Skip to main content
SHARE
Technology

Secure IoT Publish/Subscribe Channel Access (SIPCA)

Invention Reference Number

202205253

Licensing Contact

Andreana C Leskovjan
leskovjanac@ornl.gov
(865) 341-0433
Lines of code

Vast amounts of data are sent through the Internet of Things (IoT) on a daily basis around the world. The publish/subscribe (pub/sub) method is effective at disseminating data that need to be efficiently and securely shared among numerous users and stakeholders. But IoT devices have limited computation, communication, and storage capabilities. Data security is a challenge, as existing pub/sub frameworks rekeying requirements require high overhead. This technology addresses the critical need for efficient key management in securing IoT pub/sub channels. It leverages secure Secret Sharing cryptographic algorithms to tackle the challenge of invalidating symmetric keys possessed by the to-be-revoked nodes. 

Description

This technology, SIPCA (Secure IoT Pub/Sub Channel Access), addresses the critical need for efficient key management in securing IoT pub/sub channels. It leverages secure Secret Sharing cryptographic algorithms to tackle the challenge of invalidating symmetric keys possessed by to-be-revoked nodes. Unlike conventional methods that necessitate rekeying the entire group whenever a node is removed, SIPCA eliminates this costly process of frequent re-grouping and achieves a highly secure solution with optimal communication efficiency, addressing a significant shortcoming in current approaches. This design method ensures secure pub/sub operation key creation, assignment, and updates to allow only authorized subscribers to obtain the entitled published topic data, where each topic is fed by a collection of IoT devices. This not only enhances IoT data channel security but also streamlines access control, making it ideal for large-scale and complex information sharing among distributed organizations. SIPCA's potential extends beyond the pub/sub framework, promising even greater benefits in IoT-driven distributed information sharing applications for the general public. 

Applications and Industries

  • Radioactive/Nuclear material transport 
  • Health care 
  • Factory automation 
  • Energy, power grid operators 
  • Smart cities, smart buildings 
  • Military 
  • Sensors for many applications 

Benefits

  • Secure key management of distributed IoT systems so individual IoT devices can operate in concert 
  • Effective key management framework 
  • Eliminates burden of need to rekey when subscriber leaves group 
  • Provides highly efficient communication overhead 
  • A secure and efficient integration framework for IoT large-scale and complex information sharing among distributed organizations 
  • Executes synchronous and contextual rich IoT-driven cyber operations 
  • Enable effective information sharing integration between edge computing and enterprise infrastructure  
  • Applicable to other distributed IoT information sharing approaches beyond the pub-sub model