Granted Patent B1

US 12,450,329 · App. 18/753,250 · Granted Oct 21, 2025

Inventors: Gabriel Torres (Boulder, CO); Ernie Aguilar (Austin, TX); Wael Barakat (San Francisco, CA); Eli Peer (San Carlos, CA); David Gal (Oakland, CA); Pierre Gavaret (Novato, CA); Matthew Basham (Oakland, CA)

Assignee: Samsara Inc.

G06F21/44G06F8/65G06F13/10

Abstract

Claims (32)

1. A computerized method, performed by a computing system configured as a central and having one or more hardware computer processors and one or more computer readable storage mediums storing software instructions executable by the computing system, the computerized method comprising:

receiving a broadcast packet from a peripheral;

determining whether a cache comprises authorization information for the peripheral indicating that bi-directional connection between the central and the peripheral is authorized, wherein the cache comprises authorization information received from a backend;

based on determining that the cache does not include authorization information for the peripheral, sending a request to the backend to determine whether the central is authorized to connect to the peripheral, wherein the request includes an encrypted device identifier associated with the peripheral;

receiving a response from the backend indicating whether the central is authorized to connect to the peripheral; and

in response to the response indicating that the central is authorized to connect to the peripheral, establishing a bi-directional connection with the peripheral.

2. The computerized method of claim 1 , wherein the bi-directional connection is usable to allow the central to at least one of:

provide configuration settings to the peripheral, or

update firmware of the peripheral.

3. The computerized method of claim 1 , wherein the backend is configured to decrypt the encrypted device identifier and compare the decrypted device identifier to an allow list maintained by the backend.

4. The computerized method of claim 3 , wherein the central is indicated as authorized to connect to the peripheral in response to the decrypted device identifier being on the allow list.

5. The computerized method of claim 1 further comprising:

purging older entries from the cache in a first-in-first-out manner when the cache reaches a predetermined size.

6. The computerized method of claim 1 , further comprising clearing the cache based on a predetermined interval.

7. The computerized method of claim 1 , wherein the encrypted device identifier is encrypted based at least in part on a public encryption key of the backend, and wherein the encrypted device identifier is decryptable by the backend but not the central.

8. The computerized method of claim 1 , wherein the response from the backend includes information for use in establishing the bi-directional connection between the central and the peripheral.

9. The computerized method of claim 1 , wherein the peripheral is a newly manufactured peripheral.

10. The computerized method of claim 1 , wherein the broadcast packet is a first broadcast packet received by the central from the peripheral.

11. The computerized method of claim 1 , wherein a first endpoint of the backend that receives requests for connection authorizations from centrals is different from a second endpoint of the backend that received location information from centrals.

12. A computerized method, performed by a computing system configured as a central and having one or more hardware computer processors and one or more computer readable storage mediums storing software instructions executable by the computing system, the computerized method comprising:

receiving a broadcast packet from a peripheral;

determining whether a cache comprises authorization information for the peripheral indicating that bi-directional connection between the central and the peripheral is authorized, wherein the cache comprises authorization information received from a backend;

based on determining that the cache does not include authorization information for the peripheral, sending a request to the backend to determine whether the central is authorized to generate observations associated with the peripheral, wherein the request includes an encrypted device identifier associated with the peripheral;

receiving a response from the backend indicating whether the central is authorized to generate observations associated with the peripheral; and

in response to the response indicating that the central is authorized to generate observations associated with the peripheral:

generating an observation associated with the peripheral and based on the broadcast packet received from the peripheral; and

sending the observation to the backend.

13. The computerized method of claim 12 , wherein the backend is configured to decrypt the encrypted device identifier and compare the decrypted device identifier to an allow list maintained by the backend.

14. The computerized method of claim 13 , wherein the central is indicated as authorized to generate observations associated with the peripheral in response to the decrypted device identifier being on the allow list.

15. The computerized method of claim 12 , further comprising:

purging older entries from the cache in a first-in-first-out manner when the cache reaches a predetermined size.

16. The computerized method of claim 12 , further comprising clearing the cache based on a predetermined interval.

Assignments (1)

Continuity (2)

References Cited (400)

Cited By (9)

US 12,565,143 US 12,621,184 US 12,630,050 US 12,646,402 US 12,651,529 US 12,662,152 US 12,671,464 US 12,675,419 US 12,701,004