# US 10,362,037 B2 · Private cloud control > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,362,037 B2 - Document ID: US10362037B2 - Status: Granted - Kind: B2 - Application number: 15/703,913 - Filed: 2017-09-13 - Published: 2018-01-04 - Granted: 2019-07-23 - Earliest claimed: 2015-01-16 - Assignees: ZingBox, Ltd. - Applicants: ZingBox, Ltd. - Inventors: Xu Zou; Jianlin Zeng; Mei Wang - Web page: https://patentgrep.com/patent/US10362037B2 ## CPC - H04L 63/102: {Entity profiles} - H04L 63/0263: {Rule management} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 63/1433: {Vulnerability analysis} - H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Management of IoT devices through a private cloud. An IoT device is coupled to a gateway. A request from the IoT device to connect to a private cloud, wherein the private cloud is used to manage IoT devices, is received at a private cloud control center agent. An identification of the IoT device is determined. The IoT device is onboarded, using the identification, for management through the private cloud. A device profile of the IoT device is generated. The flow of data to and from the IoT device is regulated through application of IoT rules according to the device profile of the IoT device. ## Claims ### Claim 1 A method comprising: monitoring, by a private cloud control center agent that is provided between a public network and a private cloud, data transmission to or from an IoT device that is carried out through the private cloud in accordance with an IoT rule that is applied in the data transmission of the IoT device, the IoT device being connected for management thereof by the private cloud control center agent through the private cloud; detecting, by the private cloud control center agent, security-risking behavior of the IoT device at least based on the monitored data transmission to or from the IoT device; upon detecting the security-risking behavior of the IoT device, performing, by the private cloud control center agent, a remedial action for the data transmission to or from the IoT device; generating or updating the IoT rule based on an input from an external device, wherein the IoT rule includes at least one type of data that is allowed to be transmitted by the IoT device, an identification or type of IoT device to which data is allowed to be transmitted from the IoT device, an amount of bandwidth the IoT device is allowed to use, and an amount of data the IoT device is allowed to transmit or receive. ### Claim 2 (depends on 1) The method of claim 1, further comprising maintaining, by the private cloud control center agent, IoT device data for the IoT device, the IoT device data describing normal behavior of the IoT device, wherein the security-risking behavior of the IoT device is detected based on comparison of a reference behavior with the monitored data transmission to or from the IoT device. ### Claim 3 (depends on 1) The method of claim 1, further comprising maintaining, by the private cloud control center agent, IoT device data for the IoT device, the IoT device data describing normal behavior of the IoT device, wherein the security-risking behavior of the IoT device is detected based on comparison of a reference behavior with the monitored data transmission to or from the IoT device, and the reference behavior is one or an applicable combination of past behavior of the IoT device, behavior of other IoT devices managed by the private cloud control center agent, behavior of other IoT devices of the same type, and IoT devices used by users other than a user of the IoT device. ### Claim 4 (depends on 1) The method of claim 1, further comprising maintaining, by the private cloud control center agent, IoT device data for the IoT device, the IoT device data describing normal behavior of the IoT device, wherein the security-risking behavior of the IoT device is detected based on comparison of a reference behavior with the monitored data transmission to or from the IoT device, and the comparison includes comparison of at least one of a destination of data transmitted through the data transmission, timing of the data transmission, an amount of data transmitted through the data transmission, and bytes histogram of data transmitted through the data transmission. ### Claim 5 (depends on 1) The method of claim 1, further comprising: simulating an attack of a third party device attempting to gain control of the IoT device by sending data to the IoT device; determining security-risking state of the IoT device based on a response, by the IoT device, to the data. ### Claim 6 (depends on 1) The method of claim 1, wherein the remedial action includes quarantining the IoT device. ### Claim 7 (depends on 1) The method of claim 1, wherein the remedial action includes alerting a user associated with the private cloud that the IoT device is behaving abnormally. ### Claim 8 (depends on 1) The method of claim 1, wherein the data transmission to or from the IoT device includes data transmission between the IoT device and other IoT devices managed through the private cloud. ### Claim 9 (depends on 1) The method of claim 1, wherein the data transmission to or from the IoT device includes data transmission between the IoT device and a source accessed through, at least in part, a public network. ### Claim 10 A system comprising: a private cloud control center agent provided between a public network and a private cloud and configured to: monitor data transmission to or from an IoT device that is carried out through the private cloud in accordance with an IoT rule that is applied in the data transmission of the IoT device, when the IoT device is connected for management thereof by the private cloud control center agent through the private cloud; detect security-risking behavior or state of the IoT device at least based on the monitored data transmission to or from the IoT device; upon detecting the security-risking behavior or state of the IoT device, perform a remedial action for the data transmission to or from the IoT device; generate or update the IoT rule based on an input from an external device, wherein the IoT rule includes at least one type of data that is allowed to be transmitted by the IoT device, an identification or type of IoT device to which data is allowed to be transmitted from the IoT device, an amount of bandwidth the IoT device is allowed to use, and an amount of data the IoT device is allowed to transmit or receive. ### Claim 11 (depends on 10) The system of claim 10, wherein the private cloud control center agent is further configured to maintain IoT device data for the IoT device, the IoT device data describing normal behavior of the IoT device, and detect the security-risking behavior of the IoT device based on comparison of a reference behavior with the monitored data transmission to or from the IoT device. ### Claim 12 (depends on 10) The system of claim 10, wherein the private cloud control center agent is further configured to maintain IoT device data for the IoT device, the IoT device data describing normal behavior of the IoT device, and detect the security-risking behavior of the IoT device based on comparison of a reference behavior with the monitored data transmission to or from the IoT device, and the reference behavior is one or an applicable combination of past behavior of the IoT device, behavior of other IoT devices managed by the private cloud control center agent, behavior of other IoT devices of the same type, and IoT devices used by users other than a user of the IoT device. ### Claim 13 (depends on 10) The system of claim 10, wherein the private cloud control center agent is further configured to maintain IoT device data for the IoT device, the IoT device data describing normal behavior of the IoT device, and detect the security-risking behavior of the IoT device based on comparison of a reference behavior with the monitored data transmission to or from the IoT device, and the comparison includes comparison of at least one of a destination of data transmitted through the data transmission, timing of the data transmission, an amount of data transmitted through the data transmission, and bytes histogram of data transmitted through the data transmission. ### Claim 14 (depends on 10) The system of claim 10, wherein the private cloud control center agent is further configured to simulate an attack of a third party device attempting to gain control of the IoT device by sending data to the IoT device, and determine security-risking state of the IoT device based on a response, by the IoT device, to the data. ### Claim 15 (depends on 10) The system of claim 10, wherein the remedial action includes quarantining the IoT device. ### Claim 16 (depends on 10) The system of claim 10, wherein the remedial action includes alerting a user associated with the private cloud that the IoT device is behaving abnormally. ### Claim 17 (depends on 10) The system of claim 10, wherein the data transmission to or from the IoT device includes data transmission between the IoT device and other IoT devices managed through the private cloud. ### Claim 18 (depends on 10) The system of claim 10, wherein the data transmission to or from the IoT device includes data transmission between the IoT device and a source accessed through, at least in part, a public network.