Encryption deployment discovery
AssigneeFornetix LLC
InventorsAravind Babu Thunuguntla, Jonathan Brant Mentzell, James M. Smith, Joseph Brand
Life of this patent
Estimating the term…
Abstract
Apparatuses and methods are described herein discovering and managing key information, including, but not limited to, obtaining the key information associated with at least one segment, storing the key information, and at least one of generating at least one encryption report based on the key information, exporting the key information, or orchestrating keys based on the key information. In some embodiments, obtaining the key information includes at least interrogating encryption assets associated with at least one segment for key information, and receiving the key information from the encryption assets associated with the at least one segment.
Claims16
A method for discovering key information, comprising:
- interrogating at least one segment for key information associated with encryption keys corresponding to each ones of encryption assets of the at least one segment;
- receiving output data including the key information associated with the encryption keys from the at least one segment in a network mapping format as a result of the interrogating;
- extracting the key information associated with the encryption keys from the output data;
- storing the key information;
- and
- performing a key management activity based on the stored key information;
- wherein the key information comprises at least one of:
- a device identifier, device location, key type, key origin, key length, or key strength;
- and
- wherein the network mapping format is a Network Mapper (NMAP) format, and the key information associated with the encryption keys is extracted within a data layer of the output data in the NMAP format.
A non-transitory computer-readable medium containing processor-readable instructions such that, when executed, cause a processor to perform a method for discovering key information, the method comprising:
- interrogating at least one segment for key information associated with encryption keys corresponding to each ones of encryption assets of the at least one segment;
- receiving output data including the key information associated with the encryption keys from the at least one segment in a network mapping format as a result of the interrogating;
- extracting the key information associated with the encryption keys from the output data;
- storing the key information;
- and
- performing a key management activity based on the stored key information;
- wherein the key information comprises at least one of:
- a device identifier, device location, key type, key origin, key length, or key strength;
- and
- wherein the network mapping format is a Network Mapper (NMAP) format, and the key information associated with the encryption keys is extracted within a data layer of the output data in the NMAP format.
A server for discovering key information, the server comprising:
- a database;
- a processor;
- and
- memory coupled to the processor and storing computer-readable instructions that, when executed by the processor, cause the processor to:
- interrogate at least one segment for key information associated with encryption keys corresponding to each ones of encryption assets of the at least one segment;
- receive output data including the key information from the at least one segment in a network mapping format as a result of the interrogation;
- extract the key information associated with the encryption keys from the output data;
- store the key information;
- and
- perform a key management activity based on the stored key information;
- wherein the key information comprises at least one of:
- a device identifier, device location, key type, key origin, key length, or key strength;
- and
- wherein the network mapping format is a Network Mapper (NMAP) format, and the key information associated with the encryption keys is extracted within a data layer of the output data in the NMAP format.
A method for discovery and managing key information corresponding to keys used in encryption assets of at least one segment, comprising:
- obtaining output data including the key information associated with the keys corresponding to each ones of the encryption assets of the at least one segment in a network mapping format, the output data including the key information being obtained using Network Mapper (NMAP);
- extracting the key information associated with the keys within a data layer of the output data in the network mapping format, the key information comprising at least one of:
- a device identifier, device location, key type, key origin, key length, or key strength;
- storing the key information;
- and
- performing a key management activity based on the stored key information, the key management activity including at least one of:
- generating at least one encryption report based on the key information;
- exporting the key information;
- or
- orchestrating the keys based on the key information;
- wherein obtaining the output data including the key information comprises interrogating the at least one segment for the key information associated with the keys;
- and receiving the output data including the key information associated with the keys from the at least one segment in the network mapping format as a result of the interrogating.
Dependencies are inferred from the claim text.