter, and/or consolidate the data signals before encryption. ### Claim 16 (depends on 11) A bridge device according to claim 11, wherein the processor is further configured to analyze the data signals and determine integrity of the data signals. ### Claim 17 (depends on 11) A bridge device according to claim 11, wherein the processor is further operable to monitor a power supply and/or tamper inputs to detect physical intrusions. ### Claim 18 (depends on 11) A bridge device according to claim 11, wherein the processor is operable to delete the cryptographic keys stored in the cryptographic key storage if a physical intrusion is detected. ### Claim 19 A monitoring system comprising: a gateway device; a bridge device; at least one sensor coupled to the bridge device; and at least one actuator coupled to the bridge device, the gateway device comprising: a first interface configured to receive command signals encrypted according to a first encryption protocol from a server and to send data signals encrypted according to the first encryption protocol to the server; a second interface configured to send command signals encrypted according to a second encryption protocol to the bridge device and to receive data signals encrypted according to the second encryption protocol from the bridge device; cryptographic key storage configured to store cryptographic keys for the first encryption protocol cryptographic keys for the second encryption protocol; and a processor configured to: decrypt command signals encrypted according to the first encryption protocol using the cryptographic keys for the first encryption protocol and encrypt the command signals according to the second encryption protocol; and decrypt data signals encrypted according to the second encryption protocol using the encryption keys for the second encryption protocol and encrypt the data signals according to the first encryption protocol, the bridge device comprising: a device interface configured to send command signals to an actuator device and to receive data signals from a sensor device; a gateway interface configured to receive command signals encrypted according to the second encryption protocol from the gateway device and to send data signals encrypted according to the second encryption protocol to the gateway device; cryptographic key storage configured to store encryption keys for the second encryption protocol; and a processor configured to decrypt command signals encrypted according to the second encryption protocol and to send the decrypted command signals to the actuator device and to encrypt data signals received from the sensor device according to the encryption protocol and send the encrypted data signals to the gateway device.