Protected data collection in a multi-node network

Patent metadata

Field	Value
Publication number	US-10819780-B2
Application number	US-201514998159-A
Country	US
Kind code	B2
Filing date	Dec 24, 2015
Priority date	Dec 24, 2015
Publication date	Oct 27, 2020
Grant date	Oct 27, 2020

Abstract

Particular embodiments described herein provide for an electronic device that can be configured to receive a broadcast query from a network element, receive information from a plurality of devices, process the information, and generate an integrated group response, wherein the integrated group response summarizes the information about the plurality of devices and removes identification information that could allow data to be linked to a specific device from the plurality of devices. The integrated group response can be communicated back to the network element in response to the query.

First claim

What is claimed is:

1. At least one non-transitory machine readable medium comprising one or more instructions that when executed by at least one processor, cause the at least one processor to:
receive a broadcast query from a network element, wherein the broadcast query includes a query identification, a response time out, and a group filter, wherein the broadcast query is broadcasted to a plurality of devices, and wherein the plurality of devices includes a responding device;
receive, by the responding device, information in response to the broadcast query, wherein the information is received from the plurality of devices that meet the group filter criteria and within the response time;
process, by the responding device, the information;
generate, by the responding device, an integrated group response, wherein the integrated group response includes the information received in response to the broadcast query from the plurality of devices and does not include a device ID specific to a device of the plurality of devices; and
communicate, by the responding device, the integrated group response to the network element.

2. The at least one non-transitory machine readable medium of claim 1 , wherein the plurality of devices can communicate in a peer-to-peer communication network with an individual device of the plurality of devices passing a growing information block, wherein information from the individual device in response to the broadcast query is added to the growing information block, and wherein the information received by the responding device is the growing information block.

3. The at least one non-transitory machine readable medium of claim 2 , wherein the peer to peer communication network is over secure communication channels.

4. The at least one non-transitory machine readable medium of claim 1 , wherein the information is processed inside a trusted execution environment.

5. The at least one non-transitory computer-readable medium of claim 1 , wherein the response time out includes a predetermined amount of time, and wherein, after the predetermined amount of time, the responding device communicates the integrated group response to the network element.

6. An apparatus comprising:
a processor; and
a memory storing executable instructions that when executed by the processor cause the processor to:
receive a broadcast query from a network element, wherein the broadcast query includes a query identification, a response time out, and a group filter, wherein the broadcast query is broadcasted to a plurality of devices, and wherein the plurality of devices includes a responding device;
receive, by the responding device, information in response to the broadcast query, wherein the information is received from the plurality of devices that meet the group filter criteria and within the response time;
process, by the responding device, the information;
generate, by the responding device, an integrated group response, wherein the integrated group response includes the information received in response to the broadcast query from the plurality of devices that meet the group filter criteria and within the response time and does not include a device ID specific to a device of the plurality of devices; and
communicate, by the responding device, the integrated group response to the network element.

7. The apparatus of claim 6 , wherein the plurality of devices can communicate in a peer-to-peer communication network with an individual device of the plurality of devices passing a growing information block, wherein information from the individual device in response to the broadcast query is added to the growing information block, and wherein the information received by the responding device is the growing information block.

8. The apparatus of claim 7 , wherein the peer to peer communication network is over secure communication channels.

9. The apparatus of claim 6 , wherein the information is processed inside a trusted execution environment.

10. The apparatus of claim 6 , wherein the query includes a response time out, wherein the response time out includes a predetermined amount of time, and wherein, after the predetermined amount of time, the responding device communicates the integrated group response to the network element.

11. A method comprising:
receiving a broadcast query from a network element, wherein the broadcast query includes a query identification, a response time out, and a group filter, wherein the broadcast query is broadcasted to a plurality of devices, and wherein the plurality of devices includes a responding device;
receiving, by the responding device, information in response to the broadcast query, wherein the information is received from the plurality of devices that satisfy the group filter criteria and within the response time;
processing, by the responding device, the information;
generating, by the responding device, an integrated group response, wherein the integrated group response includes the information received in response to the broadcast query from the plurality of devices that satisfy the group filter criteria and within the response time and does not include a device ID specific to a device of the plurality of devices; and

communicating, by the responding device, the integrated group response to the network element.

12. The method of claim 11 , wherein the plurality of devices can communicate in a peer-to-peer communication network with an individual device of the plurality of devices passing a growing information block, wherein information from the individual device in response to the broadcast query is added to the growing information block, and wherein the information received by the responding device is the growing information block.

13. The method of claim 12 , wherein the peer to peer communication network is over secure communication channels.

14. The method of claim 11 , wherein the information is processed inside a trusted execution environment.

15. The method of claim 11 , wherein the response time out includes a predetermined amount of time, and wherein, after the predetermined amount of time, the responding device communicates the integrated group response to the network element.

Assignees

• Mcafee Llc

Inventors

• Pogorelik Oleg
• Nayshtut Alex
• Smith Ned M
• Muttik Igor
• Raziel Michael

Classifications

• H04L67/566

  Grouping or aggregating service requests, e.g. for unified processing · CPC title

• H04L65/611

  for multicast or broadcast (systems for broadcast or conference H04L12/18; arrangements for broadcast or distribution combined with broadcast H04H20/00; arrangements for broadcast applications with a direct linkage to broadcast information or to broadcast space-time H04H60/00; selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS], H04W4/06) · CPC title

• H04L63/0407 Primary

  wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00) · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L67/1076 Primary

  Resource dissemination mechanisms or network resource keeping policies for optimal resource availability in the overlay network · CPC title