US 12,015,590 B2Granted

Methods and systems for efficient cyber protections of mobile devices

AssigneeCentripetal Networks, Inc.

InventorsSean Moore, Peter P. Geremia

Life of this patent

Estimating the term…

Loading patent…

Abstract

Enterprise users' mobile devices typically access the Internet without being protected by the enterprise's network security policy, which exposes the enterprise network to Internet-mediated attack by malicious actors. This is because the conventional approach to protecting the mobile devices and associated enterprise network is to tunnel all of the devices' Internet communications to the enterprise network, which is very inefficient since typically only a very small percentage of Internet communications originating from an enterprise's mobile devices are communicating with Internet hosts that are associated with threats. In the present disclosure, the mobile device efficiently identifies which communications are associated with Internet threats, and tunnels only such identified traffic to the enterprise network, where actions may be taken to protect the enterprise network.

Claims26

Dependent claims

A method comprising:

generating, by a computing device and based on resource constraints of a mobile device, a policy probabilistic data structure that represents a plurality of packet filtering rules, wherein the plurality of packet filtering rules were automatically created or altered based on malicious traffic information received from a plurality of cyber threat intelligence providers, and wherein at least two of the plurality of cyber threat intelligence providers are managed by different organizations;
sending, by the computing device and to the mobile device, the policy probabilistic data structure, wherein the policy probabilistic data structure is configured to cause the mobile device to, based on a determination that an attribute of a packet is represented in the policy probabilistic data structure, transmit the packet to a packet filtering device via a network;
generating, by the computing device and based on the resource constraints of the mobile device, a new policy probabilistic data structure that represents a new plurality of packet filtering rules, wherein the new plurality of packet filtering rules were automatically created or altered based on updated malicious traffic information received from one or more of the plurality of cyber threat intelligence providers;
and
sending, by the computing device and to the mobile device, the new policy probabilistic data structure.

2 more elements

One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause a computing device to:

generate, based on resource constraints of a mobile device, a policy probabilistic data structure that represents a plurality of packet filtering rules, wherein the plurality of packet filtering rules were automatically created or altered based on malicious traffic information received from a plurality of cyber threat intelligence providers, and wherein at least two of the plurality of cyber threat intelligence providers are managed by different organizations;
send, to the mobile device, the policy probabilistic data structure, wherein the policy probabilistic data structure is configured to cause the mobile device to, based on a determination that an attribute of a packet is represented in the policy probabilistic data structure, transmit the packet to a packet filtering device via a network;
generate, based on the resource constraints of the mobile device, a new policy probabilistic data structure that represents a new plurality of packet filtering rules, wherein the new plurality of packet filtering rules were automatically created or altered based on updated malicious traffic information received from one or more of the plurality of cyber threat intelligence providers;
and
send, to the mobile device, the new policy probabilistic data structure.

2 more elements

A computing device comprising:

one or more processors;
and
memory storing instructions that, when executed by the one or more processors, cause the computing device to:
generate, based on resource constraints of a mobile device, a policy probabilistic data structure that represents a plurality of packet filtering rules, wherein the plurality of packet filtering rules were automatically created or altered based on malicious traffic information received from a plurality of cyber threat intelligence providers, and wherein at least two of the plurality of cyber threat intelligence providers are managed by different organizations;
send, to the mobile device, the policy probabilistic data structure, wherein the policy probabilistic data structure is configured to cause the mobile device to, based on a determination that an attribute of a packet is represented in the policy probabilistic data structure, transmit the packet to a packet filtering device via a network;
generate, based on the resource constraints of the mobile device, a new policy probabilistic data structure that represents a new plurality of packet filtering rules, wherein the new plurality of packet filtering rules were automatically created or altered based on updated malicious traffic information received from one or more of the plurality of cyber threat intelligence providers;
and
send, to the mobile device, the new policy probabilistic data structure.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/837,085Filed 10 Jun 2022 · continuation
Priority: 3 Jul 2019
Published: US 2022/0303245 A122 Sep 2022
Granted: 18 Jun 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification15 codes

H04L 9/40
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: network security protocols
H04L 63/0245
Filtering policies: filtering by information in the payload
H04L 12/4633
Interconnection of networks: interconnection of networks using encapsulation techniques, e.g. tunneling
H04L 12/66
Data switching networks: arrangements for connecting between networks having differing types of switching systems, e.g. gateways

Family

Application16/502,565Parent of this continuation · filed 3 Jul 2019
Application16/897,942Parent of this continuation · filed 10 Jun 2020
US 10,715,493 B1Parent of this continuation · filed 14 Jul 2020
Application17/194,886Parent of this continuation · filed 8 Mar 2021
US 10,944,721 B2Parent of this continuation · filed 9 Mar 2021
Application17/371,487Parent of this continuation · filed 9 Jul 2021
US 11,063,909 B1Parent of this continuation · filed 13 Jul 2021
US 11,374,905 B2Parent of this continuation · filed 28 Jun 2022
US 2022/0303245 A1Pre-grant publication · published 22 Sep 2022
US 2021/0006541 A1Published application
US 2021/0211409 A1Published application
US 2021/0336929 A1Published application
US 12,015,590 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key