Method and procedure for generating reputation scores for iot devices based on distributed analysis

Patent metadata

Field	Value
Publication number	US-2020177467-A1
Application number	US-201816207771-A
Country	US
Kind code	A1
Filing date	Dec 3, 2018
Priority date	Dec 3, 2018
Publication date	Jun 4, 2020
Grant date	—

Abstract

Aspects of the subject disclosure may include, for example, a method including obtaining a first set of votes from devices that are registered and enabled by a registration system to form a first network communicating with a processing system. The first set of votes relate to performance of a target device and indicate conformance to performance criteria for the first network. The processing system receives a reputation score for the target device from the registration system, and receives a second set of votes regarding target device performance from voting systems over a second network comprising a peer network including the processing system and the voting systems. The first and second sets of votes and the reputation score are aggregated to generate an updated reputation score for the target device. The registration system disables the target device when the reputation score falls below a threshold. Other embodiments are disclosed.

First claim

What is claimed is:

1 . A method, comprising:
obtaining, by a processing system including a processor, a first set of votes from a plurality of devices, the plurality of devices registered at and enabled by a registration system to form a first network communicating with the processing system, the first set of votes regarding performance of a target device and indicating a degree of conformance of the target device to performance criteria for the first network; receiving, by the processing system, a reputation score for the target device from the registration system; receiving, by the processing system, a second set of votes regarding performance of the target device from a plurality of voting systems over a second network, the second network comprising a peer network including the processing system and the plurality of voting systems; aggregating, by the processing system, the first set of votes, the reputation score, and the second set of votes to generate an updated reputation score for the target device; and transmitting, by the processing system, the updated reputation score for the target device to the registration system, wherein the registration system disables the target device responsive to the updated reputation score being below a predetermined threshold.

2 . The method of claim 1 , wherein the first set of votes from the plurality of devices are weighted according to the respective reputation scores of the plurality of devices.

3 . The method of claim 1 , wherein subsequent to disabling the target device, the registration system re-enables the target device according to a reputation score aging procedure based on an elapsed time since the disabling.

4 . The method of claim 3 , wherein the reputation score aging procedure applies a half-life value to determine a new reputation score for the target device.

5 . The method of claim 1 , wherein subsequent to disabling the target device, the registration system re-enables the target device responsive to receiving a notification that a remedial action has been performed for the target device.

6 . The method of claim 1 , wherein the processing system comprises one of the plurality of voting systems, and wherein the processing system is uniquely associated with the target device.

7 . The method of claim 6 , wherein the processing system is uniquely associated with the target device in accordance with a hashing procedure using a first identifier of the target device and a second identifier for the processing system.

8 . The method of claim 1 , wherein the first set of votes is obtained via a multicast message.

9 . The method of claim 1 , wherein the first set of votes is obtained via a voting proxy.

10 . The method of claim 9 , wherein the voting proxy comprises the registration system.

11 . The method of claim 1 , wherein the aggregated votes comprise votes received from a source external to the first network and the second network.

12 . The method of claim 1 , wherein the reputation score received from the registration system is based at least in part on information regarding the target device provided to the registration system by a source external to the first network and the second network.

13 . A device comprising:
a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations comprising: obtaining a first set of votes from a plurality of devices, the plurality of devices registered at and enabled by a registration system to form a first network communicating with the processing system, the first set of votes regarding performance of a target device and indicating a degree of conformance of the target device to performance criteria for the first network; receiving a reputation score for the target device from the registration system; receiving a second set of votes regarding performance of the target device from a plurality of voting systems over a second network, the second network comprising a peer network including the processing system and the plurality of voting systems, the processing system being uniquely associated with the target device; aggregating the first set of votes, the reputation score, and the second set of votes to generate an updated reputation score for the target device; and transmitting the updated reputation score for the target device to the registration system, wherein the registration system disables the target device responsive to the updated reputation score being below a predetermined threshold, and wherein subsequent to disabling the target device, the registration system re-enables the target device according to a reputation score aging procedure.

14 . The device of claim 13 , wherein the first set of votes from the plurality of devices are weighted according to the respective reputation scores of the plurality of devices.

15 . The device of claim 13 , wherein the registration system re-enables the target device responsive to receiving a notification that a remedial action has been performed for the target device.

16 . The device of claim 13 , wherein the first set of votes is obtained via a multicast message.

17 . The device of claim 13 , wherein the aggregated votes comprise votes received from a source external to the first network and the second network.

18 . A machine-readable medium comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations comprising:
obtaining a first set of votes from a plurality of devices, the plurality of devices registered at and enabled by a registration system to form a first network communicating with the processing system, the first set of votes regarding performance of a target device and indicating a degree of conformance of the target device to performance criteria for the first network, wherein the first set of votes is obtained via a multicast message; receiving a reputation score for the target device from the registration system; receiving a second set of votes regarding performance of the target device from a plurality of voting systems over a second network, the second network comprising a peer network including the processing system and the plurality of voting systems, the processing system being uniquely associated with the target device; aggregating the first set of votes, the reputation score, and the second set of votes to generate an updated reputation score for the target device; and transmitting the updated reputation score for the target device to the registration system, wherein the registration system disables the target device responsive to the updated reputation score being below a predetermined threshold.

19 . The machine-readable medium of claim 18 , wherein the first set of votes from the plurality of devices are weighted according to the respective reputation scores of the plurality of devices.

20 . The machine-readable medium of claim 18 , wherein the processing system is uniquely associated with the target device in accordance with a hashing procedure using a first identifier of the target device and a second identifier for the processing system.

Assignees

• At & T Ip I Lp

Inventors

• Ramachandran Jayaraman
• Levy Donald
• Serban Cristina
• Gross David

Classifications

• H04L43/08

  Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters · CPC title

• H04L41/145 Primary

  involving simulating, designing, planning or modelling of a network · CPC title

• H04L41/142

  using statistical or mathematical methods · CPC title

• H04L43/04

  Processing captured monitoring data, e.g. for logfile generation · CPC title

• H04L41/20

  Network management software packages · CPC title