IP Library Granted Patent US 12684007
Granted Patent B2
US 12684007 · App. 19/205,793 · Granted Jul 14, 2026

Computer-based systems configured for network characterization and management based on device criticality score and methods of use thereof

Inventors: Vaibhav Anand (Chicago, IL); Charles Joseph Bonfield (Raleigh, NC); Jae Gook Ro (Chantilly, VA); Brandon Lee Knight (South Lake Tahoe, CA); Sarthak Sahu (Pasadena, CA); Ciro Donalek (Pasadena, CA); Michael Amori (Pasadena, CA)
Assignee: Virtualitics, Inc.
H04L63/1433H04L63/1408
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12684007
App. No.
19/205,793
Granted
Jul 14, 2026
Kind
B2
Abstract

A method includes scanning a network having a first and second host, obtaining, via the scanning, a first and second type information of the first and second host, respectively, the first or second type information including a device category the first or second host belongs to, obtaining, via the scanning, a first and second scaling factor of the first and second host, respectively, calculating, a first criticality score of the first host based on the first type information and the first scaling factor, calculating a second criticality score of the second host based on the second type information and the second scaling factor, and facilitating to apply a security patch on the first host prior to the second host when the first criticality score is higher than the second criticality score.

Claims (42)

1 . A computer-implemented method comprising:

obtaining, by a computing device, a first parameter of a first device, and a second parameter of a second device, the first or second parameter comprising a device category of the respective first or second device;

obtaining, by the computing device, a first scaling factor of the first device, and a second scaling factor of the second device, wherein the first scaling factor or the second scaling factor is a product of a first component-specific scaling function associated with a number of services running on a respective device out of the first device or the second device, a second component-specific scaling function associated with a functionality of the respective device, and a third component-specific scaling function associated with a use case of the respective device;

calculating, by the computing device, a first criticality score of the first device based at least on the first parameter and the first scaling factor;

calculating, by the computing device, a second criticality score of the second device based on the second parameter and the second scaling factor;

wherein calculating the first or the second criticality score comprises:

using, as a multiplication factor, a minimum value for the respective device category of the first or second device; and

facilitating, by the computing device, to apply a security patch on the first device prior to the second device when the first criticality score is higher than the second criticality score.

2 . The method of claim 1 , wherein the device category is selected from workstation, router, server, printer, camera or a combination thereof.

3 . The method of claim 1 , wherein the minimum value for the device category of the first or the second parameter is determined by a machine learning model.

4 . The method of claim 1 , wherein the first criticality score is a product of multiplying the first parameter and the first scaling factor, and the second criticality score is a product of multiplying the second parameter and the second scaling factor.

5 . The method of claim 1 , wherein the functionality of the first or second device is identified based on a network map.

6 . The method of claim 1 , wherein the functionality of the first or second device is inferred by network traffic and interactions.

7 . The method of claim 1 , wherein a use case of the first or second device is determined by a location of the respective device.

8 . The method of claim 1 , further comprising repeatedly scanning at a predetermined frequency, by the computing device, a computer network hosting the first and the second device to obtain the first and the second parameter for calculating the first and the second criticality score.

9 . A computer-implemented method comprising:

scanning, by a computing device, a network having at least a first and a second device;

obtaining, by the computing device via the scanning, a first parameter of the first device, and second parameter of the second device, the first or second parameter comprising a device category of the respective first or second device;

obtaining, by the computing device via the scanning, a first scaling factor of the first device, and a second scaling factor of the second device, wherein the first scaling factor or the second scaling factor is a product of a first component-specific scaling function associated with a number of services running on a respective device out of the first device or the second device, a second component-specific scaling function associated with a functionality of the respective device, and a third component-specific scaling function associated with a use case of the respective device;

calculating, by the computing device, a first criticality score of the first device by multiplying the first parameter and the first scaling factor;

calculating, by the computing device, a second criticality score of the second device by multiplying the second parameter and the second scaling factor;

wherein calculating the first or the second criticality score comprises:

using, as a multiplication factor, a minimum value for the respective device category of the first or second device; and

facilitating, by the computing device, to apply a security patch on the first device prior to the second device when the first criticality score is higher than the second criticality score.

10 . The method of claim 9 , wherein the device category is selected from workstation, router, server, printer, camera or a combination thereof.

11 . The method of claim 9 , wherein the minimum value for the device category of the first or second parameter is determined by a machine learning model.

12 . The method of claim 9 , wherein the functionality of the first or second device is identified based on a network map or inferred by network traffic and interactions.

13 . The method of claim 9 , wherein the use case of the first or second device is determined by a location of the first or second device.

14 . The method of claim 9 , wherein the network scanning and calculating the criticality scores are conducted repeatedly at a predetermined frequency.

15 . A system, comprising:

one or more processors; and

a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, cause the one or more processors to:

obtain a first parameter of a first device, and a second parameter of a second device, the first or second parameter comprising a device category of the respective first or second device;

obtain a first and a second scaling factor of the first and the second device, respectively, wherein the first scaling factor or the second scaling factor is a product of a first component-specific scaling function associated with a number of services running on a respective device out of the first device or the second device, a second component-specific scaling function associated with a functionality of the respective device, and a third component-specific scaling function associated with a use case of the respective device;

calculate a first criticality score of the first device based at least on the first parameter and the first scaling factor;

calculate a second criticality score of the second device based at least on the second parameter and the second scaling factor;

wherein calculating the first or the second criticality score comprises:

using, as a multiplication factor, a minimum value for the respective device category of the first or second device; and

facilitate to apply a security patch on the first device prior to the second device when the first criticality score is higher than the second criticality score.

16 . The system of claim 15 , wherein the device category is selected from workstation, router, server, printer, camera or a combination thereof.

17 . The system of claim 15 , wherein the minimum value for the device category of the first or second parameter is determined by a machine learning model.

18 . The system of claim 15 , wherein the functionality of the first or the second device is identified based on a network map or inferred by network traffic and interactions.