System and method for self-clustering edge computing protection

Patent metadata

Field	Value
Publication number	US-12095823-B2
Application number	US-202117547566-A
Country	US
Kind code	B2
Filing date	Dec 10, 2021
Priority date	Dec 10, 2021
Publication date	Sep 17, 2024
Grant date	Sep 17, 2024

Abstract

Systems, computer program products, and methods are described herein for self-clustering computing protocols. The present invention is configured to detect, using a node analysis engine, a change in a network security protocol associated with a first node or device within a distributed network, and transmit instructions for the first node or device to broadcast the change to nearby nodes or devices such that they can act in concert to protect against identifies security issues.

First claim

What is claimed is:

1. A system for self-clustering edge computing, the system comprising:
at least one non-transitory storage device; and
at least one processing device coupled to the at least one non-transitory storage device, wherein the at least one processing device is configured to:
detect, using a node analysis engine, a change in a network security protocol associated with a first node or device within a network environment;
extract information associated with the change in the network security protocol associated with the first node or device;
transmit instructions to the first node or device to broadcast the change and underlying security issue to one or more adjacent nodes or devices;
determine a first set of changes to the network security protocols for the one or more adjacent nodes or devices based on device similarity and network topology distance between the first node or device and the one or more adjacent nodes or devices;
automatically implement the first set of changes to the network security protocols of the one or more adjacent nodes or devices;
initiate a machine learning model on the information associated with the change in the network security protocol associated with the first node or device;
classify, using the machine learning model, the change in the network security protocol associated with the first node into one or more classes;
retrieve one or more preset changes to the network security protocols associated with the one or more classes; and
determine the first set of changes to the network security protocols for the one or more adjacent nodes or devices from the one or more preset changes.

2. The system of claim 1 , wherein adjacent nodes or devices further comprise nodes or devices which are one degree of separation from the first node or device.

3. The system of claim 1 , wherein adjacent nodes or devices further comprise nodes or devices which are a same degree of separation from public devices as the first node or device.

4. The system of claim 1 , the first set of changes to the network security protocols of the one or more adjacent nodes or devices causes the one or more adjacent nodes or devices to begin sharing real-time data analytics information with the first node or device.

5. The system of claim 4 , further configured to implement a second set of changes on the first node or device and the adjacent nodes or devices contemporaneously based on changes in the real-time data analytics information.

6. The system of claim 1 , wherein the at least one processing device is further configured to:
identify one or more adjacent nodes or devices with a second degree of separation from the first node or device in response to detecting the change;
determine a second set of changes to the network security protocols for the one or more adjacent nodes or devices with the second degree of separation from the first node or device based on at least the information associated with the change in the network security protocol of the first node or device and the first set of changes implemented to the network security protocols of the one or more adjacent nodes or devices with the first degree of separation from the first node or device; and
automatically implement the second set of changes to the network security protocols of the one or more adjacent nodes or devices with the second degree of separation from the first node.

7. A computer program product for self-clustering edge computing, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:
detect, using a node analysis engine, a change in a network security protocol associated with a first node or device within a network environment;
extract information associated with the change in the network security protocol associated with the first node or device;
transmit instructions to the first node or device to broadcast the change and underlying security issue to one or more adjacent nodes or devices;
determine a first set of changes to the network security protocols for the one or more adjacent nodes or devices based on device similarity and network topology distance between the first node or device and the one or more adjacent nodes or devices;
automatically implement the first set of changes to the network security protocols of the one or more adjacent nodes or devices;
initiate a machine learning model on the information associated with the change in the network security protocol associated with the first node or device;
classify, using the machine learning model, the change in the network security protocol associated with the first node into one or more classes;
retrieve one or more preset changes to the network security protocols associated with the one or more classes; and

determine the first set of changes to the network security protocols for the one or more adjacent nodes or devices from the one or more preset changes.

8. The computer program product of claim 7 , wherein adjacent nodes or devices further comprise nodes or devices which are one degree of separation from the first node or device.

9. The computer program product of claim 7 , wherein adjacent nodes or devices further comprise nodes or devices which are a same degree of separation from public devices as the first node or device.

10. The computer program product of claim 7 , wherein the first set of changes to the network security protocols of the one or more adjacent nodes or devices causes the one or more adjacent nodes or devices to begin sharing real-time data analytics information with the first node or device.

11. The computer program product of claim 10 , further configured to implement a second set of changes on the first node or device and the adjacent nodes or devices contemporaneously based on changes in the real-time data analytics information.

12. The computer program product of claim 7 , wherein the at least one processing device is further configured to:
identify one or more adjacent nodes or devices with a second degree of separation from the first node or device in response to detecting the change;
determine a second set of changes to the network security protocols for the one or more adjacent nodes or devices with the second degree of separation from the first node or device based on at least the information associated with the change in the network security protocol of the first node or device and the first set of changes implemented to the network security protocols of the one or more adjacent nodes or devices with the first degree of separation from the first node or device; and
automatically implement the second set of changes to the network security protocols of the one or more adjacent nodes or devices with the second degree of separation from the first node.

13. A method for self-clustering edge computing, the method comprising:
detect, using a node analysis engine, a change in a network security protocol associated with a first node within a distributed network;
detect, using a node analysis engine, a change in a network security protocol associated with a first node or device within a network environment;
extract information associated with the change in the network security protocol associated with the first node or device;
transmit instructions to the first node or device to broadcast the change and underlying security issue to one or more adjacent nodes or devices;
determine a first set of changes to the network security protocols for the one or more adjacent nodes or devices based on device similarity and network topology distance between the first node or device and the one

Assignees

• Bank Of America

Inventors

• Sloane Brandon
• Ogrinz Michael

Classifications

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/205 Primary

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title