Smart internet of things ("iot") relay monitors
AssigneeBank of America Corporation
InventorManu Kurian
Life of this patent
Estimating the term…
Abstract
Apparatus and methods are provided for tracking and validating behavior and communication patterns of sensors on an Internet-of-Things (“IoT”) network. Preferably, a tracking node is assigned to monitor activity of a target node. The tracking node may hand-off monitoring responsibility to another node on the network. A tracking node may intercept communications of a target node. A first tracking node may monitor activity of the target node in a first geographic location. A second tracking node may monitor activity of the target node in a second geographic location. Two or more tracking node may monitor activity of the target node in a geographic location.
Claims19
A system for securing an Internet-of-things (“IoT”) network of unsecured nodes, the system comprising:
- a network comprising a plurality of interconnected nodes;
- a target node under electronic surveillance;
- a first tracking node that monitors machine-to-machine (“M2M”) communications transmitted by the target node starting at a time the target node joins the network until the target node crosses a first checkpoint associated with the network;
- and
- a second tracking node that monitors the M2M communications transmitted by the target node after the target node crosses the first checkpoint;
- wherein:
- when the target node is within a pre-determined distance of the first checkpoint, the first tracking node hands-off electronic surveillance of the target node to the second tracking node;
- and
- in response to the first or second tracking node detecting M2M communications transmitted by the target node that correspond to the target node issuing instructions to a threshold number of unsecured nodes on the network to act in concert within a pre-determined time window, revoking electronic transmission privileges of the target node on the network.
A method for securing nodes on an Internet-of-things (“IoT”) network, wherein each node does not have sufficient hardware resources to implement a security protocol, the method comprising:
- receiving, at a network gateway, a request from a target node to join the IoT network;
- in response to receiving the request, the network gateway:
- assigns the target node a compound network address that comprises:
- an identifier of the target node on the IoT network;
- and
- an identifier of a tracking node on the IoT network;
- and
- propagates the compound network address to the nodes on the IoT network;
- in response to receiving the compound network address, the nodes on the IoT network that relay messages transmitted by the target node copy the tracking node on all machine-to-machine (“M2M”) communications transmitted by the target node;
- in response to receiving the compound network address, the tracking node begins monitoring the M2M communications transmitted by the target node on the network;
- and
- in response to the tracking node detecting M2M communications transmitted by the target node that correspond to instructing a threshold number of nodes on the network to act in concert, revoking transmission privileges of the target node on the network.
A system for securing an Internet-of-things (“IoT”) network comprising unsecured nodes, the system comprising:
- a network comprising a plurality of interconnected nodes and a target node under electronic surveillance;
- a first tracking node that monitors machine-to-machine (“M2M”) communications transmitted by the target node when the target node is within a first geographic region;
- and
- a second tracking node that monitors M2M communications transmitted by the target node after the target node exits the first geographic region and enters a second geographic region;
- wherein:
- when the target node is within a pre-determined distance of the second geographic region, the first tracking node is configured to hand-off electronic surveillance of the target node to the second tracking node;
- and
- in response to the first or second tracking nodes detecting M2M communications transmitted by the target node that correspond to the target node issuing instructions to a threshold number of unsecured nodes on the network to act in concert, configuring the threshold number of nodes to spoof the target node.
Dependencies are inferred from the claim text.