System and method for linking various protocols for controlling devices with their owners

• US 8,966,049 B1
• Filed: 04/10/2014
• Issued: 02/24/2015
• Est. Priority Date: 12/05/2013
• Status: Active Grant

• Current Assignee: Lab A.O. Kaspersky
• Original Assignee: Kaspersky Lab ZAO
• Inventors: Filatov, Konstantin M., Yablokov, Victor V., Eliseev, Evgeny Y., Minchenko, Denis A., Pravdivy, Andrey A.
• Primary Examiner(s): Maung, Zarni
• Application Number:
  US14/250,060
• Time in Patent Office: 320 Days
• Field of Search: 709/203, 709223-229, 709/250
• US Class Current: 709/223
• CPC Class Codes: H04L 41/022 Multivendor or multi-standard integration
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route

Abstract

System and methods for the association of one or more devices over a computer network. A management agent module running on a device coupled to the network is configured to communicate with a server agent module running on a management server. An association linking the management agent with the server agent is created by the management server. Associations with device users and the agents managing the devices can also be made. Associations allow network administration commands and policy controls to be issued at a user, rather than device, level.

Claims

1. A method for associating one or more devices over a computer network, the method being executable by a computer system that includes management server hardware, and comprising:

detecting, by the computer system, an unregistered management agent accessing the computer network, the unregistered management agent implemented by device hardware and stored in a device non-transitory storage medium;

gathering, by the computer system, information about the device on which unregistered management agent was detected;

determining, by the computer system, an identification of the device based on at least the information gathered about the device;

determining, by the computer system, an identification of a user of the device; and

associating, by the computer system, the unregistered management agent with the user.

2. The method of claim 1, wherein detecting an unregistered management agent comprises detecting the unregistered management agent upon an attempt to access the management server.

3. The method of claim 1, wherein detecting an unregistered management agent comprises detecting the unregistered management agent by polling the one or more devices connected to the computer network.

4. The method of claim 1, further comprising gathering information about the unregistered management agent.

5. The method of claim 1, wherein determining an identification of the device comprises recognizing a device known on the computer network by comparing and matching the information about the device to data stored in a database operably coupled to the management server.

6. The method of claim 1, wherein determining an identification of the device comprises entering the information about the device in a database operably coupled to the management server.

7. The method of claim 1, wherein determining an identification of the user comprises comparing and matching the identity of the user to data stored in a database operably coupled to the management server.

8. The method of claim 1, wherein determining an identification of the user comprises entering the identity of the user in a database operably coupled to the management server.

9. The method of claim 1, further comprising associating a second unregistered management agent with the user.