Management of internet of things (IoT) by security fabric
AssigneeFortinet, Inc.
InventorsMichael Craig Woolfe, Jonathan Q. Nguyen-Duy, John Lunsford Gregory Whittle
Life of this patent
Estimating the term…
Abstract
The present invention relates to a method for managing IoT devices by a security fabric. According to one embodiment, an analyzing tier collects data of Internet of Things (IoT) devices from a plurality of data sources and abstracts profiled element baselines (PEBs) of IoT devices of the same type from the data. An executing tier retrieves the PEBs from the analyzing tier and generates security policies for IoT devices of the same type from PEBs. The executing tier controls network traffic of the IoT devices of the private network to comply with the security policies.
Claims12
A computer-implemented method, in an access point coupled to a data communication system, for improving network security on the data communication system, the method comprising:
- collecting, by an analyzing tier of a network security system of the access point, data of Internet of Things (IoT) devices from manufacturers of the IoT devices;
- abstracting, utilizing a processor of the access point, by the analyzing tier of the network security system, profiled element baselines (PEBs) of IoT devices from the data, wherein each of the PEBs includes characteristics of a same type of IoT device;
- retrieving, by an executing tier of the network security system communicatively coupled to the analyzing tier, the PEBs from the analyzing tier of the network security system, wherein the executing tier of the network security system is configured to control network traffic of one or more IoT devices of a private network;
- generating, by the executing tier of the network security system, one or more security policies for one or more IoT devices of the same type from the PEBs;
- and
- controlling, by the executing tier of the network security system, network traffic of the one or more IoT devices of the private network to comply with the one or more security policies;
- retrieving, by an adapting tier of the network security system, the PEBs from the analyzing tier of the network security system, wherein the adapting tier of the network security system is configured to collect local network environment information;
- generating, by the adapting tier of the network security system, modified PEBs by tailoring the PEBs to accommodate the local network environment;
- retrieving, by the executing tier of the network security system, the modified PEBs from the adapting tier of the network security system;
- and
- generating, by the executing tier of the network security system, the one or more security policies for the one or more IoT devices of the same type from the modified PEBs.
Dependencies are inferred from the claim text.