Device update transmission using a filter structure

Inventors

Locketz, Neil

Assignees

Integrity Security Services LLC

Interested in licensing this patent?

MTEC can help explore whether this patent might be available for licensing for your application.

Publication Number

US-12192324-B2

Patent

Publication Date

2025-01-07

Expiration Date


Abstract

A server including a processor and a non-transitory computer readable medium is provided. The medium includes computer-executable instructions cause the processor to perform operations including obtaining a filter data structure comprising a plurality of hash values, each hash value corresponding to a computer device of a plurality of computer devices in an update campaign, determining that a requesting computerized device is in the update campaign, in response to determining, sending a request to confirm that the computerized device is a member of the campaign, in response to confirming that the computerized device is a member of the campaign, providing the device update to the computerized device, and in response to determining that the computerized device does not belong to the campaign, providing an indication that there is no device update for the computerized device.

Core Innovation

The invention relates to a secure campaign-based device update system in which a server uses a filter data structure comprising a plurality of hash values to represent devices in an update campaign. The server determines whether a requesting computerized device is in the update campaign by using one or more hash functions of the filter data structure and identifying information of the requesting computerized device. Based on the determination, the server sends a request to confirm membership or provides an indication that there is no device update for the requesting computerized device.

The system includes a membership confirmation step in which the requesting computerized device is confirmed as a member of the campaign based on data corresponding to the plurality of computerized devices to be updated. In response to confirming that the computerized device is a member of the campaign, the server provides the device update to the computerized device; otherwise, it provides an indication that there is no device update. The filter data structure is generated from device-associated data such that it supports preliminary membership determination prior to confirmation.

The invention further covers an architecture in which a first server detects a campaign initiation request and generates the filter data structure, and then provides the filter data structure to a second server in communication with at least one of the computerized devices. The second server uses the filter data structure to preliminarily determine whether a requesting computerized device is in the campaign and receives a request for the device update based on that preliminary determination. The first server confirms membership and, if confirmed, the device update is provided to the requesting computerized device; otherwise an indication of no device update is provided.

Claims Coverage

The partial document includes three independent claims. Across these claims, the core coverage centers on a hash-based filter data structure for preliminary membership testing in an update campaign, followed by a confirmation step and then providing either the device update or an explicit no-update indication; additional variants cover campaign initiation, filter generation and transfer to a second server, and request handling by the second server with first-server confirmation.

Hash-based filter for campaign membership determination

Obtaining a filter data structure comprising a plurality of hash values, each hash value corresponding to a computer device of a plurality of computer devices in an update campaign; determining that a requesting computerized device is in the update campaign using one or more of the hash functions of the filter data structure and identifying information identifying the requesting computerized device.

Confirmation request before providing a device update

In response to determining that the requesting computerized device is to receive a device update, sending a request to confirm that the computerized device is a member of the campaign; in response to confirming that the computerized device is a member of the campaign, providing the device update to the computerized device; and in response to determining that the computerized device does not belong to the campaign, providing, to the computerized device, an indication that there is no device update for the computerized device.

Campaign initiation to generate and provide a filter to another server

Detecting a campaign initiation request specifying a plurality of computerized devices to be updated with a device update for a campaign; generating a filter data structure comprising a plurality of hash values, wherein each hash value is based on data associated with one of the computerized devices in the plurality of computerized devices; providing the filter data structure from the server to a second server.

Second-server request handling with confirmation by first server

Receiving a request for the device update from a computerized device that has been preliminarily determined to be in the campaign based on the filter data structure; confirming that the computerized device is a member of the campaign based on the data corresponding to the plurality of computerized devices to be updated; and providing the device update associated with the request to at least one of a second server or the computerized device, and if the computerized device is not confirmed as a member of the campaign, providing to at least one of the second server and the computerized device, an indication that there is no device update for the computerized device.

First-server and second-server workflow

Detecting, by a first server, a campaign initiation request specifying a plurality of computerized devices to be updated with a device update for a campaign; generating a filter data structure comprising a plurality of hash values, wherein each hash value is based on data associated with one of the computerized devices in the plurality of computerized devices; providing the filter data structure to a second server in communication with at least one of the computerized devices; receiving, by the second server, a request for the device update from a computerized device that has been preliminarily determined to be in the campaign based on the filter data structure; determining, by the second server, whether a requesting computerized device is in the update campaign based on the filter data structure and identifying information identifying the requesting computerized device; in response to the determining, confirming, by the first server, that the computerized device is a member of the campaign based on the data corresponding to the plurality of computerized devices to be updated; and in response to the confirming, providing the device update to the requesting computerized device, wherein if the computerized device is not confirmed as a member of the campaign, providing to at least one of the second server and the computerized device, an indication that there is no device update for the computerized device.

Across the independent claims, the invention provides a hash-based filter data structure for preliminary determination of whether a requesting device is in a campaign, then uses a confirmation step based on campaign device data to decide whether to provide the device update or an explicit indication that there is no device update. The claims also cover a multi-server workflow in which a first server generates and provides the filter and confirms membership, while a second server uses the filter for preliminary determination and request handling.

Stated Advantages

Not explicitly described in patent.

Documented Applications

Not explicitly described in patent.

JOIN OUR MAILING LIST

Stay Connected with MTEC

Keep up with active and upcoming solicitations, MTEC news and other valuable information.