System and method for monitoring the security configurations of connected devices
Inventors
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-12641130-B1
Publication Date
2026-05-26
Expiration Date
Abstract
A system and method for monitoring and modifying the security configurations of multiple devices is disclosed. The method includes monitoring multiple devices for security triggers and taking action in response to the triggers. The triggers include changes in security configurations, known security issues and pending updates. The devices may be any connected devices, including Internet of Things devices.
Core Innovation
A hub-based security management system manages security configurations of one or more monitored devices based on fencing parameters. The security management module builds a database of monitored devices and associated security configurations and communicates with a security configuration interface of each monitored device to allow the security configuration of each monitored device to be changed.
The security management module detects that a first security configuration for a first monitored device has been automatically updated, and retrieves a second security configuration for a second monitored device. The second monitored device can communicate with the first monitored device. The security management module determines whether there is a conflict between the first security configuration and the second security configuration.
When a conflict exists, the security management module modifies the first security configuration or the second security configuration to resolve the conflict. The conflict handling includes modifying security configurations of conflicting devices to remove the conflict or to disable one or more functions, and may include restoring a previous security configuration or updating to a new non-conflicting configuration.
Claims Coverage
The independent claims cover two inventive features: a monitored-device/security-configuration database based on fencing parameters, and conflict detection and modification of security configurations for communicating devices.
Building a monitored-device/security-configuration database based on fencing parameters
building a database comprising a list of monitored devices and associated security configurations of the monitored devices based on fencing parameters;
Detecting an automatic update of a first security configuration
detecting that a first security configuration for a first monitored device in the list of monitored devices has been automatically updated;
Retrieving a second security configuration for a communicating device
retrieving a second security configuration for a second monitored device in the list of monitored devices, wherein the second monitored device can communicate with the first monitored device;
Determining conflict between security configurations of communicating devices
determining if there is a conflict between the first security configuration and the second security configuration;
Modifying one or more security configurations when a conflict exists
modifying the first security configuration or the second security configuration when there is a conflict between the first security configuration and the second security configuration;
Hub device security management module with security monitoring application and configuration interfaces
a security management module comprising a security monitoring application running on a computing device, the security management module building a database comprising a plurality of monitored devices and associated security configurations of the plurality of monitored devices from the plurality of devices based on fencing parameters, each monitored device of the plurality of monitored devices comprising a security configuration interface to allow a security configuration of each monitored device to be changed, and the security management module in communication with the security configuration interface of each monitored device; and a security configuration files database in communication with the security management module;
Modifying security configurations of communicating devices based on detected conflict
wherein the security management module detects that a first security configuration for a first monitored device in the plurality of monitored devices has been automatically updated, retrieves a second security configuration for a second monitored device in the plurality of monitored devices, wherein the second monitored device can communicate with the first monitored device, determines if there is a conflict between the first security configuration and the second security configuration, and modifies the first security configuration or the second security configuration when there is a conflict between the first security configuration and the second security configuration.
Across the independent claims, the invention centers on constructing a monitored-device security-configuration database based on fencing parameters, detecting an automatically updated security configuration for one device, retrieving a security configuration for another device that can communicate with the first, determining whether the configurations conflict, and modifying one or more of the conflicting security configurations when a conflict is detected.
Stated Advantages
Not explicitly described in patent.
Documented Applications
Not explicitly described in patent.
Interested in licensing this patent?