IP Library Granted Patent US 10,341,342
Granted Patent B2
US 10,341,342 · App. 15/010,186 · Granted Jul 2, 2019

Configuration data based fingerprinting for access to a resource

Inventors: Maxim Rydkin (Penfield, NY); Ben Holm (Farmington, NY)
Assignee: CARRIER CORPORATION
H04L63/0876H04L63/102
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,341,342
App. No.
15/010,186
Granted
Jul 2, 2019
Kind
B2
Abstract

A method for providing a user system access to a resource includes obtaining configuration data identifying devices at the user system; receiving a request from the user system for access to a resource; applying a function to the configuration data to generate a current fingerprint; comparing the current fingerprint to a reference fingerprint associated with the resource; determining a degree of similarity between the current fingerprint and the reference fingerprint; and granting access to the resource in response to the degree of similarity between the current fingerprint and the reference fingerprint.

Claims (42)

1. A method for providing access to a resource to a user system network, wherein the user system network includes a plurality of network devices, the method comprising:

obtaining, by a system comprising one or more processors, configuration data that includes a device name, a device identifier, and a device address for each network device of the plurality of network devices of the user system network;

receiving, by the system, a request from the user system network for access to the resource;

generating, by the system, a single current fingerprint of the user system network by applying a hash function to a single combination, the single combination comprising all of the device names of the plurality of network devices, all of the device identifiers of the plurality of network devices, and all of the device addresses of the plurality of network devices;

comparing, by the system, the single current fingerprint of the user system network to a reference fingerprint of the user system network, wherein the reference fingerprint is associated with the resource;

determining, by the system, a degree of similarity between the single current fingerprint and the reference fingerprint;

granting, by the system, access to the resource to the user system network in response to the degree of similarity between the single current fingerprint and the reference fingerprint meeting or exceeding a predetermined similarity threshold; and

in a binding mode:

obtaining initial configuration data identifying the plurality of network devices installed at the user system network;

generating the reference fingerprint in response to the initial configuration data; and

binding the reference fingerprint to the resource.

2. The method of claim 1 wherein granting access includes providing a response to the user system network granting access to the resource.

3. The method of claim 2 wherein the response includes information needed to implement the resource.

4. The method of claim 3 wherein the information needed to implement the resource includes a license key.

5. The method of claim 1 further comprising:

applying the hash function to the configuration data to generate a second current fingerprint, wherein applying the hash function to the configuration data to generate the second current fingerprint includes dividing the configuration data into blocks of networked devices of the list of networked devices, applying the hash function to each block of network devices to generate current fingerprint blocks, and aggregating the current fingerprint blocks;

the comparing further includes comparing the current fingerprint blocks to reference fingerprint blocks associated with the resource; and

the determining further includes determining a degree of similarity between the current fingerprint blocks and the reference fingerprint blocks.

6. The method of claim 5 wherein:

the determining further includes determining a number of current fingerprint blocks that match blocks of the reference fingerprint blocks, wherein the predetermined similarity threshold comprises a predetermined number of matching blocks.

7. A system for providing access to a resource to a user system network, wherein the user system network includes a plurality of network devices, the system comprising:

a configuration data store configured to store configuration data comprising a device name, a device identifier, and a device address for each network device of the plurality of network devices of the user system network;

a data server, comprising one or more hardware processors, configured to receive a request from the user system network for access to the resource, wherein the data server is further configured to generate a single current fingerprint of the user system network by applying a hash function to a single combination, the single combination comprising all of the device names of the plurality of network devices, all of the device identifiers of the plurality of network devices, and all of the device addresses of the plurality of network devices; and

a resource server configured to:

compare the single current fingerprint of the user system network to a reference fingerprint of the user system network, wherein the reference fingerprint is associated with the resource;

determine a degree of similarity between the single current fingerprint and the reference fingerprint;

grant access to the resource to the user network system in response to the degree of similarity between the single current fingerprint and the reference fingerprint meeting or exceeding a predetermined similarity threshold; and

in a binding mode:

obtain initial configuration data identifying the plurality of network devices installed at the user system network;

generate the reference fingerprint in response to the initial configuration data; and

bind the reference fingerprint to the resource.

8. A computer program product tangibly embodied on a non-transitory computer readable storage medium for providing access to a resource to a user system network, wherein the user system network includes a plurality of network device, the computer program product including instructions for causing a system comprising one or more processors to execute operations comprising:

obtaining, by the system, configuration data that includes a device name, a device identifier, and a device address for each network device of the plurality of network devices;

receiving, by the system, a request from the user system network for access to the resource;

generating, by the system, a single current fingerprint of the user system network by at least applying a hash function to a single combination comprising all of the device names of the plurality of network devices, all of the device identifiers of the plurality of network devices, and all of the device addresses of the plurality of network devices;

comparing, by the system, the single current fingerprint of the user system network to a reference fingerprint of the user system network, wherein the reference fingerprint is associated with the resource;

determining, by the system, a degree of similarity between the single current fingerprint and the reference fingerprint;

granting, by the system, access to the resource to the user system network in response to the degree of similarity between the single current fingerprint and the reference fingerprint meeting or exceeding a predetermined similarity threshold;

in a binding mode:

obtaining initial configuration data identifying the plurality of network devices installed at the user system network;

generating the reference fingerprint in response to the initial configuration data; and

binding the reference fingerprint to the resource.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 11, 2024
From: CARRIER CORPORATION
To: HONEYWELL INTERNATIONAL INC.
Reel/Frame 069175/0204 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 29, 2016
From: RYDKIN, MAXIM; HOLM, BEN
To: CARRIER CORPORATION
Reel/Frame 037618/0944 →
Continuity (2)
Provisional Application 62112354 · Feb 5, 2015
Related Publication 20160234210A1 · Aug 11, 2016