IP Library Granted Patent US 11,558,378
Granted Patent B2
US 11,558,378 · App. 16/809,364 · Granted Jan 17, 2023

Systems and methods for device fingerprinting

Inventors: Srinivas Akella (San Jose, CA); Shahab Sheikh-Bahaei (Atherton, CA)
Assignee: NETSKOPE, INC.
H04L63/0876
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,558,378
App. No.
16/809,364
Granted
Jan 17, 2023
Kind
B2
Abstract

Systems and methods to generate a device composite fingerprint associated with a computing device are described. In one embodiment, communication data associated with the computing device is accessed. The communication data includes device identification data, device group data, and device operational data. A device identity fingerprint associated with the computing device is generated using the device identification data. A device group fingerprint associated with the computing device is generated using the device group data. A device operational fingerprint associated with the computing device is generated using the device operational data. The device identity fingerprint, the device group fingerprint, and the device operational fingerprint are combined to generate a device composite fingerprint.

Claims (31)

1. A method to generate a device composite fingerprint associated with a computing device, the method comprising:

accessing communication data associated with the computing device, wherein the communication data includes device identification data, device group data, and device operational data;

generating a device identity fingerprint associated with the computing device, wherein the device identity fingerprint is generated using the device identification data;

generating a device group fingerprint associated with the computing device, wherein the device group fingerprint is generated using the device group data, and wherein the group data is represented as any of an average and a standard deviation, or a mode complex model;

generating a device operational fingerprint associated with the computing device, wherein the device operational fingerprint is generated using the device operational data; and

combining the device identity fingerprint, the device group fingerprint, and the device operational fingerprint to generate a device composite fingerprint, wherein each of the device identity fingerprint, the device group fingerprint, and the device operational fingerprint is generated independently of a MAC address and an IP address associated with the computing device.

2. The method of claim 1 , wherein the device identification data includes a MAC, an IMSI, and an ESN.

3. The method of claim 1 , wherein the device group data is associated with a logical grouping of the computing device, and wherein the computing device is associated with one or more relevant groups that are associated with different functionalities of the computing device.

4. The method of claim 3 , wherein the group includes any of an audio conferencing group or a video conferencing group.

5. The method of claim 1 , wherein the communication data includes data associated with a wireless communication protocol or a wired communication protocol.

6. The method of claim 5 , wherein the wireless communication protocol is any of WiFi, Bluetooth, Bluetooth Low Energy, Zigbee, Long-Term Evolution, mobile network data, ultrasound, or an optical communication protocol.

7. The method of claim 5 , wherein the wired communication protocol is any of Ethernet, SCADA, USB, IoT, or an arbitrary network protocol.

8. The method of claim 1 , further comprising storing the device composite fingerprint.

9. The method of claim 1 , wherein the device composite fingerprint is constructed from any of RF data associated with the computing device, interface data across multiple spectra, decoded protocol data, derived data, functionality and services, micro location, ownership and control, and data characteristics of each interface.

10. The method of claim 1 , wherein the device composite fingerprint is used to substantially uniquely identify the computing device.

11. An apparatus to generate a device composite fingerprint associated with a computing device, the apparatus comprising:

a network gateway configured to receive communication data associated with the computing device; and

a processing system communicatively coupled to the network gateway, wherein the processing system receives the communication data from the network gateway, wherein the communication data includes device identification data, device group data, and device operational data, wherein the processing system generates:

a device identity fingerprint associated with the computing device, wherein the device identity fingerprint is generated using the device identification data,

a device group fingerprint associated with the computing device, wherein the device group fingerprint is generated using the device group data, and wherein the group data is represented as any of an average and a standard deviation, or a mode complex model,

a device operational fingerprint associated with the computing device, wherein the device operational fingerprint is generated using the device operational data,

and wherein the processing system combines the device identity fingerprint, the device group fingerprint, and the device operational fingerprint to generate a device composite fingerprint, wherein each of the device identity fingerprint, the device group fingerprint, and the device operational fingerprint is generated independently of a MAC address and an IP address associated with the computing device.

12. The apparatus of claim 11 , wherein the device identification data includes a MAC, an IMSI, and an ESN.

13. The apparatus of claim 11 , wherein the device group data is associated with a logical grouping of the computing device, and wherein the computing device is associated with one or more relevant groups that are associated with different functionalities of the computing device.

14. The apparatus of claim 13 , wherein the group includes any of an audio conferencing group or a video conferencing group.

15. The apparatus of claim 11 , wherein the network gateway includes a wireless sensor array and a network traffic sensor array.

16. The apparatus of claim 11 , wherein the wireless sensor array includes a WiFi packet sniffer and a Bluetooth packet sniffer.

17. The apparatus of claim 11 further comprising a database, wherein the database is configured to store the device composite fingerprint.

18. The apparatus of claim 11 , wherein the device composite fingerprint is constructed from any of RF data associated with the computing device, interface data across multiple spectra, decoded protocol data, derived data, functionality and services, micro location, ownership and control, and data characteristics of each interface.

19. The apparatus of claim 11 , wherein the device composite fingerprint is constructed from any of RF data associated with the computing device, interface data across multiple spectra where available, decoded protocol data, derived data, functionality and services, micro location, ownership and control, and data characteristics of each interface.

20. The apparatus of claim 11 , wherein the device composite fingerprint is used to substantially uniquely identify the computing device.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 30, 2022
From: WOOTCLOUD INC.
To: NETSKOPE, INC.
Reel/Frame 060943/0474 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 4, 2020
From: AKELLA, SRINIVAS; SHEIKH-BAHAEI, SHAHAB
To: WOOTCLOUD INC.
Reel/Frame 052017/0242 →
Continuity (1)
Related Publication 20210281565A1 · Sep 9, 2021