Granted Patent B2

US 11,182,114 · App. 17/001,248 · Granted Nov 23, 2021

Inventor: Marc E. Mosko (Santa Cruz, CA)

Assignee: Palo Alto Research Center Incorporated

G06F3/1226G06F3/1204G06F3/1231H04L61/103G06F3/1284H04L61/6022

Abstract

Claims (96)

1. A computer-implemented method for facilitating device discovery, the method comprising:

detecting, by a computing device, a first message which is broadcast from a source device based on a network communication protocol;

determining a classification which indicates a type for the source device based on a Media Access Control (MAC) address of the source device extracted from the first message,

wherein detecting the first message is further based on a link broadcast which allows the computing device to:

obtain a link-local address or a discovery gateway; and

use the obtained link-local address or discovery gateway to extract the MAC address of the source device;

generating a second message which indicates the MAC address, an Internet Protocol (IP) address of the source device obtained based on the first message, and the classification;

sending the second message to a device management system, which causes the device management system to add the source device as a managed device; and

enhancing device discovery by eliminating a direct scan of all devices on a sub-network by the device management system for devices of a same type as the type for the source device.

2. The method of claim 1 , wherein in response to determining that the network communication protocol is an Address Resolution Protocol (ARP), the method further comprises:

extracting from the first message the MAC address and the IP address of the source device; and

storing, in a data structure, the MAC address, the IP address, and the classification of the source device.

3. The method of claim 1 , wherein in response to determining that the network communication protocol is a Dynamic Host Configuration Protocol (DHCP) and subsequent to determining the classification, the method further comprises:

extracting from the first message the MAC address of the source device;

generating a reverse Address Resolution Protocol (ARP) packet which includes a destination MAC address which is the MAC address of the source device, and further includes a query for the IP address of the source device;

in response to transmitting the reverse ARP packet to the source device, obtaining the IP address of the source device; and

storing, in a data structure, the MAC address, the obtained IP address, and the classification of the source device.

4. The method of claim 1 , wherein detecting the first message is further based on:

a rendezvous protocol which allows the computing device to determine the classification with a high level of confidence.

5. The method of claim 1 , wherein determining the classification which indicates the type for the source device is based on an organizationally unique identifier (OUI) extracted from the MAC address of the source device, and wherein the method further comprises:

learning classifications for OUIs by:

reporting all learned OUIs to the device management system; and

receiving feedback from the device management system which indicates one or more of:

a corresponding classification for a respective OUI;

a first list of OUIs which are to be classified as a same type as the type for the source device;

a second list of OUIs which are not to be classified as the same type as the type for the source device; and

a third list of OUIs which are to remain unclassified.

6. The method of claim 1 , further comprising:

improving the classification by sending a local query to the source device based on the MAC address, which involves one or more of:

connecting to a Line Printer Remote (LPR) protocol port;

connecting to an Internet Printing Protocol (IPP) port;

sending a Simple Network Management Protocol (SNMP) query;

querying a configuration for an Internet Printing Protocol (IPP); and

in response to sending a HyperText Transfer Protocol (HTTP) request, analyzing headers of a responsive HTTP packet,

wherein the second message further indicates a reason for the classification, and wherein the reason is based on a result of sending the local query.

7. The method of claim 1 , wherein the second message further indicates one or more of:

an identifier for the computing device;

a time associated with generating the second message; and

a confidence rating which indicates a level of certainty that the classification of the source device is accurate.

8. The method of claim 1 , wherein the source device is a printer, wherein the device management system is a printer management system, and wherein the computing device is a network probe device or another printer managed by the printer management system.

9. The method of claim 1 , further comprising:

storing, in a data structure, an entry which includes the MAC address, the IP address, and the classification of the source device,

wherein the MAC address is used as a key to search entries in the data structure.

10. The method of claim 1 , further comprising:

receiving, by the device management system, the second message; and

generating, by the device management system, a configuration file destined for the source device,

wherein adding the source device as a managed device is in response to confirming, by the device management system, the source device based on the generated configuration file.

11. A computer system for facilitating device discovery, the computer system comprising:

a processor; and

a storage device storing instructions that when executed by the processor cause the processor to perform a method, the method comprising:

detecting, by the computer system, a first message which is broadcast from a source device based on a network communication protocol;

determining a classification which indicates a type for the source device based on a Media Access Control (MAC) address of the source device extracted from the first message,

wherein detecting the first message is further based on a link broadcast which allows the computer system to:

obtain a link-local address or a discovery gateway; and

use the obtained link-local address or discovery gateway to extract the MAC address of the source device;

generating a second message which indicates the MAC address, an Internet Protocol (IP) address of the source device obtained based on the first message, and the classification;

sending the second message to a device management system, which causes the device management system to add the source device as a managed device; and

enhancing device discovery by eliminating a direct scan of all devices on a sub-network by the device management system for devices of a same type as the type for the source device.

12. The computer system of claim 11 , wherein in response to determining that the network communication protocol is an Address Resolution Protocol (ARP), the method further comprises:

extracting from the first message the MAC address and the IP address of the source device; and

storing, in a data structure, the MAC address, the IP address, and the classification of the source device.

13. The computer system of claim 11 , wherein in response to determining that the network communication protocol is a Dynamic Host Configuration Protocol (DHCP) and subsequent to determining the classification, the method further comprises:

extracting from the first message the MAC address of the source device;

generating a reverse Address Resolution Protocol (ARP) packet which includes a destination MAC address which is the MAC address of the source device, and further includes a query for the IP address of the source device;

in response to transmitting the reverse ARP packet to the source device, obtaining the IP address of the source device; and

storing, in a data structure, the MAC address, the obtained IP address, and the classification of the source device.

14. The computer system of claim 11 , wherein detecting the first message is further based on:

a rendezvous protocol which allows the computer system to determine the classification with a high level of confidence.

15. The computer system of claim 11 , wherein determining the classification which indicates the type for the source device is based on an organizationally unique identifier (OUI) extracted from the MAC address of the source device, and wherein the method further comprises:

learning classifications for OUIs by:

reporting all learned OUIs to the device management system; and

receiving feedback from the device management system which indicates one or more of:

a corresponding classification for a respective OUI;

a first list of OUIs which are to be classified as a same type as the type for the source device;

a second list of OUIs which are not to be classified as the same type as the type for the source device; and

a third list of OUIs which are to remain unclassified.

16. The computer system of claim 11 , wherein the method further comprises:

improving the classification by sending a local query to the source device based on the MAC address, which involves one or more of:

connecting to a Line Printer Remote (LPR) protocol port;

connecting to an Internet Printing Protocol (IPP) port;

sending a Simple Network Management Protocol (SNMP) query;

querying a configuration for an Internet Printing Protocol (IPP); and

in response to sending a HyperText Transfer Protocol (HTTP) request, analyzing headers of a responsive HTTP packet,

wherein the second message further indicates a reason for the classification, and wherein the reason is based on a result of sending the local query.

17. The computer system of claim 11 , wherein the second message further indicates one or more of:

an identifier for the computer system;

a time associated with generating the second message; and

a confidence rating which indicates a level of certainty that the classification of the source device is accurate.

18. The computer system of claim 11 , wherein the source device is a printer, wherein the device management system is a printer management system, and wherein the computer system is a network probe device or another printer managed by the printer management system.

19. The computer system of claim 11 , wherein the method further comprises:

storing, in a data structure, an entry which includes the MAC address, the IP address, and the classification of the source device,

wherein the MAC address is used as a key to search entries in the data structure.

20. The computer system of claim 11 , wherein the method further comprises:

receiving, by the device management system, the second message; and

generating, by the device management system, a configuration file destined for the source device,

wherein adding the source device as a managed device is in response to confirming, by the device management system, the source device based on the generated configuration file.

Assignments (9)

Continuity (2)