Systems, methods, and devices to defend against attacks
AssigneePCMS Holdings, Inc.
InventorChristian M. Gehrmann
Life of this patent
Estimating the term…
Loading patent…
AssigneePCMS Holdings, Inc.
InventorChristian M. Gehrmann
Estimating the term…
Systems, methods, and/or techniques for mitigating attacks on an IoT device at a gateway device may be provided. The gateway device may receive a communication directed to an Internet of Things (IoT) device and forward it to the IoT device. The IoT device may indicate to the gateway device that the communication is associated with an attack and send the gateway device a sleep time period and a request to change a filtering rule set at the gateway device. The gateway device may change the filtering rule set and receive another communication directed to the IoT device. If the another communication is valid based on the filtering rule set with the change and a number of valid packets is less than a threshold, and the sleep time period has expired, the gateway device may send another communication to the IoT device.
A gateway device for mitigating an attack, the gateway device comprising:
(canceled)
(canceled)
An Internet of Things (IoT) device for mitigating an attack, the IoT device comprising:
The IoT device of claim 23, wherein, when session key sharing is allowed, the gateway device shares a session key with the IoT device.
The IoT device of claim 23, wherein the request comprises a parameter associated with determining whether a communication is valid.
The IoT device of claim 23, wherein the request comprises the threshold.
The IoT device of claim 23, wherein the request comprises a list of source interne protocol (IP) addresses, and wherein the source IP addresses are for sources of communications not meeting a requirement of the IoT device.
The IoT device of claim 23, wherein the processor is further configured to record a number of valid packets per second, wherein the determination that the first communication is associated with the attack on the IoT device is based on the number of valid packets per second.
The IoT device of claim 23, wherein the processor is further configured to receive a sleep time period and remain in the sleep mode until the sleep time period expires.
The IoT device of claim 23, wherein the IoT device determines the filtering rule set based on a valid or non-valid message identification, wherein the valid or non-valid message identification is a constrained application protocol (CoAP) message identification.
(canceled)
The IoT device of claim 23, wherein the IoT device determines the filtering rule based on a message sequence number.
A method for mitigating an attack, the method comprising:
Dependencies are inferred from the claim text.