Methods, apparatuses, and systems for network analysis

Patent metadata

Field	Value
Publication number	US-10212618-B2
Application number	US-201514878570-A
Country	US
Kind code	B2
Filing date	Oct 8, 2015
Priority date	Oct 8, 2014
Publication date	Feb 19, 2019
Grant date	Feb 19, 2019

Abstract

Methods, systems, apparatuses, and computer readable media for providing a network analysis system are disclosed. An example of a system for providing a network analysis system includes at least one satellite device configured to monitor wireless network traffic to determine at least one network communication event, generate an event message based on the at least one network communication event, and transmit the event message. The system also includes a controller device configured to receive the event message, determine an identity of at least one device communicating during the network communication event, determine a network status based at least in part on the identity of the at least one device, and provide the network status via an interface.

First claim

What is claimed is:

1. A system for providing computer network analysis comprising:
at least one satellite device configured to:
monitor wireless traffic within a network to determine at least one network communication event between a first network device and a second network device the first network device and the second network device both being different devices from the satellite device;
generate an event message based on the at least one network communication event; and
transmit the event message; and

a controller device configured to:
receive the event message;
determine an identity of at least one device communicating during the network communication event;
determine a network status based at least in part on the identity of the at least one device;
perform a comparison of the network status to a predetermined rule set;
initiate a responsive action based at least in part on the comparison to the predetermined rule set, wherein the responsive action comprises automatically altering a configuration of the first network device or the second network device and automatically altering a topological feature of the network; and
provide the network status and an indication of the responsive action via a management interface.

2. The system of claim 1 , wherein the event message comprises a signal strength of the network communication event and wherein the controller device is further configured to determine a location of the at least one device based at least in part on the signal strength.

3. The system of claim 1 , wherein the event message comprises a protocol identifier.

4. The system of claim 1 , wherein the controller device is further configured to identify a device type for the at least one device based at least in part on the event message.

5. The system of claim 1 , wherein the at least one satellite device is further configured to monitor the wireless network traffic by detecting network transmissions between the first network device and the second network device, the first network device and the second network device both being different devices from the controller device.

6. The system of claim 1 , wherein the event message comprises a packet header of the network communication event.

7. The system of claim 1 , wherein a clock of the at least one satellite device and a clock of the controller device are synchronized with one another.

8. The system of claim 7 , wherein the event message comprises a timestamp derived based on a reading from the clock of the at least one satellite device.

9. The system of claim 1 , wherein the network communication event is a network message transmitted according to an 802.11 protocol, a ZigBee protocol, or a Bluetooth protocol.

10. A method for providing a network analysis system, the method comprising:
receiving, at a controller device, a first event message from a first satellite device, the first event message comprising content based on a first network communication event between a first network device and a second network device within a network, the first network device and the second network device both being different devices from the first satellite device;
receiving, at the controller device, a second event message from a second satellite device, the second event message comprising content based on a second network communication event between a third network device and a fourth network device;
processing, by the controller device, the first event message and the second event message to determine a network status, wherein the network status comprises an indicator of the presence of each of the first, second, third, and fourth network devices;
performing a comparison of the network status to a predetermined rule set; and
initiating a responsive action based at least in part on the comparison to the predetermined rule set, wherein the responsive action comprises automatically altering a configuration of the first network device or the second network device and automatically altering a topological feature of the network.

11. The method of claim 10 , wherein the first event message comprises a signal strength of the first network communication event and wherein the controller device is further configured to determine a location of the first network device based at least in part on the signal strength.

12. The method of claim 10 , wherein the first event message comprises a protocol identifier.

13. The method of claim 10 , wherein the controller device is further configured to identify a device type for each of the first network device and the second network device based at least in part on the first event message.

14. The method of claim 10 , wherein the at least one satellite device is further configured to monitor the wireless network traffic by detecting network transmissions between a first network device and a second network device, the first network device and the second network device both being different devices from the controller device.

15. The method of claim 10 , wherein the event message comprises a packet header of the network communication event.

16. The method of claim 10 , further comprising synchronizing a clock of at least the first satellite device and a clock of the controller device.

17. The method of claim 16 , wherein the event message comprises a timestamp derived based on a reading from the clock of the at least one satellite device.

18. An apparatus for providing computer network analysis comprising a processor coupled to a memory, the apparatus configured to:
receive an event message, the event message based on at least one network communication event monitored by a satellite device within a network;
determine an identity of at least one device communicating during the network communication event;
determine a network status based at least in part on the identity of the at least one device;
perform a comparison of the network status to a predetermined rule set;
initiate a responsive action based at least in part on the comparison to the predetermined rule set, wherein the responsive action comprises automatically altering a configuration of the at least one device and automatically altering a topological feature of the network; and
provide the network status and an indication of the responsive action via a management interface.

19. The apparatus of claim 18 , wherein the event message comprises a signal strength of the network communication event and wherein the apparatus is further configured to determine a location of the at least one device based at least in part on the signal strength.

20. The apparatus of claim 17 further configured to identify a device type for the at least one device based at least in part on the event message.

21. The method of claim 1 , wherein the responsive action further comprises activating a security system.

22. The method of claim 1 , wherein the responsive action further comprises blocking a communications device.

23. The method of claim 1 , wherein the responsive action further comprises causing a camera to be directed to a particular location.

24. The method of claim 1 , wherein the responsive action further comprises initiating a traffic monitoring operation between at least two communications devices.

25. The method of claim 1 , wherein the responsive action further comprises generating a notification to an external system, wherein the external system comprises a loudspeaker.

Assignees

• Assurant Inc

Inventors

• Hurst Cameron
• Meyer Joan Patricia Mcdonald
• Saunders Stuart

Classifications

• H04L67/025 Primary

  for remote control or remote monitoring of applications · CPC title

• H04W24/08 Primary

  Testing, {supervising or monitoring} using real traffic · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04W12/08 Primary

  Access security · CPC title

• H04L41/14 Primary

  Network analysis or design · CPC title