KEY ROTATION FOR DEVICE APPLICATION AUTHENTICATION

    公开(公告)号:US20240137220A1

    公开(公告)日:2024-04-25

    申请号:US18114693

    申请日:2023-02-27

    CPC classification number: H04L9/0894 H04L9/0825

    Abstract: In various embodiments, a server stores a set of cryptographic keys associated with a client that includes a server-stored bootstrap key, a server-stored authentication key, and a server-stored proposed key. The server receives an authentication request from the client that includes a client-indicated bootstrap key, a client-indicated authentication key, and a client-indicated proposed key. The server makes a determination that the client is authenticated based in part on whether there is a match between the client-indicated authentication key and either the server-stored authentication key or the server-stored proposed key. The server provides, based on the determination, an authentication response to the client indicating that the client has been authenticated.

    Method and apparatus for providing strong mutual authentication, encryption, and integrity for constraint devices without secure storage and PKI support

    公开(公告)号:US12143492B2

    公开(公告)日:2024-11-12

    申请号:US17817422

    申请日:2022-08-04

    Abstract: A zero-touch deployment (ZTD) manager receives a first request to issue a first cryptographic token to a constrained device for establishing a communications session between the constrained device and a secured resource. The ZTD manager evaluates identity information corresponding to the constrained device and determines whether the identity information is valid. If so, the ZTD manager returns the first cryptographic token to the constrained device, where it is stored in cache memory. The ZTD manager receives a second request to obtain a second cryptographic token from the secured resource. When the second cryptographic token is provided to the secured resource, the secured resource uses this second cryptographic token to validate the first cryptographic token and to facilitate the communications session with the constrained device.

    IOT-BASED NETWORK ARCHITECTURE FOR DETECTING FAULTS USING VIBRATION MEASUREMENT DATA

    公开(公告)号:US20210133559A1

    公开(公告)日:2021-05-06

    申请号:US16672696

    申请日:2019-11-04

    Abstract: In one embodiment, a device in a network receives a machine learning encoder and decoder trained by a supervisory service. The service trains the encoder and decoder using vibration measurement data sent to the service by a plurality of devices. The device trains, based on the received encoder, a classifier to determine whether vibration measurement data is indicative of a behavioral anomaly. The device receives vibration measurement data captured by a particular set of one or more vibration sensors of a monitored system. The device evaluates, using the trained decoder, the received vibration measurement data to determine whether the data is indicative of a structural anomaly in the monitored system. The device evaluates, using the trained classifier, the received vibration measurement data to determine whether the data is indicative of a behavioral anomaly in the monitored system.

    Topology-aware addressing for reconfigurable networks

    公开(公告)号:US10164938B2

    公开(公告)日:2018-12-25

    申请号:US15254591

    申请日:2016-09-01

    Abstract: In one embodiment, an addressing agent determines a logical static IP addressing scheme for a computer network, the addressing scheme shared with an application server and defining a static mapping of IP addresses to particular types of application-based devices that are managed by the application server in particular physical locations within the computer network. The addressing agent determines a topology of the computer network indicative of application-based devices, their type, and their physical location. The addressing agent calculates a dynamic IP address for the devices based on their type and physical location as defined by the addressing scheme, and collaboratively assigns their corresponding calculated dynamic IP address. The application server can thus manage application-based devices according to whichever device of a particular type is in a particular physical location based on the addressing scheme, regardless of which particular application-based device of that particular type is in that particular physical location.

    TOPOLOGY-AWARE ADDRESSING FOR RECONFIGURABLE NETWORKS

    公开(公告)号:US20180063075A1

    公开(公告)日:2018-03-01

    申请号:US15254591

    申请日:2016-09-01

    CPC classification number: H04L61/2015 H04L41/12 H04L61/2038 H04L61/609

    Abstract: In one embodiment, an addressing agent determines a logical static IP addressing scheme for a computer network, the addressing scheme shared with an application server and defining a static mapping of IP addresses to particular types of application-based devices that are managed by the application server in particular physical locations within the computer network. The addressing agent determines a topology of the computer network indicative of application-based devices, their type, and their physical location. The addressing agent calculates a dynamic IP address for the devices based on their type and physical location as defined by the addressing scheme, and collaboratively assigns their corresponding calculated dynamic IP address. The application server can thus manage application-based devices according to whichever device of a particular type is in a particular physical location based on the addressing scheme, regardless of which particular application-based device of that particular type is in that particular physical location.

    WEB BROWSER-BASED SECURE EQUIPMENT ACCESS
    18.
    发明公开

    公开(公告)号:US20240154954A1

    公开(公告)日:2024-05-09

    申请号:US18244452

    申请日:2023-09-11

    CPC classification number: H04L63/0838

    Abstract: In some implementations, a device receives a login request from a web browser executed by a client endpoint in a first network. The device provides a one-time password to the web browser that causes the client endpoint to invoke a local handler process associated with an access service executed by the client endpoint or invoke access by the web browser to a particular uniform resource locator on the device. The device receives a remote connection request from the access service that includes the one-time password to access a target endpoint in a second network. The device configures, based on the remote connection request, a remote access connection between the client endpoint in the first network and the target endpoint in the second network.

    IoT-based network architecture for detecting faults using vibration measurement data

    公开(公告)号:US11544557B2

    公开(公告)日:2023-01-03

    申请号:US16672696

    申请日:2019-11-04

    Abstract: In one embodiment, a device in a network receives a machine learning encoder and decoder trained by a supervisory service. The service trains the encoder and decoder using vibration measurement data sent to the service by a plurality of devices. The device trains, based on the received encoder, a classifier to determine whether vibration measurement data is indicative of a behavioral anomaly. The device receives vibration measurement data captured by a particular set of one or more vibration sensors of a monitored system. The device evaluates, using the trained decoder, the received vibration measurement data to determine whether the data is indicative of a structural anomaly in the monitored system. The device evaluates, using the trained classifier, the received vibration measurement data to determine whether the data is indicative of a behavioral anomaly in the monitored system.

Patent Agency Ranking