IP Library Granted Patent US 10,382,215
Granted Patent B2
US 10,382,215 · App. 15/073,650 · Granted Aug 13, 2019

Device identification and policy enforcement using power over ethernet (POE)

Inventors: Gilad Walden (Tel-Aviv, IL); Tomer Reisner (Rehovot, IL); Kevin Mayer (Tel-Aviv, IL); Svetlana Khanin (Tel-Aviv, IL)
Assignee: FORESCOUT TECHNOLOGIES, INC.
H04L12/10H04B17/104H04L12/40045H04L41/0213H04L41/0893H04L41/28H04L43/04H04L43/0876H04L63/1408H04L43/08Y04S40/168
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,382,215
App. No.
15/073,650
Granted
Aug 13, 2019
Kind
B2
Abstract

Systems, methods, and related technologies for device identification and policy enforcement using Power over Ethernet (PoE) are described. In certain aspects, a communication that originates from a Power over Ethernet (PoE) enabled device can be received. The communication can be processed to determine a characteristic of the device. An action can be initiated based on the characteristic.

Claims (28)

1. A method comprising:

detecting, based on a network protocol, the presence of a Power over Ethernet (PoE) enabled device connected to a network;

monitoring network activity originating from or being directed to the PoE enabled device to determine how the device is communicating with other devices on the network;

monitoring a network protocol to determine an amount of electrical power that the PoE enabled device is consuming;

receiving a communication that originates from the Power over Ethernet (PoE) enabled device that reflects an amount of power consumed by the PoE device;

processing, by a processing device, the amount of power consumption consumed with the PoE enabled device to identify a deviation from a power consumption pattern associated with the PoE enabled device; and

blocking power transmission directed to the PoE enabled device via a network connection based on the deviation from the power consumption pattern associated with the PoE enabled device.

2. The method of claim 1 , further comprising monitoring network activity associated with the PoE enabled device.

3. The method of claim 1 , wherein processing the communication further comprises processing the network activity associated with the PoE enabled device to determine the one or more characteristics of the PoE enabled device.

4. The method of claim 1 , wherein the communication comprises a Simple Network Management Protocol (SNMP) communication.

5. A system comprising:

a memory; and

a processing device, operatively coupled to the memory, to:

detect, based on a network protocol, the presence of a Power over Ethernet (PoE) enabled device connected to a network;

monitor network activity originating from or being directed to the PoE enabled device to determine how the device is communicating with other devices on the network;

monitor a network protocol to determine an amount of electrical power that the PoE enabled device is consuming;

receive a communication that originates from the Power over Ethernet (PoE) enabled device that reflects an amount of power consumed by the PoE device;

process the amount of power consumption consumed with the PoE enabled device to identify a deviation from a power consumption pattern associated with the PoE enabled device; and

block power transmission directed to the PoE enabled device via a network connection based on the deviation from the power consumption pattern associated with the PoE enabled device.

6. The system of claim 5 , wherein the processing device is further to initiate an action based on the deviation from the power consumption pattern associated with the POE enabled device and the characteristic of the PoE enabled device.

7. A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:

detect, based on a network protocol, the presence of a Power over Ethernet (PoE) enabled device connected to a network;

monitor network activity originating from or being directed to the PoE enabled device to determine how the device is communicating with other devices on the network;

monitor a network protocol to determine an amount of electrical power that the PoE enabled device is consuming;

receive a communication that originates from the Power over Ethernet (PoE) enabled device that reflects an amount of power consumed by the PoE device;

process the amount of power consumption consumed with the PoE enabled device to identify a deviation from a power consumption pattern associated with the PoE enabled device; and

block network traffic directed to the PoE enabled device based on the characteristic and the amount of power consumed by the PoE enabled device.

8. The non-transitory computer readable medium of claim 7 , wherein to process the communication, the processing device is further to initiate the action based on the characteristic, the amount of power consumed by the PoE enabled device, and the deviation from the power consumption pattern associated with the PoE enabled device.

Assignments (2)
INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Aug 17, 2020
From: FORESCOUT TECHNOLOGIES, INC.
To: OWL ROCK CAPITAL CORPORATION, AS ADMINISTRATIVE AGENT
Reel/Frame 053519/0982 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 18, 2016
From: WALDEN, GILAD; REISNER, TOMER; MAYER, KEVIN; KHANIN, SVETLANA
To: FORESCOUT TECHNOLOGIES, INC.
Reel/Frame 038023/0826 →
Continuity (2)
Provisional Application 62271068 · Dec 22, 2015
Related Publication 20170180141A1 · Jun 22, 2017