US 11,658,977 B2
Internet of Things security system
Nikhil Sainath Kale, Santa Clara, CA (US); M. David Hanes, Lewisville, NC (US); Ana Peric, Hallbergmoos (DE); and Gonzalo Salgueiro, Raleigh, NC (US)
Assigned to CISCO TECHNOLOGY, INC., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Sep. 28, 2020, as Appl. No. 17/34,714.
Application 17/034,714 is a continuation of application No. 15/898,590, filed on Feb. 18, 2018, granted, now 10,848,495.
Prior Publication US 2021/0029130 A1, Jan. 28, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 21/60 (2013.01); G06F 21/46 (2013.01); G06F 21/44 (2013.01)
CPC H04L 63/102 (2013.01) [G06F 21/46 (2013.01); G06F 21/604 (2013.01); H04L 63/083 (2013.01); H04L 63/0876 (2013.01); H04L 63/101 (2013.01); G06F 21/44 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A device comprising:
a processor; and
a memory to store data used by the processor, wherein the processor is operative to run a manufacturer usage description (MUD) controller operative to:
obtain a MUD profile of an Internet of Things (IoT) device from a MUD server, the MUD profile of the IoT device including: access rights of the IoT device, a recommended or required device password complexity of the IoT device, and any one or more of the following:
a default device username and or a default device password of the IoT device;
at least one service that should be enabled or disabled on the IoT device; or
allowed security protocols and/or ciphers for communication to and/or from the IoT device; and
enforce security of the IoT device according to the MUD profile of the IoT device including checking whether a password complexity of a current device password of the IoT device is compliant with the recommended or required device password complexity.