IP Library › Granted Patent US 11,843,577
Granted Patent B2
US 11,843,577 · App. 17/402,933 · Granted Dec 12, 2023

Fingerprinting to identify devices and applications for use in management and policy in the cloud

Inventors: Ajit Singh (Fremont, CA); Vivek Ashwin Raman (San Jose, CA); Abhinav Bansal (San Jose, CA); Thomas Evan Keiser, Jr. (Boston, MA); John H. O'Neil (Watertown, MA)
Assignee: Zscaler, Inc.
H04L61/4511G06F21/57H04L63/0272H04L63/0281H04L63/0884H04L63/20H04L67/02H04L67/10H04L67/1001H04L67/125H04L67/51H04L67/535H04L67/56H04L67/562H04L69/162H04W12/086H04W12/088H04W12/122H04L63/164H04L2101/663
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,843,577
App. No.
17/402,933
Granted
Dec 12, 2023
Kind
B2
Abstract

Systems and methods include obtaining a plurality of parameters associated with a host; determining a fingerprint of the host utilizing the plurality of parameters; and providing the fingerprint to cloud service for enrollment and management of the host in the cloud service. The cloud service can include microsegmentation of the host. The cloud service can include any of Internet access for the host and private resource access by the host.

Claims (28)

1. A non-transitory computer-readable storage medium having computer readable code stored thereon for programming at least one processor to perform steps of:

obtaining a plurality of parameters associated with a host;

determining a fingerprint of the host utilizing the plurality of parameters; and

providing the fingerprint to cloud service for enrollment and management of the host in the cloud service.

2. The non-transitory computer-readable storage medium of claim 1 , wherein the host is a user device having an agent operating thereon to perform the determining.

3. The non-transitory computer-readable storage medium of claim 1 , wherein the host is any of a server, virtual machine, and a container.

4. The non-transitory computer-readable storage medium of claim 3 , wherein the cloud service includes microsegmentation of the host.

5. The non-transitory computer-readable storage medium of claim 1 , wherein the cloud service is configured to match a unique identifier of the host with the fingerprint for the enrollment and management.

6. The non-transitory computer-readable storage medium of claim 1 , wherein the plurality of parameters are obtained through any of assembly code and operating system Application Programming Interfaces (APIs).

7. The non-transitory computer-readable storage medium of claim 1 , wherein the plurality of parameters relate to any of a processor identifier, a manufacturer serial number, a hard drive serial number, hard drive parameters, and battery.

8. The non-transitory computer-readable storage medium of claim 1 , wherein the computer readable code is further configured to program the processor to perform steps of

subsequent to the enrollment of the host in the cloud service, redetermining the fingerprint locally on the host for operation of the cloud service, such that the fingerprint is recomputed and not stored on the host.

9. The non-transitory computer-readable storage medium of claim 1 , wherein the fingerprint is determined based on a computation of the plurality of parameters that is unique for every device.

10. The non-transitory computer-readable storage medium of claim 1 , wherein the cloud service includes any of Internet access for the host and private resource access by the host.

11. A method comprising steps of:

obtaining a plurality of parameters associated with a host;

determining a fingerprint of the host utilizing the plurality of parameters; and

providing the fingerprint to cloud service for enrollment and management of the host in the cloud service.

12. The method of claim 11 , wherein the host is a user device having an agent operating thereon to perform the determining.

13. The method of claim 11 , wherein the host is any of a server, virtual machine, and a container.

14. The method of claim 13 , wherein the cloud service includes microsegmentation of the host.

15. The method of claim 11 , wherein the cloud service is configured to match a unique identifier of the host with the fingerprint for the enrollment and management.

16. The method of claim 11 , wherein the plurality of parameters are obtained through any of assembly code and operating system Application Programming Interfaces (APIs).

17. The method of claim 11 , wherein the plurality of parameters relate to any of a processor identifier, a manufacturer serial number, a hard drive serial number, hard drive parameters, and battery.

18. The method of claim 11 , wherein the steps further include

subsequent to the enrollment of the host in the cloud service, redetermining the fingerprint locally on the host for operation of the cloud service, such that the fingerprint is recomputed and not stored on the host.

19. The method of claim 11 , wherein the fingerprint is determined based on a computation of the plurality of parameters that is unique for every device.

20. The method of claim 11 , wherein the cloud service includes any of Internet access for the host and private resource access by the host.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 16, 2021
From: SINGH, AJIT; RAMAN, VIVEK ASHWIN; BANSAL, ABHINAV; KEISER, THOMAS EVAN, JR.; O'NEIL, JOHN H.
To: ZSCALER, INC.
Reel/Frame 057188/0905 →
Continuity (4)
Continuation In Part 16674111 · Nov 5, 2019
Continuation In Part 16252961 · Jan 21, 2019
Continuation 15377126 · Dec 13, 2016
Related Publication 20210377210A1 · Dec 2, 2021
Cited By (2)
US 12,470,522 US 12,549,518