ACCESS CONTROL LISTS FOR PRIVATE NETWORKS OF SYSTEM AGNOSTIC CONNECTED DEVICES

摘要

The disclosure relates to using a control service to control external access to APIs of IoT devices on a private network. An external application can request access to an API, and in response, the control service can monitor broadcasts from the IoT devices indicating what APIs they have available. If a match exists, the control service can request user authorization to allow the requested access. The user can grant or deny the requested access, and place limitations on the authorized access. The control service uses this information to open a connection between the requesting application and the IoT device having the requested API, and via this connection, the requesting application can access and control the device running the requested API.

主权项

1. A system for securing access to internet-of-things (IoT) devices on a private network, the system comprising:
an IoT device on a private network having one or more APIs; a gateway device coupled to the private network and to a public network and configured to receive API requests over the public network; one or more IoT services on the gateway device for managing the API requests; a control service on the gateway device for matching one of the one or more APIs on the IoT device with the one or more APIs requested by the IoT service; and a configuration module configured to prompt a user to allow the one or more IoT services to have access to the one of the one or more APIs on the IoT device, and upon authorization from the user, allowing authorized IoT services to access the API.