Device update transmission using a filter
Inventors
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-12095901-B2
Publication Date
2024-09-17
Expiration Date
Abstract
Systems, devices, and methods for updating computerized devices. Functions and operations can include: obtaining a filter data structure (e.g., a bloom filter data structure) that may include hash values corresponding to each of the computerized devices to be updated; determining whether a computerized device is to obtain a device update based on a hash value associated with the computerized device matching a hash value of the filter data structure; and providing the device update to the computerized device when there is a match. The provided device update may modify the operation of the computerized device that receives it.
Core Innovation
The invention provides updates to computerized devices by generating a filter data structure that includes a plurality of hash values, each hash value corresponding to a computerized device in a set of computerized devices to be updated. A determination is made that a computerized device is to receive a device update based on a hash value associated with the computerized device matching a hash value among the plurality of hash values, and the device update is then provided to the computerized device.
The device update comprises a digital asset that includes one or more of software, firmware, or a digital certificate, and the digital asset modifies operation of the computerized device. In implementations described in the document, the filter data structure is a bloom filter data structure and is allocated as a static-size structure that neither expands nor contracts.
The document further describes a secure device-update campaigning architecture in which a campaign management service builds the filter data structure using hash values for device identifiers. A network edge queries the filter using a hash of a requesting device identifier to decide whether to forward or serve updates, and true positives are verified by the campaign management service/database to handle bloom-filter false positives while false negatives are avoided.
Claims Coverage
The independent claims cover two main aspects of the update system: a system that generates and uses a filter data structure for update selection, and a corresponding method that performs the same filter-based determination and provides digital-asset updates. The claims also cover filter type and sizing constraints, the division of functions between a campaign management service and a network edge, and identification inputs and exclusion/no-update handling.
Filter data structure with hash values for device selection
Generating a filter data structure comprising a plurality of hash values, each corresponding to a computerized device in a set of computerized devices to be updated; determining that a computerized device is to receive a device update based on a matching hash value; and providing the device update based on the determining.
Digital-asset device update that modifies device operation
Providing the device update as a digital asset comprising one or more of software, firmware, or a digital certificate, where the digital asset modifies operation of the computerized device.
Bloom filter data structure
The filter data structure is a bloom filter data structure.
Static-size filter data structure
The filter data structure is a fixed-size structure that neither expands nor contracts.
Campaign management service generates hash-value filter from device identifying information
A campaign management service detects update requests for a set of computerized devices and generates a filter data structure containing a plurality of hash values by applying each device's identifying information to a hash function.
Network edge excludes non-request devices and provides no-update indication without contacting campaign management service
A network edge server uses the plurality of hash values to determine that a second computerized device is not part of a request and provides the second computerized device with an indication that there is no device update for it without contacting the campaign management service.
Overall, the claims cover selecting which computerized devices receive updates by matching device-associated hash values against a filter data structure, then providing an update as a digital asset that modifies device operation. The dependent coverage additionally narrows the filter to a bloom filter and fixed-size behavior, allocates filter generation and determination between a campaign management service and a network edge, and includes identifying-information inputs and an exclusion/no-update indication path.
Stated Advantages
Latency reduction compared with conventional linear or binary searching.
Constant-time membership check of whether a device should receive an update based on filter querying.
Resource advantages compared with conventional searching.
Handling bloom-filter false positives by verifying true positives using the campaign management service/database while avoiding false negatives.
Documented Applications
Secure device-update campaigning for IoT and vehicle V2X devices, including software, firmware, and digital certificates provisioned to devices such as OBU, ECU, and RSU.
Certificate management and provisioning within the update campaigning architecture, including components described as a certificate management service, registration authority, enrollment certificate authority, pseudonym certificate authority, and linkage authorities.
Interested in licensing this patent?