US 11,902,278 B2Granted

Authorising operations for devices in a network

AssigneeNagravision Sarl

InventorsMohammad Tarig Zafar, Ritwik Chattopadhyay, Vaidyanathan Ramachandran

Life of this patent

Estimating the term…

Loading patent…

Abstract

The disclosure related to methods and associated devices and/or systems for authorising at least one operation associated with a device, the device operating in a communication network, such as a user network, that comprises a plurality of devices communicatively coupled to a server computer, such as a control server. The disclosed method comprises generating a data model based on a plurality of patterns of actions for one or more devices among the plurality of devices. The data model is configured to detect and/or store at least one regular pattern of actions for each device among the one or more devices, each action corresponding to an operating state of the device. The disclosed method comprises receiving a request for an operation associated with a first device among the plurality of devices and determining if the received request satisfies a first criterion, the first criterion being based on or associated with the data model. Then, based on a determination that the first criterion is not satisfied, the disclosed method comprises generating at least one query based on a regular pattern of actions of at least one device among the one or more devices and sending the at least one query to a user interface. The disclosed method comprises determining if a response to the at least one query received from the user interface satisfies a second criterion. The second criterion is based on a comparison of the response received with the regular pattern of actions associated with the query in the data model. Then, based on a determination that the second condition is satisfied, the disclosed method comprises authorising the received request for the operation and providing a setting for the first device and/or control server based on the authorisation.

Claims20

Dependent claims

A method comprising:

receiving, by a computer system communicatively coupled to a communication network, from a first device among a plurality of devices operating in the communication network, a request to perform an operation at the first device, wherein the plurality of devices are associated with a user;
determining, by the computer system, whether the received request satisfies a first criterion for verifying authorization to perform the operation at one or more devices, the first criterion being based on a data model, the data model being generated based on a plurality of patterns of actions for at least one device among the plurality of devices, the plurality of patterns of actions including at least one regular pattern of action corresponding to an operating state of the at least one device, wherein the at least one regular pattern of actions is based on a user pattern of actions associated with the at least one device among the plurality of devices;
based on a determination that the first criterion is not satisfied, generating, by the computer system, at least one query to determine authorization to perform the operation at the one or more devices, the at least one query based on one or more patterns of actions of at least one device among the one or more devices;
determining, by the computer system, whether a response to the at least one query received from the user via a second device satisfies a second criterion for satisfying the at least one query, the second criterion being satisfied based on a comparison of the response to the at least one query to the one or more patterns of actions associated with the at least one query in the data model;
and
based on a determination that the second criterion is satisfied, sending a message that causes the first device to permit performance of the operation at the first device, the message including an authorization to perform the operation and a setting for the first device to perform the operation based on the authorization.

3 more elements

An apparatus communicatively coupled to a communication network, the apparatus comprising:

at least one memory;
and
at least one processor coupled to the at least one memory and configured to:
receive from a first device among a plurality of devices operating in the communication network, a request to perform an operation at the first device, wherein the plurality of devices are associated with a user;
determine whether the received request satisfies a first criterion for verifying authorization to perform the operation at one or more devices, the first criterion being based on a data model, the data model being generated based on a plurality of patterns of actions for at least one device among the plurality of devices, the plurality of patterns of actions including at least one regular pattern of action corresponding to an operating state of the at least one device, wherein the at least one regular pattern of actions is based on a user pattern of actions associated with the at least one device among the plurality of devices;
based on a determination that the first criterion is not satisfied, generate at least one query to determine authorization to perform the operation at the one or more devices, the at least one query based on one or more patterns of actions of at least one device among the one or more devices;
determine whether a response to the at least one query received from the user via a second device satisfies a second criterion for satisfying the at least one query, the second criterion being satisfied based on a comparison of the response to the at least one query to the one or more patterns of actions associated with the at least one query in the data model;
and
based on a determination that the second criterion is satisfied, send a message that causes the first device to permit performance of the operation at the first device, the message including an authorization to perform the operation and a setting for the first device to perform the operation based on the authorization.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/294,941Filed 20 Nov 2019
Priority: EP 1820741820 Nov 2018
Published: US 2022/0021674 A120 Jan 2022
Granted: 13 Feb 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
G06F 21/10
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity: protecting distributed…
G16Y 30/10
IoT infrastructure: security thereof
H04L 67/12
Protocols: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in…