# US 12,010,210 B1 · Determining cryptographic quantum-safety for network assets > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,010,210 B1 - Document ID: US12010210B1 - Status: Granted - Kind: B1 - Application number: 18/370,672 - Filed: 2023-09-20 - Granted: 2024-06-11 - Earliest claimed: 2023-09-20 - Assignees: Forescout Technologies, Inc. - Applicants: Forescout Technologies, Inc. - Inventors: Robert McNutt; Daniel Ricardo dos Santos - Web page: https://patentgrep.com/patent/US12010210B1 ## CPC - H04L 9/06: the encryption apparatus using shift registers or memories for block-wise {or stream} coding, e.g. DES systems {or RC4; Hash functions; Pseudorandom sequence generators} - H04L 9/0852: {Quantum cryptography (transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03)} - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system includes a processing device, operatively coupled to memory, to obtain one or more ciphers that are supported by a device that is coupled to a network, determine, by the processing device, a value associated with the device, based on whether each of the one or more ciphers that are supported by the device is quantum-safe, and generate a notification based on the value. ## Claims ### Claim 1 A method, performed by a processing device, comprising: obtaining one or more ciphers that are supported by a device that is coupled to a network; determining, by the processing device, a value associated with the device, based on whether each of the one or more ciphers that are supported by the device is quantum-safe, wherein determining the value associated with the device comprises comparing the one or more ciphers that are supported by the device with a list of quantum-safe algorithms to determine if each of the one or more ciphers is listed in the list of quantum-safe algorithms; and generating a notification based on the value. ### Claim 2 (depends on 1) The method of claim 1, wherein obtaining the one or more ciphers includes initiating a handshake process to communicate with the device over the network. ### Claim 3 (depends on 1) The method of claim 1, wherein obtaining the one or more ciphers includes: parsing network traffic to detect encrypted connection attempts in the network traffic, and parsing the connection attempts to obtain the one or more ciphers that are supported by the device. ### Claim 4 (depends on 1) The method of claim 1, wherein obtaining the one or more ciphers includes obtaining the one or more ciphers from a third party server. ### Claim 5 (depends on 1) The method of claim 1, wherein each of the one or more ciphers is associated with a service that is supported by the device on the network, and the notification is generated based on whether each of the one or more ciphers that are associated with the service are quantum-safe. ### Claim 6 (depends on 1) The method of claim 1, wherein determining the value is further based on at least one of: a type of the device, a criticality of data stored on the device, or a criticality of operations performed by the device. ### Claim 7 (depends on 1) The method of claim 1, wherein determining the value is further based on a setting that determines a risk tolerance for the network or a portion of the network with respect to quantum-safety. ### Claim 8 (depends on 1) The method of claim 1, further comprising performing an action to reduce a security risk of the network, in response to the value satisfying a threshold, the action comprising at least one of: segmenting the network to isolate the device, or filtering communication to or from the device. ### Claim 9 (depends on 1) The method of claim 1, further comprising determining the value for a plurality of devices that are coupled to the network. ### Claim 10 A system, comprising: a memory; and a processing device, operatively coupled to the memory, to: obtain one or more ciphers that are supported by a device that is coupled to a network; determine, by the processing device, a value associated with the device, based on whether each of the one or more ciphers that are supported by the device is quantum-safe, wherein to determine the value associated with the device comprises to compare the one or more ciphers that are supported by the device with a list of quantum-safe algorithms to determine if each of the one or more ciphers is listed in the list of quantum-safe algorithms; and generate a notification based on the value. ### Claim 11 (depends on 10) The system of claim 10, wherein to obtain the one or more ciphers includes to initiate a handshake process to communicate with the device over the network. ### Claim 12 (depends on 10) The system of claim 10, wherein to obtain the one or more ciphers includes: to parse network traffic to detect encrypted connection attempts in the network traffic, and parsing the connection attempts to obtain the one or more ciphers that are supported by the device. ### Claim 13 (depends on 10) The system of claim 10, wherein to obtain the one or more ciphers includes to obtain the one or more ciphers from a third party server. ### Claim 14 A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to: obtain one or more ciphers that are supported by a device that is coupled to a network; determine, by the processing device, a value associated with the device, based on whether each of the one or more ciphers that are supported by the device is quantum-safe, wherein to determine the value associated with the device comprises to compare the one or more ciphers that are supported by the device with a list of quantum-safe algorithms to determine if each of the one or more ciphers is listed in the list of quantum-safe algorithms; and generate a notification based on the value. ### Claim 15 (depends on 14) The non-transitory computer readable medium of claim 14, wherein to obtain the one or more ciphers includes initiate to initiate a handshake process to communicate with the device over the network. ### Claim 16 (depends on 14) The non-transitory computer readable medium of claim 14, wherein to obtain the one or more ciphers includes: to parse network traffic to detect encrypted connection attempts in the network traffic, and to parse the connection attempts to obtain the one or more ciphers that are supported by the device. ### Claim 17 (depends on 14) The non-transitory computer readable medium of claim 14, wherein to obtain the one or more ciphers includes to obtain the one or more ciphers from a third party server. ### Claim 18 (depends on 10) The system of claim 10, wherein each of the one or more ciphers is associated with a service that is supported by the device on the network, and the notification is generated based on whether each of the one or more ciphers that are associated with the service are quantum-safe. ### Claim 19 (depends on 14) The non-transitory computer readable medium of claim 14, wherein each of the one or more ciphers is associated with a service that is supported by the device on the network, and the notification is generated based on whether each of the one or more ciphers that are associated with the service are quantum-safe.