Network device validation and management

Patent metadata

Field	Value
Publication number	US-11005845-B2
Application number	US-201816164635-A
Country	US
Kind code	B2
Filing date	Oct 18, 2018
Priority date	Oct 18, 2018
Publication date	May 11, 2021
Grant date	May 11, 2021

Abstract

A second device seeking to access a network can be detected using a first device communicatively coupled to the network. Responsive to detecting the second device seeking to access the network, the first device can be caused to communicatively uncouple from the network and whether the second device poses a risk of corrupting the network's intended functioning if the second device accesses the network can be determined by the first device.

First claim

That which is claimed is:

1. A method, comprising:
detecting, using a first device communicatively coupled to a network, a second device seeking to access the network; and
responsive to detecting the second device seeking to access the network, causing the first device to communicatively uncouple from the network and determining, by the first device, whether the second device poses a risk of corrupting intended functioning of the network if the second device accesses the network.

2. The method of claim 1 , further comprising establishing, by the first device, a protected zone that isolates the network from the second device.

3. The method of claim 2 , further comprising performing a diagnostic test with the first device operating within the protected zone, the diagnostic test comprising:
issuing at least one instruction to the second device causing the second device to perform at least one predetermined function;
monitoring, using the first device, the second device's performance of the at least one predetermined function; and
assessing data indicating performance by the second device of the at least one predetermined function.

4. The method of claim 1 , further comprising blocking the second device seeking to join the network from accessing the network responsive to the first device determining that the second device presents a risk of corrupting the intended functioning of the network.

5. The method of claim 1 , further comprising using the first device to grant the second device access to the network responsive to the first device determining that the second device does not present a risk of corrupting the intended functioning of the network.

6. The method of claim 5 , wherein granting the second device access to the network comprises registering the second device with a network server communicatively coupled to the network.

7. The method of claim 1 , further comprising performing a diagnostic test on the first device to determine whether the first device presents a risk of corrupting the intended functioning of the network if the first device communicatively re-couples with the network after communicating with the second device.

8. A system comprising:
a processor programmed to initiate executable operations including:
detecting, using a first device communicatively coupled to a network, a second device seeking to access the network; and
responsive to detecting the second device seeking to access the network, causing the first device to communicatively uncouple from the network and determining, by the first device, whether the second device poses a risk of corrupting intended functioning of the network if the second device accesses the network.

9. The system of claim 8 , the executable operations further comprising establishing, by the first device, a protected zone that isolates the network from the second device.

10. The system of claim 9 , the executable operations further comprising performing a diagnostic test with the first device operating within the protected zone, the diagnostic test comprising:
issuing at least one instruction to the second device causing the second device to perform at least one predetermined function;
monitoring, using the first device, the second device's performance of the at least one predetermined function; and
assessing data indicating performance by the second device of the at least one predetermined function.

11. The system of claim 8 , the executable operations further comprising blocking the second device seeking to join the network from accessing the network responsive to the first device determining that the second device presents a risk of corrupting the intended functioning of the network.

12. The system of claim 8 , the executable operations further comprising using the first device to grant the second device access to the network responsive to the first device determining that the second device does not present a risk of corrupting the intended functioning of the network.

13. The system of claim 12 , wherein granting the second device access to the network comprises registering the second device with a network server communicatively coupled to the network.

14. The system of claim 8 , the executable operations further comprising performing a diagnostic test on the first device to determine whether the first device presents a risk of corrupting the intended functioning of the network if the first device communicatively re-couples with the network after communicating with the second device.

15. A computer program product, comprising:
a computer readable storage medium having program code stored thereon, the program code executable by a data processing system to initiate operations including:
detecting, using a first device communicatively coupled to a network, a second device seeking to access the network; and
responsive to detecting the second device seeking to access the network, causing the first device to communicatively uncouple from the network and determining, by the first device, whether the second device poses a risk of corrupting intended functioning of the network if the second device accesses the network.

16. The computer program product of claim 15 , the operations further comprising establishing, by the first device, a protected zone that isolates the network from the second device.

17. The computer program product of claim 16 , the operations comprising performing a diagnostic test with the first device operating within the protected zone, the diagnostic test comprising:
issuing at least one instruction to the second device causing the second device to perform at least one predetermined function;
monitoring, using the first device, the second device's performance of the at least one predetermined function; and
assessing data indicating performance by the second device of the at least one predetermined function.

18. The computer program product of claim 15 , the operations further comprising blocking the second device seeking to join the network from accessing the network responsive to the first device determining that the second device presents a risk of corrupting the intended functioning of the network.

19. The computer program product of claim 15 , the operations further comprising using the first device to grant the second device access to the network responsive to the first device determining that the second device does not present a risk of corrupting the intended functioning of the network.

20. The computer program product of claim 15 , the operations further comprising performing a diagnostic test on the first device to determine whether the first device presents a risk of corrupting the intended functioning of the network if the first device communicatively re-couples with the network after communicating with the second device.

Assignees

• IBM
• Int Business Machines Corporation Armonk Ny

Inventors

• Fox Jeremy R
• Anders Kelley
• Boss Gregory J
• Rakshit Sarbajit K

Classifications

• H04L63/126

  the source of the received data · CPC title

• H04L43/065

  related to network devices · CPC title

• H04L43/04

  Processing captured monitoring data, e.g. for logfile generation · CPC title

• H04W12/08 Primary

  Access security · CPC title

• H04L43/0817

  by checking functioning · CPC title