IP Library › Granted Patent US 12671684
Granted Patent B2
US 12671684 · App. 17/540,819 · Granted Jun 30, 2026

Systems and methods for proactively upgrading low quality access credentials

Inventor: Pedro Miguel Paixao (Sunrise, FL)
Assignee: FORTINET, INC.
H04L63/083H04L63/101H04L63/102H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12671684
App. No.
17/540,819
Granted
Jun 30, 2026
Kind
B2
Abstract

Systems, devices, and methods are discussed for proactively addressing low quality access credentials in a network environment.

Claims (59)

1 . A method for proactively policing and securing network elements, the method comprising:

receiving, by a computing system, information describing types of network elements on a network;

generating, by the computing system, an ordering of the set of network elements based on likelihood of unauthorized access via credential-based attack vectors specific to the corresponding type of network element;

selecting, by the computing system, a network element according to the ordering;

attempting, by the computing system, to access a selected network element using one or more access credentials;

selecting weak access credentials for the selected network element from a database of weak access credentials for the types of network elements, wherein the the weak access credentials are selected and attempted in a sequence ranked by historical likelihood of malicious use for the corresponding network element;

attempting, by the computing system, to access the selected network element using the selected weak access credentials; and

in response to successfully accessing the selected network element using the selected weak access credentials, applying a security process to the selected network element, wherein the security process comprises modifying access credentials or disabling access in response to the credential-based ordering and successful access.

2 . The method of claim 1 , the method further comprising:

identifying, by the processing resource, a network administrator associated with the selected network element; and

communicating, by the processing resource, a change implemented by the security process to the network administrator.

3 . The method of claim 2 , wherein applying the security process includes changing a password for the selected network element to use an updated password.

4 . The method of claim 3 , wherein communicating the change implemented by the security process includes communicating the updated password to the network administrator.

5 . The method of claim 1 , wherein applying the security process further includes changing a username for the selected network element.

6 . The method of claim 1 , wherein applying the security process includes disabling access to the selected network element.

7 . The method of claim 6 , wherein the access credential is a first access credential, and wherein the method further comprises:

re-enabling access to the selected network element;

attempting, by the processing resource, to access the selected network element using the first access credential and a second access credential; wherein the second access credential is a weak access credential; and

based upon a successful access to the selected network element using the second access credential, re-applying, by the processing resource, the security process to the selected network element to render the selected network element secure.

8 . The method of claim 1 , wherein applying the security process includes quarantining the selected network element.

9 . The method of claim 1 , wherein identifying the selected network element on a computer network includes:

determining, by the processing resource, that the selected network element on a computer network has been added to the computer network.

10 . The method of claim 1 , wherein the type of network element is a first type of network element, wherein the access credential is a first access credential, and wherein the selected network element is a first network element, the method further comprising:

identifying, by the processing resource, a second network element on the computer network;

attempting, by the processing resource, to access the selected network element using a second access credential, wherein the second access credential is selected from a group consisting of: a default access credential specific to a second type of network element corresponding to the second network element, and a weak access credential;

based upon a successful access to the selected network element using the second access credential, applying, by the processing resource, the security process to the second network element to render the second network element secure.

11 . A system for proactively policing and securing network elements, the system comprising:

a processing resource;

a non-transitory computer-readable medium, coupled to the processing resource, having stored therein instructions that when executed by the processing resource cause the processing resource to:

receive information describing types of network elements on a network;

generate an ordering of the set of network elements based on likelihood of unauthorized access via credential-based attack vectors specific to the corresponding type of network element;

select a network element according to the ordering;

attempt to access a selected network element using one or more access credentials;

select weak access credentials for the selected network element from a database of weak access credentials for the types of network elements, wherein the the weak access credentials are selected and attempted in a sequence ranked by historical likelihood of malicious use for the corresponding network element;

attempt to access the selected network element using the selected weak access credentials; and

in response to successfully accessing the selected network element using the selected weak access credentials, apply a security process to the selected network element, wherein the security process comprises modifying access credentials or disabling access in response to the credential-based ordering and successful access.

12 . The system of claim 11 , wherein the non-transitory computer-readable medium further has stored therein instructions that when executed by the processing resource cause the processing resource to:

identify a network administrator associated with the selected network element; and

communicate a change implemented by the security process to the network administrator.

13 . The system of claim 11 , wherein to apply the security process further comprises changing a password for the selected network element to use an updated password.

14 . The system of claim 12 , wherein communicating the change implemented by the security process includes communicating the updated password to the network administrator.

15 . The system of claim 11 , wherein to apply the security process further comprises changing a username for the selected network element.

16 . The system of claim 11 , wherein to apply the security process further comprises disabling access to the selected network element.

17 . The system of claim 16 , wherein the access credential is a first access credential, and wherein the non-transitory computer-readable medium further has stored therein instructions that when executed by the processing resource cause the processing resource to:

re-enable access to the selected network element; and

attempt to access the selected network element using the first access credential and a second access credential; wherein the second access credential is a weak access credential; and

based upon a successful access to the selected network element using the second access credential, re-apply the security process to the selected network element to render the network element secure.

18 . The system of claim 11 , wherein to apply the security process further comprises quarantining the selected network element.

19 . A non-transitory computer-readable medium having stored therein instructions that when executed by a processing resource cause a computing system to:

receive information describing types of network elements on a network;

generate an ordering of the set of network elements based on likelihood of unauthorized access via credential-based attack vectors specific to the corresponding type of network element;

select a network element according to the ordering;

attempt to access a selected network element using one or more access credentials;

select weak access credentials for the selected network element from a database of weak access credentials for the types of network elements, wherein the the weak access credentials are selected and attempted in a sequence ranked by historical likelihood of malicious use for the corresponding network element;

attempt to access the selected network element using the selected weak access credentials; and

in response to successfully accessing the selected network element using the selected weak access credentials, apply a security process to the selected network element, wherein the security process comprises modifying access credentials or disabling access in response to the credential-based ordering and successful access.

20 . The non-transitory computer-readable medium of claim 19 further has stored therein instructions that when executed by the processing resource cause the processing resource to:

identify a network administrator associated with the selected network element; and

communicate a change implemented by the security process to the network administrator.