Set of servers for “machine-to-machine” communications using public key infrastructure

摘要

A set of servers can support secure and efficient “Machine to Machine” communications using an application interface and a module controller. The set of servers can record data for a plurality of modules in a shared module database. The set of servers can (i) access the Internet to communicate with a module using a module identity, (i) receive server instructions, and (iii) send module instructions. Data can be encrypted and decrypted using a set of cryptographic algorithms and a set of cryptographic parameters. The set of servers can (i) receive a module public key with a module identity, (ii) authenticate the module public key, and (iii) receive a subsequent series of module public keys derived by the module with a module identity. The application interface can use a first server private key and the module controller can use a second server private key.

主权项

1. A method for supporting machine-to-machine communications, the method performed by a set of servers using at least one computer processor, the method comprising:
recording a first server private key in a nonvolatile memory, wherein the first server private key is used to establish a secure connection with an application server; receiving a message through at least one local area network (LAN) interface, wherein the message includes a module identity and a module digital signature, wherein the module digital signature is verified using a first module public key, and wherein the message includes a first source Internet protocol address and port (IP:port) number; transmitting a response to the first source IP:port number, wherein the response includes a server digital signature processed using a second server private key; using the module identity to select from a module database a set of cryptographic parameters for processing a second module public key; transmitting the set of cryptographic parameters; receiving the second module public key and the module identity, wherein at least one member of the set of servers processes the second module public key using (i) the module identity and (ii) at least a portion of the set of cryptographic parameters, wherein the second module public key is verified using the first module public key, wherein the second module public key is used to decrypt a module encrypted data, and wherein the module encrypted data includes a sensor data; and transmitting the sensor data and the module identity to the application server using the secure connection.