# US 12,003,370 B2 · Dynamic internet of things device records for use in validating communications from internet of things devices subject to data drift

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,003,370 B2
- Document ID: US12003370B2
- Status: Granted
- Kind: B2
- Application number: 17/696,141
- Filed: 2022-03-16
- Published: 2023-09-21
- Granted: 2024-06-04
- Earliest claimed: 2022-03-16
- Assignees: Bank of America Corporation
- Applicants: Bank of America Corporation
- Inventors: Shailendra Singh; Vasuki Anand
- Web page: https://patentgrep.com/patent/US12003370B2

## CPC

- H04L 41/0853: by actively collecting configuration information or by backing up configuration information
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A system includes a memory, and a processor. The processor receives a request to register a device. In response, the processor extracts a set of parameters from the device, and stores a baseline record associated with the device, which includes the set of parameters, in the memory. The processor determines that an update to the device modified the set of parameters. In response, the processor extracts the modified set of parameters from the device, and stores a new record associated with the device, which includes the modified set of parameters, in the memory. The baseline record was used to validate an identity of the device prior to the processor determining that the update modified the set of parameters. The new record is used to validate the identity of the device subsequent to the processor determining that the update modified the set of parameters.

## Claims

### Claim 1

A system comprising:
a memory; and
a hardware processor communicatively coupled to the memory, the hardware processor configured to:
receive a request to register a device;
in response to receiving the request to register the device:
extract a set of parameters from the device, wherein the set of parameters comprises a plurality of data formats associated with data transmissions sent by the device, and the plurality of data formats comprise a number format and an image file format; and
store a baseline record associated with the device in the memory, the baseline record comprising the set of parameters;
determine that an update to the device has modified the set of parameters of the device; and
in response to determining that the update has modified the set of parameters:
extract the modified set of parameters from the device;
generate a new record associated with the device, the new record comprising the modified set of parameters;
determine a probability that changes to the new record are a result of an unauthorized update that has been made to the device;
determine that the probability is less than a threshold; and
in response to determining that the probability is less than the threshold, store the new record associated with the device in the memory, wherein:
the baseline record was used to validate an identity of the device prior to determining that the update modified the set of parameters; and
the new record is used to validate the identity of the device subsequent to determining that the update modified the set of parameters.

### Claim 2 (depends on 1)

The system of claim 1, wherein extracting the set of parameters from the device comprises transferring a software program to the device, wherein the software program is configured, when executed on the device, to:
extract the set of parameters from the device; and
transmit the set of parameters to the hardware processor.

### Claim 3 (depends on 1)

The system of claim 1, wherein receiving the request to register the device comprises receiving a secure token from the device.

### Claim 4 (depends on 1)

The system of claim 1, wherein storing the baseline record in the memory comprises storing the baseline record in a distributed ledger.

### Claim 5 (depends on 1)

The system of claim 1, wherein:
using the baseline record to validate the identity of the device comprises:
receiving a first transmission from the device; and
determining that the first transmission is consistent with the set of parameters; and
using the new record to validate the identity of the device comprises:
receiving a second transmission from the device; and
determining that the second transmission is consistent with the modified set of parameters, wherein the second transmission is not consistent with the set of parameters.

### Claim 6 (depends on 1)

The system of claim 1, wherein each of the baseline record and the new record comprises a smart contract.

### Claim 7

A method comprising:
receiving a request to register a device;
in response to receiving the request to register the device:
extracting a set of parameters from the device, wherein the set of parameters comprises a plurality of data formats associated with data transmissions sent by the device, and the plurality of data formats comprise a number format and an image file format; and
storing a baseline record associated with the device in a memory, the baseline record comprising the set of parameters;
determining that an update to the device has modified the set of parameters of the device; and
in response to determining that the update has modified the set of parameters:
extracting the modified set of parameters from the device;
generating a new record associated with the device, the new record comprising the modified set of parameters;
determining a probability that changes to the new record are a result of an unauthorized update that has been made to the device;
determining that the probability is less than a threshold; and
in response to determining that the probability is less than a threshold, storing the new record associated with the device in the memory, wherein:
the baseline record was used to validate an identity of the device prior to determining that the update modified the set of parameters; and
the new record is used to validate the identity of the device subsequent to determining that the update modified the set of parameters.

### Claim 8 (depends on 7)

The method of claim 7, wherein extracting the set of parameters from the device comprises transferring a software program to the device, wherein the software program is configured, when executed on the device, to:
extract the set of parameters from the device; and
transmit the set of parameters.

### Claim 9 (depends on 7)

The method of claim 7, wherein receiving the request to register the device comprises receiving a secure token from the device.

### Claim 10 (depends on 7)

The method of claim 7, wherein storing the baseline record in the memory comprises storing the baseline record in a distributed ledger.

### Claim 11 (depends on 7)

The method of claim 7, wherein:
using the baseline record to validate the identity of the device comprises:
receiving a first transmission from the device; and
determining that the first transmission is consistent with the set of parameters; and
using the new record to validate the identity of the device comprises:
receiving a second transmission from the device; and
determining that the second transmission is consistent with the modified set of parameters, wherein the second transmission is not consistent with the set of parameters.

### Claim 12 (depends on 7)

The method of claim 7, wherein each of the baseline record and the new record comprises a smart contract.

### Claim 13

A non-transitory computer-readable medium comprising instructions that, when executed by a hardware processor, cause the processor to:
receive a request to register a device;
in response to receiving the request to register the device:
extract a set of parameters from the device, wherein the set of parameters comprises a plurality of data formats associated with data transmissions sent by the device, and the plurality of data formats comprise a number format and an image file format; and
store a baseline record associated with the device in a memory, the baseline record comprising the set of parameters;
determine that an update to the device has modified the set of parameters of the device; and
in response to determining that the update has modified the set of parameters:
extract the modified set of parameters from the device;
generate a new record associated with the device, the new record comprising the modified set of parameters;
determine a probability that changes to the new record are a result of an unauthorized update that has been made to the device;
determine that the probability is less than a threshold; and
in response to determining that the probability is less than a threshold, store the new record associated with the device in the memory, wherein:
the baseline record was used to validate an identity of the device prior to determining that the update modified the set of parameters; and
the new record is used to validate the identity of the device subsequent to determining that the update modified the set of parameters.

### Claim 14 (depends on 13)

The non-transitory computer-readable medium of claim 13, wherein extracting the set of parameters from the device comprises transferring a software program to the device, wherein the software program is configured, when executed on the device, to:
extract the set of parameters from the device; and
transmit the set of parameters to the hardware processor.

### Claim 15 (depends on 13)

The non-transitory computer-readable medium of claim 13, wherein receiving the request to register the device comprises receiving a secure token from the device.

### Claim 16 (depends on 13)

The non-transitory computer-readable medium of claim 13, wherein:
storing the baseline record in the memory comprises storing the baseline record in a distributed ledger; and
each of the baseline record and the new record comprises a smart contract.

### Claim 17 (depends on 13)

The non-transitory computer-readable medium of claim 13, wherein:
using the baseline record to validate the identity of the device comprises:
receiving a first transmission from the device; and
determining that the first transmission is consistent with the set of parameters; and
using the new record to validate the identity of the device comprises:
receiving a second transmission from the device; and
determining that the second transmission is consistent with the modified set of parameters, wherein the second transmission is not consistent with the set of parameters.