Granted Patent B2

US 12,307,239 · App. 18/391,377 · Granted May 20, 2025

Inventors: Christopher J. Rouland (Nashville, TN); Earle W. Ady (Jackson, WY); Trent Altman (Carlsbad, CA)

Assignee: PHOSPHORUS CYBERSECURITY INC.

G06F8/654G06F8/71G06F21/572G16Y30/00H04L9/0637H04L9/3236H04L67/34H04L9/50

Abstract

Claims (56)

1. A system comprising:

a data store comprising a data mapping of a plurality of credentials to a plurality of internet of thing (IoT) devices;

a plugin configured to be installed on an external system; and

at least one computing device in communication with the data store, the at least one computing device being configured to at least:

receive, from the plugin:

a security component of a particular credential of the plurality of credentials, and

a request to change the security component, wherein the request is initiated by the external system;

identify a particular IoT device of the plurality of IoT devices corresponding to the particular credential according to the data mapping in the data store;

determine a credential change profile corresponding to the particular IoT device, wherein the credential change profile specifies at least one protocol supported by the particular IoT device;

perform an authentication with the particular IoT device using the security component;

determine that the particular IoT device is available; and

initiate changing of the particular credential for the particular IoT device over a network based on the request.

2. The system of claim 1 , wherein the external system comprises a privileged asset management (PAM) system.

3. The system of claim 1 , wherein the plurality of credentials is generated by the external system.

4. The system of claim 1 , wherein the data store further comprises credential data.

5. The system of claim 4 , wherein the credential data comprises one or more of: usernames, passwords, signatures, public-private key pairs, and default versions thereof.

6. The system of claim 4 , wherein the credential data comprises one or more identifiers associated with device-identifying information for the particular IoT device.

7. The system of claim 4 , wherein the plugin determines rules for changing the particular credential based on the credential data.

8. The system of claim 1 , wherein the plugin is configured to send the request to change the security component to the at least one computing device after the external system initiates an update of the security component.

9. The system of claim 1 , wherein the at least one computing device is further configured to register the plurality of credentials with the external system via the plugin.

10. The system of claim 1 , wherein the at least one computing device is further configured to:

determine a plurality of sets of password limitations, where each set of password limitations corresponds to a respective one of the plurality of IoT devices;

generate a plurality of password policies for the plurality of IoT devices; and

determine a respective password policy of the plurality of password policies for each of the plurality of credentials in the external system according to the data mapping.

11. The system of claim 1 , wherein the at least one computing device is further configured to:

determine that the particular IoT device is unavailable based at least in part on the changing of the particular credential failing;

store an incomplete credential change in the data store; and

in response to determining the particular IoT device is subsequently available, reinitiate changing of the credential for the particular IoT device over the network based on the credential change profile.

12. A method comprising:

receiving, via at least one computing device in communication with a data store comprising a data mapping of a plurality of credentials to a plurality of internet of thing (IoT) devices, from a plugin configured to be installed on an external system:

a security component of a particular credential of the plurality of credentials, and

a request to change the security component, wherein the request is initiated by the external system;

identifying, via the at least one computing device, a particular IoT device of the plurality of IoT devices corresponding to the particular credential according to the data mapping in the data store;

determining a credential change profile corresponding to the particular IoT device, wherein the credential change profile specifies at least one protocol supported by the particular IoT device;

performing, via the at least one computing device, an authentication with the particular IoT device using the security component;

determining, via the at least one computing device, that the particular IoT device is available; and

initiating, via the at least one computing device, changing of the particular credential for the particular IoT device over a network based on the request.

13. The method of claim 12 , further comprising: sending, via the plugin, the request to change the security component to the at least one computing device after the external system initiates an update of the security component.

14. The method of claim 12 , further comprising: registering, via the plugin, the plurality of credentials with the external system.

15. The method of claim 12 , further comprising:

determining, via the at least one computing device, a plurality of sets of password limitations, where each set of password limitations corresponds to a respective one of the plurality of IoT devices;

generating, via the at least one computing device, a plurality of password policies for the plurality of IoT devices; and

determining, via the at least one computing device, a respective password policy of the plurality of password policies for each of the plurality of credentials in the external system according to the data mapping.

16. The method of claim 12 , further comprising:

determining, via the at least one computing device, that the particular IoT device is unavailable based at least in part on the changing of the particular credential failing; store an incomplete credential change in the data store; and

in response to determining the particular IoT device is subsequently available, reinitiating, via the at least one computing device, changing of the credential for the particular IoT device over the network based on the credential change profile.

17. The method of claim 12 , wherein initiating changing of the particular credential for the particular IoT device is performed via the at least one protocol.

18. A non-transitory computer-readable medium embodying a program that, when executed by at least one computing device in communication with a data store comprising a data mapping of a plurality of credentials to a plurality of internet of thing (IT) devices, causes the at least one computing device to at least:

receive, from a plugin configured to be installed on an external system:

a security component of a particular credential of the plurality of credentials, and

a request to change the security component, wherein the request is initiated by the external system;

identify a particular IoT device of the plurality of IoT devices corresponding to the particular credential according to the data mapping in the data store;

determine a credential change profile corresponding to the particular IoT device, wherein the credential change profile specifies at least one protocol supported by the particular IoT device;

perform an authentication with the particular IoT device using the security component;

determine that the particular IT device is available; and

initiate changing of the particular credential for the particular IoT device over a network based on the request.

Assignments (2)

Continuity (5)

References Cited (73)