IP Library › Granted Patent US 11,683,331
Granted Patent B2
US 11,683,331 · App. 16/949,996 · Granted Jun 20, 2023

Trust scoring of network entities in networks

Inventors: Gert Grammel (Ditzingen, DE); Kieran Gerard McPeake (Belfast, GB); Kieran Dalton (Lisburn, GB)
Assignee: Juniper Networks, Inc.
H04L63/1433H04L63/1425
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,683,331
App. No.
16/949,996
Filed
Nov 23, 2020
Granted
Jun 20, 2023
Kind
B2
Examiner
SU, SARAH
Art Unit
2431
USPC
726/25
Abstract

A method to determine, by a computing system, a trust score for a network entity in a computer network, the trust score for the network entity indicating a level of trust in the network entity; and modifying, by the computing system, a traffic pattern of the computer network based on the trust score for the network entity.

Claims (49)

1. A method comprising:

determining, by a computing system, based on one or more prerequisites, a trust score for a network entity in a computer network, the trust score for the network entity indicating a level of trust in the network entity, wherein each of the one or more prerequisites is a condition that must be satisfied for the trust score for the network entity not to be a minimum value; and

modifying, by the computing system, a traffic pattern of the computer network based on the trust score for the network entity.

2. The method of claim 1 , wherein modifying the traffic pattern comprises changing, by the computing system, based on the trust score for the network entity, the traffic pattern to divert network traffic away from or direct the network traffic to the network entity.

3. The method of claim 1 , wherein the prerequisites include whether the network entity uses a certified software release and whether the network entity uses a certified hardware release.

4. The method of claim 1 , wherein determining the trust score for the network entity comprises:

determining, by the computing system, the trust score for the network entity based on one or more variable factors for the network entity, wherein each of the one or more variable factors for the network entity corresponds to a current characteristic of the network entity.

5. The method of claim 4 , wherein the variable factors include whether software of the network entity is limited to approved applications only, whether the software of the network entity is limited to a first class of applications, or whether the software of the network entity includes a second class of applications.

6. The method of claim 1 , wherein determining the trust score for the network entity comprises:

determining, by the computing system, the trust score for the network entity based on one or more reputational factors for the network entity, wherein each of the reputational factors for the network entity is a function of specified historical events involving the network entity.

7. The method of claim 6 , wherein the reputational factors include one or more of: a number of time intervals without a reset of the network entity, or a number of time intervals without a reboot of the network entity.

8. The method of claim 1 , wherein determining the trust score for the network entity comprises:

determining, by the computing system, a first sub-score based on the one or more prerequisites;

determining, by the computing system, a second sub-score based on one or more variable factors of the network entity, wherein each of the one or more variable factors corresponds to a current characteristic of the network entity;

determining, by the computing system, a third sub-score based on one or more reputational factors of the network entity, wherein each of the reputational factors is a function of specified historical events involving the network entity; and

determining, by the computing system, the trust score for the network entity based on the first sub-score, the second sub-score, and the third sub-score.

9. The method of claim 1 , wherein the network entity is a higher-order network entity that comprises a plurality of network entities, and determining the trust score for the higher-order network entity comprises aggregating trust scores for the plurality of network entities to determine the trust score for the higher-order network entity.

10. The method of claim 1 , wherein the method further comprises modifying, by the computing system, a testing pattern for the network entity based on the trust score for the network entity.

11. A computing system comprising:

one or more processors comprising processing circuitry configured to:

determine, based on one or more prerequisites, a trust score for a network entity in a computer network, the trust score for the network entity indicating a level of trust in the network entity, wherein each of the one or more prerequisites is a condition that must be satisfied for the trust score for the network entity not to be a minimum value; and

modify a traffic pattern of the computer network based on the trust score for the network entity; and

one or more storage devices configured to store the trust score for the network entity.

12. The computing system of claim 11 , wherein the one or more processors are configured such that, as part of modifying the traffic pattern, the one or more processors change, based on the trust score for the network entity, the traffic pattern to divert network traffic away from the network entity.

13. The computing system of claim 11 , wherein the prerequisites include whether the network entity uses a certified software release and whether the network entity uses a certified hardware release.

14. The computing system of claim 11 , wherein the one or more processors are configured such that, as part of determining the trust score for the network entity, the one or more processors:

determine the trust score for the network entity based on one or more variable factors for the network entity, wherein each of the one or more variable factors for the network entity corresponds to a current characteristic of the network entity.

15. The computing system of claim 11 , wherein the one or more processors are configured such that, as part of determining the trust score for the network entity, the one or more processors:

determine the trust score for the network entity based on one or more reputational factors for the network entity, wherein each of the reputational factors for the network entity is a function of specified historical events involving the network entity.

16. The computing system of claim 11 , wherein the one or more processors are configured such that, as part of determining the trust score for the network entity, the one or more processors:

determine a first sub-score based on the one or more prerequisites;

determine a second sub-score based on one or more variable factors of the network entity, wherein each of the one or more variable factors corresponds to a current characteristic of the network entity;

determine a third sub-score based on one or more reputational factors of the network entity, wherein each of the reputational factors is a function of specified historical events involving the network entity; and

determine the trust score for the network entity based on the first sub-score, the second sub-score, and the third sub-score.

17. The computing system of claim 11 , wherein the network entity is a higher-order network entity that comprises a plurality of network entities, and the one or more processors are configured to aggregate trust scores for the plurality of network entities to determine the trust score for the higher-order network entity.

18. A non-transitory computer-readable storage medium comprising instructions that, when executed, cause one or more programmable processors to:

determine, based on one or more prerequisites, a trust score for a network entity in a computer network, the trust score for the network entity indicating a level of trust in the network entity, wherein each of the one or more prerequisites is a condition that must be satisfied for the trust score for the network entity not to be a minimum value; and

modify a traffic pattern of the computer network based on the trust score for the network entity.

19. A method comprising:

determining, by a computing system, a trust score for a network entity in a computer network, the trust score for the network entity indicating a level of trust in the network entity, wherein determining the trust score for the network entity comprises determining the trust score for the network entity based on one or more reputational factors for the network entity, wherein each of the reputational factors for the network entity is a function of specified historical events involving the network entity, and the reputational factors include one or more of: a number of time intervals without a reset of the network entity, or a number of time intervals without a reboot of the network entity; and

modifying, by the computing system, a traffic pattern of the computer network based on the trust score for the network entity.

20. A method comprising:

determining, by a computing system, a trust score for a network entity in a computer network, the trust score for the network entity indicating a level of trust in the network entity, wherein the network entity is a higher-order network entity that comprises a plurality of network entities, and determining the trust score for the higher-order network entity comprises aggregating trust scores for the plurality of network entities to determine the trust score for the higher-order network entity; and

modifying, by the computing system, a traffic pattern of the computer network based on the trust score for the network entity.

21. A computing system comprising:

one or more processors comprising processing circuitry configured to:

determine a trust score for a network entity in a computer network, the trust score for the network entity indicating a level of trust in the network entity, wherein the network entity is a higher-order network entity that comprises a plurality of network entities, and the one or more processors are configured to aggregate trust scores for the plurality of network entities to determine the trust score for the higher-order network entity; and

modify a traffic pattern of the computer network based on the trust score for the network entity; and

one or more storage devices configured to store the trust score for the network entity.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 23, 2020
From: GRAMMEL, GERT; MCPEAKE, KIERAN GERARD; DALTON, KIERAN
To: JUNIPER NETWORKS, INC.
Reel/Frame 054450/0861 →
Continuity (1)
Related Publication 20220166788A1 · May 26, 2022
Cited By (4)
US 12,355,803 US 12,375,496 US 12,587,569 US 12,701,123