System and method for determining component version compatibility across a device ecosystem

• US 10,248,414 B2
• Filed: 05/10/2018
• Issued: 04/02/2019
• Est. Priority Date: 09/10/2013
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Duo Security Incorporated (Cisco Systems, Inc.)
• Inventors: Oberheide, Jon, Song, Douglas
• Primary Examiner(s): Chavis, John Q
• Application Number:
  US15/975,968
• Publication Number:
  US 20180260214A1
• Time in Patent Office: 327 Days
• Field of Search: 717122
• CPC Class Codes: G06F 16/2455 Query execution
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files

Abstract

A system and method that include collecting device version profiles from a plurality of device sources; classifying the device version profiles into a device profile repository; receiving a component version query request; querying the device profile repository according to the version query request; and responding to the query request with results of the query.

Claims

1. A method comprising:

at a network connected platform, collecting component version data from a plurality of device instances;

constructing a device version dataset for each device instance of the plurality of device instances based on the component version data;

classifying the device version dataset for each device instance into a device profile repository;

at the network connected platform, querying the device profile repository in response to a component version query request from a requesting entity, wherein the component version query request comprises component version specification data; and

sending, to the requesting entity in response to the component version query request, query response data relating to results of the querying the device profile repository.

2. The method of claim 1, wherein collecting component version data from a plurality of device instances comprises collecting at least one of operating system version data, firmware version data, and application version data.

3. The method of claim 1, wherein collecting component version data from a plurality of device instances comprises collecting at least one of carrier data, location data, and user configuration data.

4. The method of claim 1, wherein collecting component version data from a plurality of device instances comprises collecting hardware version identifiers and configuration data.

5. The method of claim 1, wherein the query response data specifies at least one recommended compatible device update.

6. The method of claim 5, wherein the compatible device update comprises a vulnerability update.

7. The method of claim 1, wherein the query response data specifies at least one recommended compatible application.

8. The method of claim 1, wherein a device version dataset includes a set of physical components of a configurable hardware platform, and wherein the query response data specifies at least one recommended compatible physical device component.

9. The method of claim 1, wherein the component version query request includes a first device version dataset of a first device instance.

10. The method of claim 9, wherein the first device version dataset of the first device instance includes software version identifiers, at least one carrier identifier, and at least one hardware identifier.

11. The method of claim 9, wherein the results of the component version query include a set of component references compatible with the first device version dataset.

12. The method of claim 1, wherein collecting component version data from a plurality of device instances further comprises periodically collecting component version data.

13. The method of claim 1, further comprising augmenting the device dataset repository with component version annotation.

14. The method of claim 1, further comprising providing a collection module to a plurality of device instances, and wherein collecting the component version data from a plurality of device instances is performed by the collection module.

15. The method of claim 14, wherein the collection module comprises an application.

16. The method of claim 14, wherein the collection module comprises a development kit.

17. A system comprising:

a device profile repository;

a network connected platform that;

collects component version data from a plurality of device instances;

constructs a device version dataset for each device instance of the plurality of device instances based on the component version data;

classifies the device version dataset for each device instance into the device profile repository;

queries the device profile repository in response to a component version query request from a requesting entity, wherein the component version query request comprises component version specification data; and

sends, to the requesting entity in response to the component version query request, query response data relating to results of the querying the device profile repository.