IP Library › Granted Patent US 11,647,033
Granted Patent B2
US 11,647,033 · App. 16/690,580 · Granted May 9, 2023

Device agnostic discovery and self-healing consensus network

Inventors: Shikhar Kwatra (Durham, NC); Matthew Alzamora (Poughkeepsie, NY); Adam Lee Griffin (Dubuque, IA); Christopher Denis Hardt (Hyde Park, NY); Patricia Wynne McHann (Hernando, MS)
Assignee: International Business Machines Corporation
H04L63/1425G06N5/04G06N20/00H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,647,033
App. No.
16/690,580
Granted
May 9, 2023
Kind
B2
Abstract

A computer-implemented system and method for device discovery and recovery in a secure network comprises registering a plurality of devices, where the devices form the secure network at a location. Communication between the plurality of registered devices is enabled, and messages passed between the plurality of devices are collected. The method further comprises determining which one of the plurality of devices is a compromised device by using a consensus network that includes the plurality of devices of the secure network.

Claims (34)

1. A computer-implemented method for device discovery and recovery in a secure network comprising:

registering a plurality of devices, wherein the devices form the secure network at a location;

enabling communication between the plurality of devices;

collecting messages passed between the plurality of devices;

determining which one of the plurality of devices is a compromised device by using a consensus network that includes the plurality of devices of the secure network; and

taking an action selected from the group consisting of: a) isolating the determined compromised device from the network; and b) reloading correct software or operating system to the determined compromised device from a known secure image;

wherein:

the consensus network allows the plurality of devices in the consensus network to sense a network or device problem and vote on an issue selected from the group consisting of: whether a problem exists, which device(s) may be impacted, and what the proper corrective action to take is.

2. The method of claim 1 , wherein the messages are selected from a group consisting of a Service-oriented Architectures (SOA) protocol, a Representational State Transfer (REST) protocol, and a Message Oriented Protocol.

3. The method of claim 1 , further comprising training a machine learning system to recognize a suspect device among the plurality of devices.

4. The method of claim 1 , wherein the plurality of devices are members of a shared ledger network.

5. The method of claim 4 , wherein the shared ledger network is a blockchain network.

6. The method of claim 4 , wherein diagnostic operations are performed by other devices of the consensus network on a suspected device to make a determination of the compromised device.

7. The method of claim 1 , further comprising providing a user interface to indicate which of the plurality of devices is compromised.

8. The method of claim 1 , further comprising informing a user of a device in the secure network that is the compromised device.

9. The method of claim 1 , wherein the action is reinstalling an application or operating system on the compromised device.

10. A device in a secure network, comprising:

a processor configured to:

register a plurality of devices, wherein the devices form the secure network at a location;

enable communication between the plurality of devices;

collect messages passed between the plurality of devices;

determine which one of the plurality of devices is a compromised device by using a consensus network that includes the plurality of devices of the secure network; and

take an action selected from the group consisting of: a) isolating the determined compromised device from the network; and b) reloading correct software or operating system to the determined compromised device from a known secure image;

wherein:

the consensus network allows the plurality of devices in the consensus network to sense a network or device problem and vote on an issue selected from the group consisting of: whether a problem exists, which device(s) may be impacted, and what the proper corrective action to take is.

11. The device of claim 10 , further comprising training a machine learning system to recognize a suspect device among the plurality of devices.

12. The device of claim 10 , wherein the plurality of devices are members of a blockchain network.

13. The device of claim 12 , wherein diagnostic operations are performed by other devices of the consensus network on a suspected device to make a determination of the compromised device.

14. The device of claim 10 , wherein the processor is further configured to create display data that informs a user of a device in the secure network that is the compromised device.

15. A computer program product for a device in a secure network, the computer program product comprising a non-transitory computer readable storage medium having computer-readable program code embodied therewith to, when executed on a processor:

register a plurality of devices, wherein the devices form the secure network at a location; enable communication between the plurality of devices;

collect messages passed between the plurality of devices; and determine which one of the plurality of devices is a compromised device by using a consensus network that includes the plurality of devices of the secure network, take an action selected from the group consisting of: a) isolating the determined compromised device from the network; and b) reloading correct software or operating system to the determined compromised device from a known secure image, wherein the consensus network allows the plurality of devices in the consensus network to sense a network or device problem and vote on an issue selected from the group consisting of: whether a problem exists, which device(s) may be impacted, and what the proper corrective action to take is.

16. The computer program product of claim 15 , wherein the code further causes the processor to:

continuously identify current location information of the user device and user route location information of a user route, by receiving, via at least one of the SOSIs, information from a VA selected from the group consisting the user device VA, the vehicle device VA, and the stop VA.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 21, 2019
From: KWATRA, SHIKHAR; ALZAMORA, MATTHEW; GRIFFIN, ADAM LEE; HARDT, CHRISTOPHER DENIS; MCHANN, PATRICIA WYNNE
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 051076/0356 →
Continuity (1)
Related Publication 20210160261A1 · May 27, 2021