IP Library › Granted Patent US 11,575,643
Granted Patent B2
US 11,575,643 · App. 17/346,335 · Granted Feb 7, 2023

System and method for managing network connected devices

Inventors: Avidor Bartov (Tel-Aviv, IL); Itay Weiss (Holon, IL); Ofri Shur (Kfar Saba, IL); Dean Sysman (New York, NY); Shmuel Ur (Shorashim, IL)
Assignee: Axonius Solutions Ltd.
H04L61/3025H04L67/06H04L67/1097
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,575,643
App. No.
17/346,335
Granted
Feb 7, 2023
Kind
B2
Abstract

A system for managing network connected devices, comprising at least one hardware processor adapted to produce a plurality of unique device descriptors, each describing one of a plurality of network connected devices, by: for each of a plurality of device descriptors, each having a plurality of supported actions, and one or more domain device identifiers, each identifier associating the device descriptor with one of a plurality of management domains: for each of the plurality of management domains not associated with the device descriptor: instructing execution on a network connected device described by the device descriptor a domain identification query according to the descriptor's plurality of supported actions, to determine a new domain device identifier; identifying in the plurality of device descriptors a second device descriptor having a domain device identifier equal to the new domain device identifier; and merging the device descriptor with the second device descriptor.

Claims (49)

1. A system for managing network connected devices, comprising at least one hardware processor adapted for:

performing on one of a plurality of network connected devices a management operation in a management domain of a plurality of management domains by:

computing a domain device identifier to associate the network connected device with the management domain, comprising:

executing on the network connected device a first operation according to at least one first supported action, supported by the network connected device via another management domain of the plurality of management domains and not supported via the management domain, wherein the another management domain is different than the management domain, and at least one of:

communicating with a domain administrator of the management domain; and

executing on the network connected device a second operation according to at least one second supported action, supported by the network connected device via the management domain; and

performing the management operation by instructing execution on the network connected device of at least one operation according to at least one action, where the at least one action is supported by the network connected device via the management domain.

2. The system of claim 1 , wherein executing on the network connected device the first operation is by sending at least one identification request message to the network connected device;

wherein communicating with the domain administrator of the management domain comprises sending to the domain administrator at least part of an identification response message received from the network connected device in response to the at least one identification request message; and

wherein the at least one hardware processor is further adapted for analyzing a domain identifier response received from the domain administrator in response to the at least part of the identification response message to determine the domain device identifier.

3. The system of claim 2 , wherein the at least one hardware processor is further adapted for requesting at least one domain identification query software object from another domain administrator of the other administration domain; and

wherein sending the at least one identification request message to the network connected device comprises instructing the network connected device to execute the at least one domain identification query executable software object.

4. The system of claim 1 , wherein executing on the network connected device the first operation comprises creating a new network interface object on the network connected device; and

wherein executing on the network connected device the second operation comprises configuring the new network interface object.

5. The system of claim 1 , wherein executing on the network connected device the first operation comprises writing to a storage of the network connected device a file comprising at least one device identifier value of the network connected device in the second management domain; and

wherein executing on the network connected device the second operation comprises retrieving the file from the storage.

6. The system of claim 1 , wherein the management domain is not the other management domain; and

wherein the at least one action is supported by the network connected device via the management domain and is not supported by the network connected device via the other management domain.

7. The system of claim 1 , wherein the at least one first supported action is selected from a group of supported actions consisting of: retrieve a file from storage of a device, store a file on storage of a device, delete a file from storage of a device, execute a textual executable software object, execute a binary executable software object, and modify a hardware configuration;

wherein the at least one second supported action is selected from the group of supported actions; and

wherein the at least one action is selected from the group of supported actions.

8. The system of claim 1 , wherein the at least one hardware processor is adapted for identifying the first supported action supported via the other management domain and the second supported action supported via the management domain allowing computing the domain device identifier.

9. The system of claim 1 , further comprising at least one digital communication network interface connected to the at least one hardware processor; and

wherein the at least one hardware processor is adapted for instructing execution on the network connected device via the at least one digital communication network interface; and

wherein the at least one hardware processor is adapted for communicating with the domain administrator via the at least one digital communication network interface.

10. The system of claim 1 , wherein the at least one hardware processor is further adapted for producing, for managing the plurality of network connected devices, a plurality of unique device descriptors, each describing one of the plurality of network connected devices, by:

for each of a plurality of device descriptors, each device descriptor describing one of the plurality of network connected devices, each device descriptor having one or more domain device identifiers, each identifier associating the device descriptor with one of the plurality of management domains, and each device descriptor having a plurality of supported actions, each of the plurality of supported actions supported by the respective network connected device described thereby via one of the plurality of management domains:

for each of the plurality of management domains not associated with the device descriptor:

generating an instruction to execute on the respective network connected device described by the device descriptor a domain identification query according to the descriptor's plurality of supported actions;

determining a new domain device identifier in at least one message received from the respective network connected device in response to the respective network connected device executing the domain identification query according to the descriptor's plurality of supported actions;

identifying in the plurality of device descriptors a second device descriptor having a domain device identifier equal to the new domain device identifier; and

reducing an amount of device descriptors in the plurality of device descriptors describing the network connected device by merging the device descriptor with the second device descriptor.

11. The system of claim 10 , wherein the at least one first supported action is one of the plurality of supported actions of the respective device descriptor of the plurality of device descriptors describing the network connected device.

12. A method for managing network connected devices, comprising:

performing on one of a plurality of network connected devices a management operation in a first management domain of a plurality of management domains by:

computing a domain device identifier to associate the network connected device with the first management domain, comprising:

executing on the network connected device a first operation according to a first supported action, supported by the network connected device via a second management domain of the plurality of management domains and not supported via the first management domain, wherein the second management domain is different than the first management domain, and at least one of:

communicating with a domain administrator of the first management domain; and

executing on the network connected device a second operation according to a second supported action, supported by the network connected device via the first management domain of the plurality of management domains; and

performing the management operation by instructing execution on the network connected device of at least one operation according to a supported action, where the supported action is supported by the network connected device via the first management domain of the plurality of management domains.

13. A software program product for data retrieval, comprising:

a non-transitory computer readable storage medium;

program instructions for: performing on one of a plurality of network connected devices a management operation in a first management domain of a plurality of management domains by:

computing a domain device identifier to associate the network connected device with the first management domain, comprising:

executing on the network connected device a first operation according to a first supported action, supported by the network connected device via a second management domain of the plurality of management domains and not supported via the first management domain, wherein the second management domain is different than the first management domain, and at least one of:

communicating with a domain administrator of the first management domain; and

executing on the network connected device a second operation according to a second supported action, supported by the network connected device via the first management domain of the plurality of management domains; and

performing the management operation by instructing execution on the network connected device of at least one operation according to a supported action, where the supported action is supported by the network connected device via the first management domain of the plurality of management domains;

wherein the program instructions are executed by at least one computerized processor from the non-transitory computer readable storage medium.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 18, 2021
From: BARTOV, AVIDOR; WEISS, ITAY; SHUR, OFRI; SYSMAN, DEAN; UR, SHMUEL
To: AXONIUS SOLUTIONS LTD.
Reel/Frame 056581/0643 →
Continuity (3)
Continuation 16861253 · Apr 29, 2020
Continuation 16150312 · Oct 3, 2018
Related Publication 20210306298A1 · Sep 30, 2021