IP Library Granted Patent US 12,095,625
Granted Patent B2
US 12,095,625 · App. 18/529,794 · Granted Sep 17, 2024

Passive assessment of signal relays amongst bystanders

Inventors: Victor Oppleman (Virginia Beach, VA); Zachary Kanner (Virginia Beach, VA); Eugene Antsilevich (Oakton, VA)
Assignee: PACKET FORENSICS, LLC
H04L41/12H04L45/02
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,095,625
App. No.
18/529,794
Granted
Sep 17, 2024
Kind
B2
Abstract

Techniques for discovering a network using a sensor installed in the network, where the network is communicatively coupled to an external network by a router, are presented. The techniques can include: determining, automatically and by the sensor, a network address of the router; detecting, automatically and by the sensor, a network address of a client in the network; assessing, automatically and by the sensor, that the client in the network is actively communicating on the network; communicating, by the sensor, with the network address of the router; and participating, by the sensor, in communications on the network by emulating the network address of the client and by using the network address of the router.

Claims (46)

1. A method of discovering a network using a device installed in the network without the device presenting as a new device on the network, wherein the network is communicatively coupled to an external network by a router, and wherein the external network comprises a server, the method comprising:

determining, by the device, a network address of the router;

participating, by the device, in communications on the network by emulating a network address of a first client;

determining that the first client in the network is no longer actively communicating on the network;

ceasing the participating, by the device, in the communications on the network by emulating the network address of the first client;

detecting, by the device, a network address of a second client in the network;

assessing, repeatedly, by the device, that the second client in the network is actively communicating on the network;

communicating, by the device, with the network address of the router; and

participating, by the device, in communications on the network by emulating the network address of the second client and by using the network address of the router.

2. The method of claim 1 , wherein the participating comprises receiving, by the device, instructions sent to the network address of the second client from the server.

3. The method of claim 2 , wherein the instructions comprise a code update for the device.

4. The method of claim 1 , wherein the participating comprises monitoring data in transit on the network and sending data from the network address of the second client to the server.

5. The method of claim 1 , further comprising:

maintaining a list of candidate clients on the network for address emulation; and

selecting the second client from the list of candidate clients.

6. The method of claim 5 , further comprising ranking the list of candidate clients according to desirability for emulation.

7. The method of claim 5 , further comprising pruning inactive network clients from the list of candidate clients.

8. The method of claim 1 , wherein the assessing is continuous.

9. The method of claim 1 , wherein the assessing is periodic.

10. The method of claim 1 , further comprising reevaluating automatically the network address of the router.

11. The method of claim 1 , wherein the participating in communications on the network comprises filtering content on the network.

12. The method of claim 1 , wherein the participating in communications on the network comprises modifying content in transit on the network.

13. The method of claim 1 , wherein the participating in communications on the network comprises inserting content in transit on the network.

14. A device for discovering a network by installation of the device on the network without the device presenting as a new device on the network, wherein the network is communicatively coupled to an external network by a router, and wherein the external network comprises a server, the device comprising an electronic processor and a non-transitory computer-readable medium including instructions that, when executed by the electronic processor, configure the electronic processor to perform actions comprising:

determining a network address of the router;

participating in communications on the network by emulating a network address of a first client;

determining that the first client in the network is no longer actively communicating on the network; and

ceasing the participating in the communications on the network by emulating the network address of the first client

detecting a network address of a second client in the network;

assessing, repeatedly, that the second client in the network is actively communicating on the network;

communicating with the network address of the router; and

participating in communications on the network by emulating the network address of the second client and by using the network address of the router.

15. The device of claim 14 , wherein the participating comprises receiving instructions sent to the network address of the second client from the server.

16. The device of claim 15 , wherein the instructions comprise a code update for the device.

17. The device of claim 14 , wherein the participating comprises monitoring data in transit on the network and sending data from the network address of the second client to the server.

18. The device of claim 14 , wherein the actions further comprise:

maintaining a list of candidate clients on the network for address emulation; and

selecting the second client from the list of candidate clients.

19. The device of claim 18 , wherein the actions further comprise comprising ranking the list of candidate clients according to desirability for emulation.

20. The device of claim 18 , wherein the actions further comprise pruning inactive network clients from the list of candidate clients.

21. The device of claim 14 , wherein the assessing is continuous.

22. The device of claim 14 , wherein the assessing is periodic.

23. The device of claim 14 , wherein the actions further comprise reevaluating automatically the network address of the router.

24. The device of claim 14 , wherein the participating in communications on the network comprises filtering content on the network.

25. The device of claim 14 , wherein the participating in communications on the network comprises modifying content in transit on the network.

26. The device of claim 14 , wherein the participating in communications on the network comprises inserting content in transit on the network.

Assignments (2)
SECURITY INTEREST Recorded Jul 28, 2025
From: PACKET FORENSICS, LLC
To: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
Reel/Frame 071846/0604 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 5, 2023
From: OPPLEMAN, VICTOR; KANNER, ZACHARY; ANTSILEVICH, EUGENE
To: PACKET FORENSICS, LLC
Reel/Frame 065770/0272 →
Continuity (2)
Continuation 18056891 · Nov 18, 2022
Related Publication 20240171470A1 · May 23, 2024