Abstract: System and method for efficient and secure pairing and communication. For example, one embodiment comprises a machine-readable medium having program code stored thereon which, when executed by a data processing device, causes the data processing device to perform the operations of: reading a code from an optical label of a peripheral device and providing the code to a service for validation; providing a communication channel between the peripheral and the service, the peripheral to transmit a first key of a first key pair to the service over the communication channel; transmitting a second key of a second key pair to the service; upon receiving an indication that the service has validated the first key and the second key, using the first key and the second key to establish a session key; and pairing with the peripheral using the session key.

Abstract: A system and method for cryptographically securing a product. For example, one embodiment of a method comprises: generating a first signature over a key to add an authenticator device to a chain of trust; generating a universal unique identifier (UUID) code; generating a second signature over the UUID code and metadata associated with the authenticator device using the key; and encoding the UUID code, metadata, and signature in an optical label of a product.

Abstract: A system and method are described for identifying an IoT device using object recognition techniques. For example, one embodiment of a system comprises: an Internet of Things (IoT) service to provide back-end data processing for a plurality of IoT devices, the IoT service comprising: interface logic to couple the IoT service to an IoT app executed on a mobile device of a user, an IoT device recognition engine coupled to the interface logic, the IoT device recognition engine to identify a model of a new IoT device captured in an image by the IoT app, the IoT device recognition engine to transmit an indication of the IoT device model to the interface logic, wherein the IoT app is to use the indication of the IoT device model during setup of the new IoT device.

Abstract: System and method for securely managing video captured by the IoT cameras. For example, one embodiment of a method comprises: generating a key pair comprising a private key and a public key; storing at least the private key on a data processing device of a user and storing only the public key on an internet of things (IoT) camera associated with an account of the user; in response to an event, the IoT camera to perform the operations of: generating a temporary data encryption key (DEK); encrypting video captured by the camera using the DEK to generated encrypted video blocks; encrypting the DEK using the public key to generate an encrypted DEK; and transmitting the encrypted video blocks and the encrypted DEK to a video storage service.

Abstract: A system, method, and machine-readable medium are described for verification of devices in a product package. An optical code on a product package is scanned at a point-of-sale (POS) system and a digital code generated; an RF burst is generated to activate devices in the product package which transmit identification information. A device manifest is used indicating devices intended to be included in the product package. The identification information is compared with the set of devices indicated by the device manifest; and allowing a purchase of the product package to proceed if the identification information matches the set of devices; wherein if the identification information does not match the performing one or more secondary operations and/or providing instructions at the POS system to attempt to verify that the devices in the product package match the set of devices indicated by the device manifest.

Abstract: A system, method, and machine-readable medium are described for verifying a transaction related to a device with an on-device rewriteable memory. For example, one embodiment of a method comprises: during a purchase transaction to purchase a device at a point of sale (POS) system, reading a certificate stored on a rewriteable tag integral to the device; generating a signature over the certificate and, if the purchase transaction results in a successful purchase of the device, storing the signature in the rewriteable tag; during a post-purchase transaction, attempting to read the signature from the rewriteable tag and validate the signature; denying the post-purchase transaction if the signature cannot be read and/or is not validated; if the signature can be read and validated, then: permitting the post-process transaction; generating a new public/private key pair and corresponding new certificate; and storing the new certificate on the rewriteable tag.

Abstract: A system and method are described for identifying an IoT device model from a key broadcast in an advertising channel. For example, one embodiment of a system comprises: a target Internet of Things (IoT) device to transmit a key over a Bluetooth (BT) advertising channel, the key associated with a model of the target IoT device; mobile application program code which, when installed on a mobile device, is to cause the mobile device to listen to the BT advertising channel to extract the key; and a key dictionary to be installed on the mobile device, the key dictionary mapping each of a plurality of keys with an IoT device model and associated data, the mobile application program code to perform a lookup using the key extracted from the BT advertising channel to identify the target IoT device model and/or associated data, and to use the target IoT device model and/or associated data for onboarding the target IoT device.

Abstract: System and method for activation and deactivation of devices to prevent unauthorized acquisition and use.

Abstract: A system, apparatus, and method for automatically provisioning a new IoT device.

Abstract: An IoT-based system and method are described having an IoT hub including an accelerometer. For example, one embodiment of a system comprises: an Internet of Things (IoT) service, a plurality of IoT devices, each IoT device comprising a first secure communication module, and an IoT hub in communication with the plurality of IoT devices. The IoT hub comprising: a microcontroller unit to execute application-specific program code, a second secure communication module to establish a first secure communication channel with the IoT service and a plurality of second secure communication channels with the plurality of IoT devices, and a sensor to detect physical movements of the IoT hub and to change an operating mode of the IoT hub from a first operating mode to a second operating mode based on the physical movements.

Abstract: A system and method are described for ensuring that a product has been transported in acceptable environmental conditions.

Abstract: A system and method are described for connecting an IoT device to a wireless router and/or access point.

Abstract: A system and method are described for anonymous IoT device accounts. For example, one embodiment of a system comprises an IoT app to be executed on a mobile device of a user, the IoT app comprising a graphical user interface (GUI) to allow the user to capture one or more identification (ID) codes from one or more IoT devices, the mobile device to transmit the ID codes to an IoT service; a device management module on the IoT service to provision the IoT devices with the IoT service; an account management module on the IoT service to establish an anonymous user account and to associate the anonymous user account with the one or more IoT devices provisioned by the device management module; wherein upon the provisioned IoT devices being associated with the anonymous user account, the GUI of the IoT app is to provide the user with controllable access to the IoT devices prior to the user entering user identification information to the IoT service.

Abstract: A system, apparatus, and method for sharing network credentials. One embodiment of a method comprises: establishing a Bluetooth connection between a first Internet of Things (IoT) device and a mobile device of a first user having an IoT app installed, the mobile device to couple the first IoT device to an IoT service; receiving a request from a user from the mobile device to configure the first IoT device using network credentials from a second IoT device, the second IoT device registered with an account of the user on the IoT service and configured to connect to a secure network of the user with the network credentials; establishing a communication channel between the first IoT device and the second IoT device through the IoT service and the mobile device to obtain the network credentials; and using the network credentials at the first IoT device to securely connect to the secure network.

Abstract: A system and method are described for managing attributes in an IoT system.

Abstract: An IoT-based system and method are described having an IoT hub including an accelerometer. For example, one embodiment of a system comprises: an Internet of Things (IoT) service, a plurality of IoT devices, each IoT device comprising a first secure communication module, and an IoT hub in communication with the plurality of IoT devices. The IoT hub comprising: a microcontroller unit to execute application-specific program code, a second secure communication module to establish a first secure communication channel with the IoT service and a plurality of second secure communication channels with the plurality of IoT devices, and a sensor to detect physical movements of the IoT hub and to change an operating mode of the IoT hub from a first operating mode to a second operating mode based on the physical movements.

Abstract: A system and method are described for performing flow control in an IoT system. For example, one embodiment of a system comprises: a plurality of IoT devices; an IoT hub to establish local wireless connections with the plurality of IoT devices to communicatively couple the plurality of IoT devices to an IoT service; the IoT hub to store flow control parameters for each of the plurality of IoT devices, the flow control parameters determined based on data communication requirements of each of the IoT devices and indicating one or more data communication thresholds for each of the IoT devices; the IoT hub to monitor data communication with each of the IoT devices to determine whether one of the IoT devices has reached a data communication threshold specified by the flow control parameters, wherein in response to a first IoT device reaching its data communication threshold, the IoT hub temporarily preventing communication between the first IoT device and the IoT service.

Abstract: A system and method are described for sharing IoT devices. For example, one embodiment of a system comprises an Internet of Things (IoT) service in communication with a plurality of IoT devices over a network; a device sharing module to receive an indication from a first user of one or more IoT devices associated with an account of the first user to be shared with a second user; the device sharing module to responsively associate the one or more IoT devices with an account of the second user and to subsequently allow the second user to access the one or more IoT devices.

Abstract: A system and method are described for securing a vehicle. For example, one embodiment of a method comprises: generating a secret related to a radio frequency (RF) signal characteristic to be transmitted by a key fob; securely sharing the secret between a vehicle and a wireless key fob; periodically transmitting a ping signal from the vehicle in a locked or inactive state; receiving a response ping signal to the ping signal, the response ping signal transmitted by the key fob; identifying at least a first RF signal characteristic associated with the response ping signal; determining whether the first RF signal characteristic is valid based on the secret; unlocking and/or activating the vehicle upon determining that the first RF signal characteristic is valid; and maintaining the locked or inactive state and/or requiring additional authentication if the first RF signal characteristic is invalid.

Abstract: An apparatus and method are described for sharing WiFi credentials.