# US 12,113,768 B2 · Using intent to access in discovery protocols in a network for analytics > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,113,768 B2 - Document ID: US12113768B2 - Status: Granted - Kind: B2 - Application number: 16/177,295 - Filed: 2018-10-31 - Published: 2020-04-30 - Granted: 2024-10-08 - Earliest claimed: 2018-10-31 - Assignees: Hewlett Packard Enterprise Development LP - Applicants: Hewlett Packard Enterprise Development LP - Inventors: Ramsundar Janakiraman - Web page: https://patentgrep.com/patent/US12113768B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 41/12: Discovery or management of network topologies - H04L 61/4511: using domain name system [DNS] - H04L 61/5014: using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP] - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/0281: {Proxies} - H04L 63/10: {for controlling access to devices or network resources} - H04L 67/51: Discovery or management thereof, e.g. service location protocol [SLP] or web services - H04L 61/5061: Pools of addresses - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system may identify a resource deployed in a computer, where discovery protocol data traffic is unencrypted. The system may receive metadata associated with the discovery protocol data traffic, update the computer network based at least in part on the information included in the metadata, and provide a response to the client. The system may authenticate a request from the client to access the resource using an encrypted protocol, and provide, to the client, access to the resource upon authentication, according to a resource attribute. ## Claims ### Claim 1 A computer-implemented method, comprising: identifying a resource deployed in a computer network, wherein the resource provides discovery protocol data traffic comprising information about at least one client device accessing a server of the computer network; receiving metadata associated with the discovery protocol data traffic; determining whether the resource is deployed in a network edge of the computer network based on the metadata, wherein the network edge is associated with end user client devices including the at least one client device; responsive to determining whether the resource is deployed in the network edge, generating a behaviour model for the server based at least in part on the discovery protocol data traffic; and regulating access to the server responsive to the behaviour model. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein determining whether the resource is deployed in the network edge comprises determining whether the discovery protocol data traffic is unencrypted. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein the metadata includes a network address and a domain name for the resource, and the method further comprising: parsing network addresses in the computer network and updating a domain name service with the domain name for the resource; and providing, to a given client device of the at least one client devices, the domain name for the resource and a service advertisement associated with the resource. ### Claim 4 (depends on 3) The computer-implemented method of claim 3, wherein the network addresses comprises a subnetwork address for a router associated with the resource, and the metadata further comprises a universal unique identifier for the router. ### Claim 5 (depends on 3) The computer-implemented method of claim 3, wherein regulating access to the server comprises grouping the network addresses into a subnetwork and forming a subnetwork mask to monitor a usage of the network addresses. ### Claim 6 (depends on 3) The computer-implemented method of claim 3, wherein parsing the network addresses in the computer network comprises setting bindings between new domain names and the network addresses with a pre-selected refresh interval. ### Claim 7 (depends on 3) The computer-implemented method of claim 3, wherein parsing the network addresses in the computer network comprises recycling at least one of the network addresses with a new domain name. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein regulating access to the server comprises issuing a warning to a system server in response to a domain name exhaustion being reached. ### Claim 9 (depends on 1) The computer-implemented method of claim 1, wherein regulating access to the server comprises mapping a network address to a domain name in response to a network address being accessed by a valid request from a client device of the at least one client device. ### Claim 10 (depends on 1) The computer-implemented method of claim 1, wherein regulating access to the server comprises enforcing a policy rule of the computer network. ### Claim 11 (depends on 1) The computer-implemented method of claim 1, wherein the server is part of a plurality of servers of the computer network, the method further comprising identifying popular servers out of the plurality of servers based at least in part on a frequency of access to the plurality of servers and updating the domain name service with the popular servers. ### Claim 12 (depends on 1) The computer-implemented method of claim 1, wherein the metadata includes a media access control (MAC) address, a network address, a domain name for the resource, and a subnetwork address for an associate router. ### Claim 13 (depends on 1) The computer-implemented method of claim 1, wherein generating the behaviour model comprises: based on the discovery protocol data traffic, associating the server with a group of users having a role shared in common among the users. ### Claim 14 (depends on 1) The computer-implemented method of claim 1, wherein generating the behaviour model further comprises: based on the discovery protocol data traffic, associating the server with a sequence of accesses among a group of servers. ### Claim 15 A system, comprising: a memory storing instructions; and one or more processors configured to execute the instructions to cause the system to: identify a resource deployed in a computer network, wherein the resource provides discovery protocol data traffic comprising information about at least one client accessing a server of the computer network; receive metadata associated with the discovery protocol data traffic; determine whether the resource is deployed in a network edge of the computer network based on the metadata, wherein the network edge is associated with end user client devices; responsive to determining whether the resource is deployed in the network edge, generate a behaviour model for the server based at least in part on the discovery protocol data traffic; and regulate access to the server responsive to the behaviour model. ### Claim 16 (depends on 15) The system of claim 15, wherein: to receive the metadata associated with the discovery protocol data traffic the one or more processors further execute instructions to receive a network address and a domain name for the resource; to generate the behaviour model the one or more processors further execute instructions to parse network addresses in the computer network and updating a domain name service with the domain name for the resource. ### Claim 17 (depends on 16) The system of claim 16, wherein the one or more processors further execute instructions to receive a subnetwork address for a router associated with the resource and to receive the device universal unique identifier for the router. ### Claim 18 (depends on 16) The system of claim 16, wherein the one or more processors further execute instructions to group the parsed network addresses into a subnetwork and form a subnetwork mask to monitor a usage of the parsed network addresses. ### Claim 19 (depends on 15) The system of claim 15, wherein the one or more processors further execute instructions to determine whether the resource is deployed in the network edge based on whether the discovery protocol data traffic is unencrypted. ### Claim 20 (depends on 15) The system of claim 15, wherein the one or more processors further execute instructions to issue a warning to a system server in response to domain name exhaustion being reached. ### Claim 21 (depends on 15) The system of claim 15, wherein the one or more processors further execute instructions to enforce a policy rule of the computer network. ### Claim 22 (depends on 15) The system of claim 15, wherein: the at least one client is associated with a group of users; the behaviour model identifies a clustering of accesses by the users to the server; and the one or more processors further execute the instructions to cause the system to: determine that the clustering is a deviation from a baseline; and generate a notice of the deviation responsive to the determination that the clustering is a deviation from the baseline. ### Claim 23 A non-transitory, computer readable medium storing instructions which, when executed by a processor, cause a computer to perform a method, the method comprising: identifying a resource deployed in a computer network, wherein the resource provides discovery protocol data traffic comprising information about at least one client accessing a server of the computer network; receiving metadata associated with the discovery protocol data traffic; determining whether the resource is deployed in a network edge of the computer network based on the metadata, wherein the network edge is associated with end user client devices; responsive to determining whether the resource is deployed in the network edge, generating a behaviour model for the server based at least in part on the discovery protocol data traffic; and regulating access to the server responsive to the behaviour model. ### Claim 24 (depends on 19) The non-transitory, computer readable medium of claim 19, wherein the metadata includes a network address and a domain name for the resource, and the method further comprising: parsing network addresses in the computer network and updating a domain name service with the domain name for the resource; and providing, to a given client device of the at least one client devices, the domain name for the resource and a service advertisement associated with the resource.