US 12,348,397 B2
Automated identification of anomalous devices
Kar-Fai Tse, Peachtree Corners, GA (US); Chaoting Xuan, Duluth, GA (US); Ravish Chawla, Chamblee, GA (US); Erich Stuntebeck, Johns Creek, GA (US); and Stephen Jonathan Parry-Barwick, Sydney (AU)
Assigned to Omnissa, LLC, Mountain View, CA (US)
Filed by Omnissa, LLC, Mountain View, CA (US)
Filed on May 10, 2023, as Appl. No. 18/315,049.
Application 18/315,049 is a continuation of application No. 16/918,033, filed on Jul. 1, 2020, granted, now 11,652,832.
Prior Publication US 2023/0275918 A1, Aug. 31, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 43/0817 (2022.01); H04L 9/40 (2022.01); H04L 41/0604 (2022.01); H04L 41/0813 (2022.01); H04L 41/147 (2022.01); H04L 41/149 (2022.01); H04L 43/028 (2022.01); H04L 43/0876 (2022.01); H04L 43/10 (2022.01); H04L 43/16 (2022.01); H04W 12/121 (2021.01); H04W 12/37 (2021.01)
CPC H04L 43/0817 (2013.01) [H04L 41/0627 (2013.01); H04L 41/0813 (2013.01); H04L 41/147 (2013.01); H04L 41/149 (2022.05); H04L 63/102 (2013.01); H04L 63/1416 (2013.01); H04L 63/1425 (2013.01); H04L 63/1441 (2013.01); H04L 63/20 (2013.01); H04W 12/121 (2021.01); H04W 12/37 (2021.01); H04L 43/028 (2013.01); H04L 43/0876 (2013.01); H04L 43/10 (2013.01); H04L 43/16 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A system for managing a plurality of client devices from a management service, comprising:
a computing device comprising a processor and a memory, the computing device executing the management service that manages client devices that have been enrolled with the management service and have installed therein a management component for communicating with the management service; and
machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
store, by the management service in a command queue, one or more commands designated for one or more client devices of the plurality of client devices;
obtain a set of device check-ins associated with the plurality of client devices over a first time period, wherein, during each device check-in of the set of device check-ins, the management component on a client device retrieves the one or more commands designated for the client device from the command queue and executes the retrieved one or more commands on the client device;
calculate a variance of the set of device check-ins based on a quantity of device check-ins that correspond to individual client devices;
identify an anomalous device based upon the quantity of device check-ins for the anomalous device exceeding a variance threshold; and
publish a notification to a notification channel in response to identifying the anomalous device.