# US 11,310,660 B2 · Identifying network risk

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,310,660 B2
- Document ID: US11310660B2
- Status: Granted
- Kind: B2
- Application number: 16/695,304
- Filed: 2019-11-26
- Published: 2021-05-27
- Granted: 2022-04-19
- Earliest claimed: 2019-11-26
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Ashkan Vila; Volker Vogeley; Artemiy Aleksandrovich Solyakov
- Web page: https://patentgrep.com/patent/US11310660B2

## CPC

- H04W 12/009: {specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks}
- H04W 12/66: {Trust-dependent, e.g. using trust scores or trust relationships}
- H04L 63/1433: {Vulnerability analysis}
- H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)}
- H04W 12/08: Access security
- H04W 12/67: Risk-dependent, e.g. selecting a security level depending on risk profiles
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Embodiments are disclosed for a method for identifying network risk. The method includes determining that a computing device has created a new connection to a network. Additionally, the method includes determining the public internet protocol (public IP) address of the exit point used by the network. Further, the method includes determining a reputation rating of the network based on the public IP address of the exit point. The method also includes providing a notification indicating the reputation rating of the network.

## Claims

### Claim 1

A computer-implemented method for identifying network risk, comprising:
determining that a computing device has created a new connection to a network;
determining a public internet protocol (public IP) address of an exit point used by the network;
determining a reputation rating of the network based on the public IP address of the exit point;
generating a risk report comprising the reputation rating, and a selectable interface that terminates the new connection to the network in response to a selection of the selectable interface; and
terminating the new connection to the network based on the reputation and a predetermined reputation threshold.

### Claim 2 (depends on 1)

The method of claim 1, wherein determining the reputation rating of the network comprises requesting the reputation rating from an IP reputation service.

### Claim 3 (depends on 2)

The method of claim 2, wherein requesting the reputation rating comprises providing the public IP address of the exit point for the IP reputation service.

### Claim 4 (depends on 1)

The method of claim 1, wherein the network is a third-party network that provides access to a wide area network (WAN).

### Claim 5 (depends on 4)

The method of claim 4, wherein the WAN is the Internet.

### Claim 6 (depends on 1)

The method of claim 1, wherein determining that the computing device has created the new connection to the network comprises probing the public IP address of the exit point using an IP lookup service.

### Claim 7 (depends on 1)

The method of claim 1, wherein determining the public IP address of the exit point comprises requesting the exit point public IP address from an IP lookup service.

### Claim 8

A computer program product comprising program instructions stored on a computer readable storage medium, wherein the computer readable storage medium is not a transitory signal per se, the program instructions executable by a processor to cause the processor to perform a method comprising:
determining that a computing device has created a new connection to a network;
determining a public internet protocol (public IP) address of an exit point used by the network;
determining a reputation rating of the network based on the public IP address of the exit point;
generating a risk report comprising the reputation rating, and a selectable interface that terminates the new connection to the network in response to a selection of the selectable interface; and
terminating the new connection to the network based on the reputation and a predetermined reputation threshold.

### Claim 9 (depends on 8)

The computer program product of claim 8, wherein determining the reputation rating of the network comprises requesting the reputation rating from an IP reputation service.

### Claim 10 (depends on 9)

The computer program product of claim 9, wherein requesting the reputation rating comprises providing the public IP address of the exit point for the IP reputation service.

### Claim 11 (depends on 8)

The computer program product of claim 8, wherein the network is a third-party network that provides access to a wide area network (WAN).

### Claim 12 (depends on 11)

The computer program product of claim 11, wherein the WAN is the Internet.

### Claim 13 (depends on 8)

The computer program product of claim 8, wherein determining that the computing device has created the new connection to the network comprises probing the public IP address of the exit point using an IP lookup service.

### Claim 14 (depends on 8)

The computer program product of claim 8, wherein determining the public IP address of the exit point comprises requesting the exit point public IP address from an IP lookup service.

### Claim 15

A system comprising:
a computer processing circuit; and
a computer-readable storage medium storing instructions, which, when executed by the computer processing circuit, are configured to cause the computer processing circuit to perform a method comprising:
determining that a computing device has created a new connection to a network;
determining a public internet protocol (public IP) address of an exit point used by the network;
determining a reputation rating of the network based on the public IP address of the exit point;
generating a risk report comprising the reputation rating, and a selectable interface that terminates the new connection to the network in response to a selection of the selectable interface;
terminating the new connection to the network based on the reputation and a predetermined reputation threshold.

### Claim 16 (depends on 15)

The system of claim 15, wherein:
determining the reputation rating of the network comprises requesting the reputation rating from an IP reputation service; and
requesting the reputation rating comprises providing the public IP address of the exit point for the IP reputation service.