IP Library Granted Patent US 11,283,881
Granted Patent B1
US 11,283,881 · App. 15/906,888 · Granted Mar 22, 2022

Management and protection of internet of things devices

Inventors: Susanta K Nanda (San Jose, CA); Yuqiong Sun (Mountain View, CA)
Assignee: NortonLifeLock Inc.
H04L67/16H04L61/1511H04L61/2015H04L67/12H04W12/06H04W48/16H04W4/70
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,283,881
App. No.
15/906,888
Granted
Mar 22, 2022
Kind
B1
Abstract

A method to manage Internet of Things (IoT) devices is described. In one embodiment, the method includes detecting a presence of a first IoT device in a network associated with the computing device, managing access to the first IoT device based at least in part on authentication information associated with the first IoT device, identifying one or more updates associated with the first IoT device, and applying at least one update to the first IoT device based at least in part on identifying the one or more updates. In one embodiment, the method further includes analyzing a packet stream to determine one or more identifiers associated with the first IoT device, and identifying the first IoT device based at least in part on the one or more determined identifiers.

Claims (78)

1. A computer-implemented method to manage Internet of Things (IoT) devices, at least a portion of the method being performed by a computing device comprising one or more processors, the method comprising:

detecting, via the computing device, a presence of a first IoT device in a network associated with the computing device;

managing, via the computing device, access to the first IoT device based at least in part on authentication information associated with the first IoT device;

searching, via the computing device, a global database for device information associated with the first IoT device, the device information comprising device manufacturer information corresponding to a manufacturer associated with the first IoT device, device update information, or a combination thereof;

identifying, via the computing device, the manufacturer associated with the first IoT device based at least in part on searching the global database for the device information, wherein the global database is remote from the computing device;

identifying, via the computing device that comprises a router and based at least in part on searching the global database for the device information, one or more updates associated with the first IoT device that comprise a software update, a firmware update, or both, the global database including the device manufacturer information and the device update information, wherein identifying the one or more updates associated with the first IoT device comprises:

identifying a current software version and a current firmware version associated with the first IoT device; and

monitoring for available updates to the current software version and the current firmware version associated with the first IoT device;

transmitting a notification of the one or more updates to a user associated with the first IoT device; and

applying, via the computing device, at least one update to the first IoT device based at least in part on identifying the one or more updates and a response to the notification of the one or more updates.

2. The method of claim 1 , wherein detecting the presence of the first IoT device further comprises:

receiving a packet stream associated with the first IoT device;

analyzing the packet stream to determine one or more identifiers associated with the first IoT device; and

identifying the first IoT device based at least in part on the one or more determined identifiers.

3. The method of claim 2 , wherein the one or more identifiers comprise at least one of: a protocol associated with the packet stream, a source media access control (MAC) address associated with the packet stream, a destination MAC address associated with the packet stream, a server address associated with the packet stream, a Domain Name System (DNS) associated with the packet stream, a device certificate associated with the first IoT device, a server certificate associated with the first IoT device, the manufacturer associated with the first IoT device, a type of the first IoT device, or any combination thereof.

4. The method of claim 2 , further comprising:

identifying a Dynamic Host Configuration Protocol (DHCP) request associated with the first IoT device prior to receiving the packet stream; and

determining metadata associated with the DHCP request, wherein identifying the first IoT device is based at least in part on the determined metadata.

5. The method of method of claim 2 , further comprising:

identifying the manufacturer associated with the first IoT device based at least in part on the one or more identifiers;

determining whether one or more details associated with the manufacturer are stored in the computing device; and

in response to determining that the one or more details associated with the manufacturer are not stored in the computing device, querying the global database to determine the one or more details associated with the manufacturer, wherein the device manufacturer information comprises the one or more details associated with the manufacturer.

6. The method of claim 1 , further comprising:

managing access to a second IoT device based at least in part on authentication information associated with the second IoT device, wherein the first IoT device is from a first manufacturer and the second IoT device is from a second manufacturer different from the first manufacturer.

7. The method of claim 1 , further comprising:

transmitting a pairing request in the network associated with the computing device; and

receiving a response to the pairing request from the first IoT device, wherein detecting the presence of the first IoT device is based at least in part on the received response.

8. The method of claim 1 , wherein managing access to the first IoT device further comprises:

generating a username and a password associated with the first IoT device;

transmitting the generated username and password to the user associated with the first IoT device;

receiving, from the user associated with the first IoT device, an access request for the first IoT device, wherein the access request comprises a username and a password; and

providing access to the first IoT device based at least in part on the username and the password included in the received access request matching with the generated username and password.

9. The method of claim 8 , further comprising:

requesting the user associated with the first IoT device to update the username and the password;

in response to the request, receiving an updated username and password associated with the first IoT device; and

providing access to the first IoT device based at least in part on the username and the password included in the received access request matching with the updated username and password.

10. The method of claim 8 , further comprising:

determining that a threshold time has passed after generating the username and the password associated with the first IoT device;

updating the username and the password associated with the first IoT device based at least in part on the determining; and

transmitting the updated username and password to the user associated with the first IoT device.

11. The method of claim 1 , wherein managing access to the first IoT device further comprises a 2-factor authentication associated with the first IoT device, and wherein the computing device managing the first IoT device is a data network device that includes a router agent associated with an intranet, an internet, or both.

12. The method of claim 1 , wherein monitoring for available updates further comprises querying the global database to identify the one or more updates associated with the first IoT device.

13. The method of claim 1 , wherein the notification comprises an indication of availability of the one or more updates, further comprising:

receiving the response from the user, the response comprising an approval to apply the at least one update to the first IoT device, wherein applying the at least one update is based at least in part on the received response.

14. A computing device to manage Internet of Things (IoT) devices, comprising:

one or more processors;

memory in electronic communication with the one or more processors, wherein the memory stores computer executable instructions that when executed by the one or more processors cause the one or more processors to perform the steps of:

detecting a presence of a first IoT device in a network associated with the computing device;

managing access to the first IoT device based at least in part on authentication information associated with the first IoT device;

searching a global database for device information associated with the first IoT device, the device information comprising device manufacturer information corresponding to a manufacturer associated with the first IoT device, device update information, or a combination thereof;

identifying the manufacturer associated with the first IoT device based at least in part on searching the global database for the device information, wherein the global database is remote from the computing device;

identifying one or more updates associated with the first IoT device that comprise a software update, a firmware update, or both based at least in part on searching the global database, wherein the computing device comprises a router, wherein identifying the one or more updates associated with the first IoT device comprises:

identifying a current software version and a current firmware version associated with the first IoT device; and

monitoring for available updates to the current software version and the current firmware version associated with the first IoT device;

transmitting a notification of the one or more updates to a user associated with the first IoT device; and

applying at least one update to the first IoT device based at least in part on identifying the one or more updates and a response to the notification of the one or more updates.

15. The computing device of claim 14 , wherein the instructions executed by the one or more processors cause the one or more processors to perform the steps of:

receiving a packet stream associated with the first IoT device;

analyzing the packet stream to determine one or more identifiers associated with the first IoT device; and

identifying the first IoT device based at least in part on the one or more determined identifiers.

16. The computing device of claim 15 , wherein the one or more identifiers comprise at least one of: a protocol associated with the packet stream, a source media access control (MAC) address associated with the packet stream, a destination MAC address associated with the packet stream, a server address associated with the packet stream, a Domain Name System (DNS) associated with the packet stream, a device certificate associated with the first IoT device, a server certificate associated with the first IoT device, a manufacturer associated with the first IoT device, a type of the first IoT device, or any combination thereof.

17. The computing device of claim 15 , wherein the instructions executed by the one or more processors cause the one or more processors to perform the steps of:

identifying a Dynamic Host Configuration Protocol (DHCP) request associated with the first IoT device prior to receiving the packet stream; and

determining metadata associated with the DHCP request, wherein identifying the first IoT device is based at least in part on the determined metadata.

18. A non-transitory computer-readable storage medium storing computer executable instructions that when executed by one or more processors cause the one or more processors to perform the steps of:

detecting a presence of a first IoT device in a network associated with a computing device;

managing access to the first IoT device based at least in part on authentication information associated with the first IoT device;

searching a global database for device information associated with the first IoT device, the device information comprising device manufacturer information corresponding to a manufacturer associated with the first IoT device, device update information, or a combination thereof;

identifying the manufacturer associated with the first IoT device based at least in part on searching the global database for the device information, wherein the global database is remote from the computing device;

identifying, via the computing device that comprises a router and based at least in part on searching the global database for the device information, one or more updates associated with the first IoT device that comprise a software update, a firmware update, or both, the global database including the device manufacturer information and the device update information, wherein identifying the one or more updates associated with the first IoT device comprises:

identifying a current software version and a current firmware version associated with the first IoT device; and

monitoring for available updates to the current software version and the current firmware version associated with the first IoT device;

transmitting a notification of the one or more updates to a user associated with the first IoT device; and

applying at least one update to the first IoT device based at least in part on identifying the one or more updates and a response to the notification of the one or more updates.

19. The computer-program product of claim 18 , wherein the instructions executed by the one or more processors cause the one or more processors to perform the steps of:

receiving a packet stream associated with the first IoT device;

analyzing the packet stream to determine one or more identifiers associated with the first IoT device; and

identifying the first IoT device based at least in part on the one or more determined identifiers.

Assignments (5)
NOTICE OF SUCCESSION OF AGENCY (REEL 050926 / FRAME 0560) Recorded Sep 13, 2022
From: JPMORGAN CHASE BANK, N.A.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 061422/0371 →
SECURITY AGREEMENT Recorded Sep 13, 2022
From: NORTONLIFELOCK INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 062220/0001 →
CHANGE OF NAME Recorded Jan 30, 2020
From: SYMANTEC CORPORATION
To: NORTONLIFELOCK INC.
Reel/Frame 051759/0845 →
SECURITY AGREEMENT Recorded Nov 4, 2019
From: SYMANTEC CORPORATION; BLUE COAT LLC; LIFELOCK, INC,; SYMANTEC OPERATING CORPORATION
To: JPMORGAN, N.A.
Reel/Frame 050926/0560 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 27, 2018
From: NANDA, SUSANTA K.; SUN, YUQIONG
To: SYMANTEC CORPORATION
Reel/Frame 045056/0653 →
Cited By (1)
US 12,242,593