Device identification and reconfiguration in a network

Patent metadata

Field	Value
Publication number	US-10834201-B2
Application number	US-201816201683-A
Country	US
Kind code	B2
Filing date	Nov 27, 2018
Priority date	Nov 27, 2018
Publication date	Nov 10, 2020
Grant date	Nov 10, 2020

Abstract

In an embodiment, a method includes detecting a set of domain name system (DNS) requests from a device in an Internet of Things (IoT) network. In an embodiment, a method includes identifying a set of identification information associated with the set of DNS requests. In an embodiment, a method includes predicting, based on the set of identification information, a device type of the device. In an embodiment, a method includes determining, in response to predicting the device type, a network configuration setting for the device type. In an embodiment, a method includes reconfiguring, in response to determining a network configuration setting, a network configuration of the device.

First claim

What is claimed is:

1. A method comprising:
detecting a set of domain name system (DNS) requests from a device in an Internet of Things (IoT) network;
identifying a set of identification information associated with the set of DNS requests;
predicting, based on the set of identification information, a device type of the device, the predicting comprising:
converting the DNS requests over a time period to a document;
generating a vector from the document; and
comparing the vector with a set of vectors, wherein each vector in the set of vectors is generated from a different device type;

determining, in response to predicting the device type, a network configuration setting for the device type; and
reconfiguring, in response to determining a network configuration setting, a network configuration of the device.

2. The method of claim 1 , wherein the predicting the device type of the device further comprises:
comparing the set of DNS requests with a second set of DNS requests.

3. The method of claim 1 , further comprising:
filtering the set of DNS requests to produce a subset of the set of DNS requests.

4. The method of claim 1 , further comprising:
monitoring a frequency of a subset of the set of DNS requests.

5. The method of claim 1 , wherein the identifying the set of identification information further comprises:
associating a domain name with at least one DNS request of the set of DNS requests.

6. The method of claim 1 , further comprising:
weighting, using a weighting rule, a subset of the set of DNS requests.

7. The method of claim 1 , wherein the reconfiguring further comprises:
removing the device from the IoT network.

8. The method of claim 1 , wherein the reconfiguring further comprises:
modifying a set of access rules for the device.

9. The method of claim 1 , wherein the reconfiguring further comprises:
redirecting network traffic from the device.

10. The method of claim 1 , wherein the method is embodied in a computer program product comprising one or more computer-readable storage devices and computer-readable program instructions which are stored on the one or more computer-readable tangible storage devices and executed by one or more processors.

11. A computer usable program product for providing device specific security measures in an Internet of Things (IoT) environment, the computer program product comprising a computer-readable storage medium, and program instructions stored on the storage medium, the stored program instructions comprising:
program instructions to detect a set of domain name system (DNS) requests from a device in an Internet of Things (IoT) network;
program instructions to identify a set of identification information associated with the set of DNS requests; program instructions to predict, based on the set of identification information, a device type of the device, the program instructions to predict comprising:
program instructions to convert the DNS requests over a time period to a document;
program instructions to generate a vector from the document;
program instructions to compare the vector with a set of vectors, wherein each vector in the set of vectors is generated from a different device type;

program instructions to determine, in response to predicting the device type, a network configuration setting for the device type; and
program instructions to reconfigure, in response to determining a network configuration setting, a network configuration of the device.

12. The computer usable program product of claim 11 , wherein the program instructions to predict the device type of the device further comprise:
program instructions to compare the set of DNS requests with a second set of DNS requests.

13. The computer usable program product of claim 11 , the stored program instructions further comprising:
filtering the set of DNS requests to produce a subset of the set of DNS requests.

14. The computer usable program product of claim 11 , the stored program instructions further comprising:
monitoring a frequency of a subset of the set of DNS requests.

15. The computer usable program product of claim 11 , the program instructions to identify the set of identification information further comprising:
program instructions to associate a domain name with at least one DNS request of the set of DNS requests.

16. The computer usable program product of claim 11 , the stored program instructions further comprising:
program instructions to reconfigure further comprising:
program instructions to remove the device from the IoT network.

17. The computer usable program product of claim 11 , the stored program instructions further comprising:
weighting, using a weighting rule, a subset of the set of DNS requests.

18. The computer usable program product of claim 11 , wherein the computer usable code is stored in the computer readable storage medium in a data processing system, and wherein the computer usable code is transferred over a network from a remote data processing system.

19. The computer usable program product of claim 11 , wherein the computer usable code is stored in the computer readable storage medium in a server data processing system, and wherein the computer usable code is downloaded over a network to a remote data processing system for use in a computer readable storage device associated with the remote data processing system.

20. A computer system for providing device specific security measures in an Internet of Things (IoT) environment, the computer system comprising a processor, a computer-readable memory, and a computer-readable storage device, and program instructions stored on the storage device for execution by the processor via the memory, the stored program instructions comprising:
program instructions to detect a set of domain name system (DNS) requests from a device in an Internet of Things (IoT) network;
program instructions to identify a set of identification information associated with the set of DNS requests;
program instructions to predict, based on the set of identification information, a device type of the device, the program instructions to predict comprising:
program instructions to convert the DNS requests over a time period to a document; program instructions to generate a vector from the document;
program instructions to compare the vector with a set of vectors, wherein each vector in the set of vectors is generated from a different device type;
program instructions to determine, in response to predicting the device type, a network configuration setting for the device type; and
program instructions to reconfigure, in response to determining a network configuration setting, a network configuration of the device.

Assignees

• IBM

Inventors

• Le Thai Franck
• Verma Dinesh C
• Kandlur Dilip Dinkar

Classifications

• H04L43/20

  the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV · CPC title

• H04L41/0895

  Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements · CPC title

• H04L41/40

  using virtualisation of network functions or resources, e.g. SDN or NFV entities · CPC title

• H04L67/125 Primary

  involving control of end-device applications over a network · CPC title

• H04L41/0813 Primary

  characterised by the conditions triggering a change of settings · CPC title