IP Library Granted Patent US 11,070,568
Granted Patent B2
US 11,070,568 · App. 16/147,243 · Granted Jul 20, 2021

IoT device management visualization

Inventors: Mayuresh Ektare (Cupertino, CA); Anthony Isaacson (Mountain View, CA)
Assignee: Palo Alto Networks, Inc.
H04L63/1416G06F21/577H04L12/4633H04L41/0893H04L41/22H04L43/10H04L43/12H04L63/1425H04L63/20H04L67/303H04W4/08H04W4/70
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,070,568
App. No.
16/147,243
Filed
Sep 28, 2018
Granted
Jul 20, 2021
Kind
B2
Art Unit
2437
USPC
726/22
Abstract

Techniques for visualizing IoT device management are disclosed. A system utilizing such techniques can include an IoT device risk assessment system and an IoT device management visualization system. A method utilizing such techniques can include grouping IoT devices into an IoT device dimension group based on IoT device dimensions defining the group and controlling presentation of management data for the IoT devices based on the grouping of the IoT devices into the IoT device dimension group.

Claims (60)

1. A method comprising:

maintaining a set of Internet of Things (IoT) device profiles based, at least in part, on operational characteristics of IoT devices indicated by one or a combination of historical records of the IoT devices, event logs of the IoT devices, and system logs of the IoT devices;

grouping the IoT devices into an IoT device dimension group according to IoT device dimensions defined by context-based parameters of the IoT devices in operation using the IoT device profiles;

assessing risk levels to the IoT devices in operation using the IoT device profiles of the IoT devices, wherein assessing the risk levels to the IoT devices in operation includes extracting IoT device risk factors based on the IoT device profiles of the IoT devices, and applying assessment weights to the extracted IoT device risk factors;

gathering management data of the IoT devices including the risk levels assessed to the IoT devices and the operational characteristics of the IoT devices from the IoT device profiles; and

controlling presentation of the management data of the IoT devices including the risk levels assessed to the IoT devices to a user based on the grouping of the IoT devices into the IoT device dimension group.

2. The method of claim 1 , wherein the IoT device dimension group is defined by the IoT device dimensions used to segment the IoT devices into the IoT device dimension group.

3. The method of claim 2 , wherein the context-based parameters defining the IoT device dimensions are specified by the user.

4. The method of claim 1 , further comprising:

receiving user input indicating the context-based parameters of the IoT devices; and

selectively presenting the management data of the IoT devices to the user in response to the user input.

5. The method of claim 1 , further comprising:

receiving user input identifying the IoT device dimensions; and

defining the IoT device dimension group according to the user input identifying the IoT device dimensions.

6. The method of claim 1 , further comprising maintaining an IoT device management policy for the IoT device dimension group, wherein the IoT device management policy is used to manage operation of IoT devices matching the context-based parameters including the IoT devices grouped into the IoT device dimension group.

7. The method of claim 1 , further comprising presenting a network map of the IoT devices in the IoT device dimension group to the user, wherein the network map indicates, at least in part, the management data of the IoT devices.

8. The method of claim 1 , further comprising:

presenting an interactive network map of the IoT devices in the IoT device dimension group to the user, the interactive network map indicating, at least in part, the management data of the IoT devices;

receiving input indicating rules for managing operation of IoT devices matching the context-based parameters including the IoT devices grouped into the IoT device dimension group, wherein the input is generated based on one or more interactions of the user with the interactive network map; and

maintaining an IoT device management policy used to manage operation of IoT devices matching the context-based parameters including the IoT devices grouped into the IoT device dimension group according to the input generated based on the user's interactions with the interactive network map.

9. The method of claim 1 , further comprising presenting a network map of the IoT devices in the IoT device dimension group to the user, wherein the network map includes elements visually distinguished based on the management data of the IoT devices represented, at least in part, by the network map.

10. The method of claim 1 , further comprising presenting to the user a visual representation of the management data indicating deviations in behavior of the IoT devices with respect to each other.

11. The method of claim 1 , wherein assessing the risk levels to the IoT devices further comprises:

updating assessment weight data stored in an assessment weight datastore; and

selecting specific assessment weights from the assessment weight data stored in the assessment weight datastore.

12. The method of claim 1 , wherein assessing the risk levels to the IoT devices comprises:

determining operational performance deviations of the IoT devices using the IoT device profiles of the IoT devices;

extracting the IoT device risk factors using the determined operational performance deviations; and

applying specific assessment weights to the extracted IoT device risk factors, to assess the risk levels to the IoT devices.

13. A system comprising:

a processor configured to:

maintain a set of Internet of Things (IoT) device profiles based, at least in part, on operational characteristics of IoT devices indicated by one or a combination of historical records of the IoT devices, event logs of the IoT devices, and system logs of the IoT devices;

group the IoT devices into an IoT device dimension group according to IoT device dimensions defined by context-based parameters of the IoT devices in operation using the IoT device profiles;

assess risk levels to the IoT devices in operation using the IoT device profiles of the IoT devices, wherein assessing the risk levels to the IoT devices in operation includes extracting IoT device risk factors based on the IoT device profiles of the IoT devices, and applying assessment weights to the extracted IoT device risk factors;

gather management data of the IoT devices including the risk levels assessed to the IoT devices and the operational characteristics of the IoT devices from the IoT device profiles; and

use the processor to control presentation of the management data of the IoT devices including the risk levels assessed to the IoT devices to a user based on the grouping of the IoT devices into the IoT device dimension group; and

a memory coupled to the processor and configured to provide the processor with instructions.

14. The system of claim 13 , wherein the processor is further configured to define the IoT device dimension group by the IoT device dimensions used to segment the IoT devices into the IoT device dimension group.

15. The system of claim 14 , wherein the context-based parameters defining the IoT device dimensions are specified by the user.

16. The system of claim 13 , wherein the processor is further:

configured to receive user input indicating the context-based parameters of the IoT devices; and

selectively present the management data of the IoT devices to the user in response to the user input.

17. The system of claim 13 , wherein the processor is further:

configured to receive user input identifying the IoT device dimensions; and

define the IoT device dimension group according to the user input identifying the IoT device dimensions.

18. The system of claim 13 , wherein the processor is further configured to maintain an IoT device management policy for the IoT device dimension group, wherein the IoT device management policy is used to manage operation of IoT devices matching the context-based parameters including the IoT devices grouped into the IoT device dimension group.

19. The system of claim 13 , wherein the processor is further configured to present a network map of the IoT devices in the IoT device dimension group to the user, wherein the network map indicates, at least in part, the management data of the IoT devices.

20. The system of claim 13 , wherein the processor is further configured to:

present an interactive network map of the IoT devices in the IoT device dimension group to the user, wherein the interactive network map indicates, at least in part, the management data of the IoT devices;

receive input indicating rules for managing operation of IoT devices matching the context-based parameters including the IoT devices grouped into the IoT device dimension group, wherein the input is generated based on one or more interactions of the user with the interactive network map; and

maintain an IoT device management policy used to manage operation of IoT devices matching the context-based parameters including the IoT devices grouped into the IoT device dimension group according to the input generated based on the user's interactions with the interactive network map.

21. The system of claim 13 , wherein the processor is further configured to present a network map of the IoT devices in the IoT device dimension group to the user, wherein the network map includes elements visually distinguished based on the management data of the IoT devices represented, at least in part, by the network map.

22. The system of claim 13 , further comprising:

an assessment weight datastore in which assessment weight data is stored; and

an assessment weight variance management engine configured to update the assessment weight data stored in the assessment weight datastore, wherein an IoT device risk factor analysis engine selects specific assessment weights from the assessment weight data stored in the assessment weight datastore.

23. The system of claim 13 , wherein assessing the risk levels to the IoT devices comprises:

determining operational performance deviations of the IoT devices using the IoT device profiles of the IoT devices;

extracting the IoT device risk factors using the determined operational performance deviations; and

applying specific assessment weights to the extracted IoT device risk factors, to assess the risk levels to the IoT devices.

24. The system of claim 13 , wherein the processor is further configured to present to the user a visual representation of the management data indicating deviations in behavior of the IoT devices with respect to each other.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 25, 2019
From: ZINGBOX, INC
To: PALO ALTO NETWORKS, INC.
Reel/Frame 050822/0085 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 6, 2019
From: EKTARE, MAYURESH; ISAACSON, ANTHONY
To: ZINGBOX, INC.
Reel/Frame 048257/0239 →
Continuity (2)
Provisional Application 62564200 · Sep 27, 2017
Related Publication 20190098028A1 · Mar 28, 2019
Cited By (10)
US 12,244,599 US 12,255,906 US 12,289,328 US 12,289,329 US 12,294,482 US 12,301,600 US 12,302,451 US 12,381,902 US 12,399,999 US 12,438,774