The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Sep. 17, 2019

Filed:

Jan. 17, 2017
Applicant:

Cyiot Ltd, Tel-Aviv, IL;

Inventors:

Daniel Moscovici, Netanya, IL;

Natan Bandler, Tel-Aviv, IL;

Assaf Schuster, Haifa, IL;

Assignee:

Cyiot LTD, Tel-Aviv, IL;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04W 12/10 (2009.01); H04L 12/24 (2006.01); H04W 12/12 (2009.01); H04L 12/26 (2006.01); H04W 84/04 (2009.01); H04W 84/12 (2009.01); H04W 4/80 (2018.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); H04L 43/028 (2013.01); H04L 43/062 (2013.01); H04L 63/0263 (2013.01); H04L 63/1425 (2013.01); H04W 12/10 (2013.01); H04W 12/12 (2013.01); H04W 4/80 (2018.02); H04W 84/042 (2013.01); H04W 84/12 (2013.01);
Abstract

Distributed techniques for detecting atypical or malicious wireless communications activity are disclosed. A server can iteratively generate sets of filters based at least in part upon observation data received from one or more Protects. The filters can be used by the Protect(s) to distinguish between sniffed wireless messages that are to be discarded and those that are to be reported to the server. The server can provide the generated sets of filters to the Protect(s) to cause the Protect(s) to process additional sniffed wireless messages utilizing the one or more sets of filters. Updated filters can cause fewer subsequent sniffed wireless messages to be reported than would have been reported by use of previous filters. Limited activity reporting by the Protect(s) enables a reduced communication load compared to full activity reporting without degrading the ability of the server to detect the atypical or malicious wireless communications activity.


Find Patent Forward Citations

Loading…