Device update transmission using a bloom filter
Inventors
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-11664975-B2
Publication Date
2023-05-30
Expiration Date
Abstract
A system includes a campaign management service to detect a campaign initiation request indicating a number of computerized devices to be updated for a campaign and store data corresponding to the computerized devices to be updated. The campaign management service can generate a bloom filter data structure comprising hash values based on the data for each of the computerized devices to be updated and transmit the bloom filter data structure to a network edge. The system can include the network edge that can use the bloom filter data structure from the campaign management service to determine whether a computerized device is to obtain a device update from the campaign management service. The network edge can retrieve the device update and modify the computerized device by transmitting the device update to the computerized device, which then installs it.
Core Innovation
A system for providing updates to computerized devices uses a bloom filter data structure comprising a plurality of hash values. Each hash value corresponds to a computerized device in a set of computerized devices to be updated, and a hash function is used to generate the plurality of hash values for the bloom filter data structure.
The system determines whether a computerized device is to receive a device update based on a hash value associated with the computerized device matching a hash value among the plurality of hash values of the bloom filter data structure. Based on the determining, the system provides the device update to the computerized device.
The device update comprises a digital asset comprising one or more of: software, firmware, or a digital certificate, and the digital asset modifies operation of the computerized device. In the described secure device-update system, a campaign management service stores device-identifying data and generates and transmits the bloom filter data structure so that a network edge can decide whether to obtain or provide the device update and return an exclusion/no-update indication when membership is not indicated.
The disclosed architecture includes handling for false positives by verifying membership at the campaign management service/database, and it supports device polling and constant-time membership checks at the edge. The description further provides operating-environment context involving IoT/vehicle and RSU use and an example certificate-management architecture with registration/enrollment/pseudonym/linkage authorities and scaling considerations integrated with the bloom-filter-driven campaign provisioning.
Claims Coverage
The document includes three independent claims (system, method, and non-transitory computer readable medium), each based on generating and using a bloom filter of hash values to decide whether a computerized device receives an update, where the update includes a digital asset that modifies device operation.
Bloom filter update eligibility based on device-associated hash matching
Generating a bloom filter data structure comprising a plurality of hash values corresponding to a set of computerized devices, using a hash function to generate the plurality of hash values; determining that a computerized device is to receive a device update based on a hash value associated with the computerized device matching a hash value among the plurality of hash values; and providing the device update based on the determining.
Device update including a digital asset that modifies device operation
Providing the device update to the computerized device based on the determining, wherein the device update comprises a digital asset comprising one or more of: software, firmware, or a digital certificate, and wherein the digital asset modifies operation of the computerized device.
Campaign management service and network-edge decisioning for bloom filter-based provisioning
Detecting a campaign initiation request specifying the set of computerized devices to be updated, generating the bloom filter data structure from the campaign devices, and transmitting the bloom filter data structure to a network edge that performs the determining.
Non-member exclusion indication without campaign-management-service communication
Determining using the bloom filter data structure that a second computerized device is not part of a campaign; and providing the second computerized device an indication that there is no update for it without communicating with the campaign management service.
Fixed static size bloom filter data structure
Configuring the bloom filter data structure so that the bloom filter data structure uses a fixed static size that neither expands nor contracts.
Digital asset includes enrollment certificate or pseudonym certificate
Configuring the device update so that the digital asset includes an enrollment certificate or a pseudonym certificate.
Across the independent claims, the core coverage centers on bloom-filter-based membership determination using hash values tied to devices, and delivering a device update whose digital asset modifies device operation. Optional refinements described in dependent claims specify a campaign-management service and a network edge for provisioning, a non-member exclusion path without contacting the campaign management service, fixed static bloom-filter sizing, and certificate-specific digital-asset content.
Stated Advantages
Not explicitly described in patent.
Documented Applications
Not explicitly described in patent.
Interested in licensing this patent?