System and method for determining component version compatibility across a device ecosystem

• US 9,996,343 B2
• Filed: 05/12/2016
• Issued: 06/12/2018
• Est. Priority Date: 09/10/2013
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Duo Security Incorporated (Cisco Systems, Inc.)
• Inventors: Oberheide, Jon, Song, Douglas
• Primary Examiner(s): Chavis, John
• Application Number:
  US15/152,916
• Publication Number:
  US 20160259640A1
• Time in Patent Office: 761 Days
• Field of Search: 717122
• CPC Class Codes: G06F 16/2455 Query execution
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files

Abstract

A system and method that include collecting device version profiles from a plurality of device sources; classifying the device version profiles into a device profile repository; receiving a component version query request; querying the device profile repository according to the version query request; and responding to the query request with results of the query.

Claims

1. A method comprising:

at a network connected platform, collecting component version information from a plurality of device instances;

for each device instance, constructing a device version profile from the component version information;

classifying the device version profiles into a device profile repository;

at a network connected platform, receiving a component version query request, the component version query request including a set of constraints defined by specified component version information;

querying the device profile repository according to the component version query request; and

responding to the query request with results of the query.

2. The method of claim 1, wherein collecting component version information from a plurality of device instances comprises collecting at least one of operating system version information, firmware version information, and application version information.

3. The method of claim 1, wherein collecting component version information from a plurality of device instances comprises collecting at least one of carrier information, location information, and user configuration information.

4. The method of claim 1, wherein collecting component version information from a plurality of device instances comprises collecting hardware version identifiers and configuration information.

5. The method of claim 1, wherein the response specifies at least one recommended compatible device update.

6. The method of claim 5, wherein the compatible device update is a vulnerability update.

7. The method of claim 1, wherein the response specifies at least one recommended compatible application.

8. The method of claim 1, wherein a device version profile includes a set of physical components of a configurable hardware platform, and wherein the response specifies at least one recommended compatible physical device component.

9. The method of claim 1, wherein the component version query request includes a first device version profile of a first device instance.

10. The method of claim 9, wherein the first device version profile of the first device instance includes software version identifiers, at least one carrier identifier, and at least one hardware identifier.

11. The method of claim 9, wherein the results of the component version query include a set of component references compatible with the first device version profile.

12. The method of claim 1, wherein collecting component version information from a plurality of device instances further comprises periodically collecting component version information.

13. The method of claim 1, further comprising augmenting the device profile repository with component version annotation.

14. The method of claim 1, further comprising providing a collection module to a plurality of device instances, and wherein collecting the component version information from a plurality of device instances is performed by the collection module.

15. The method of claim 14, wherein the collection module is an application.

16. The method of claim 14, wherein the collection module is a development kit.