Search Patents
  • Creation and maintenance of self-organizing communication orbits in distributed networks
    Patent number: 9059961
    Abstract: In one aspect, machines in a managed network implements a set of rules that cause individual machines to directly interact with only a small number of machines in the network (i.e., a local neighborhood within the network), while the independent local actions of the individual machines collectively cause the individual machines to be self-organized into one or more communication orbits without any global control or coordination by a server or an administrator. The communication orbits are used for supporting network, security and system management communications in the managed network.
    Type: Grant
    Filed: March 12, 2013
    Date of Patent: June 16, 2015
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • Data caching and distribution in a local network
    Patent number: 9769275
    Abstract: A data caching and distribution method, performed by a plurality of in a linear communication orbit, includes generating a data request by a first machine to request specific data, and passing the data request along a data request path that tracks the linear communication orbit until the request is received at a second machine, in the linear communication orbit, that returns the specific data in response to the data request. The method includes, at a third machine between the second machine and the first machine in the linear communication orbit, conditionally storing the specific data in a local cache of the third machine according to a data caching method.
    Type: Grant
    Filed: November 26, 2014
    Date of Patent: September 19, 2017
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • System, security and network management using self-organizing communication orbits in distributed networks
    Patent number: 10674486
    Abstract: In one aspect, machines in a managed network implements a set of rules that cause individual machines to directly interact with only a small number of machines in the network (i.e., a local neighborhood within the network), while the independent local actions of the individual machines collectively cause the individual machines to be self-organized into one or more communication orbits without any global control or coordination by a server or an administrator. The communication orbits are used for supporting network, security and system management communications in the managed network.
    Type: Grant
    Filed: November 16, 2018
    Date of Patent: June 2, 2020
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • System, security and network management using self-organizing communication orbits in distributed networks
    Patent number: 9246977
    Abstract: In one aspect, machines in a managed network implements a set of rules that cause individual machines to directly interact with only a small number of machines in the network (i.e., a local neighborhood within the network), while the independent local actions of the individual machines collectively cause the individual machines to be self-organized into one or more communication orbits without any global control or coordination by a server or an administrator. The communication orbits are used for supporting network, security and system management communications in the managed network.
    Type: Grant
    Filed: March 12, 2013
    Date of Patent: January 26, 2016
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • Data caching, distribution and request consolidation in a local network
    Patent number: 10412188
    Abstract: A data caching and distribution method, performed by a plurality of computational machines in a linear communication orbit, includes generating a data request by a first machine to request specific data, and passing the data request along a data request path that tracks the linear communication orbit until the request is received at a second machine, in the linear communication orbit, that returns the specific data in response to the data request. The method includes, at a third machine between the second machine and the first machine in the linear communication orbit, conditionally storing the specific data in a local cache of the third machine according to a data caching method.
    Type: Grant
    Filed: September 12, 2017
    Date of Patent: September 10, 2019
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • System, security and network management using self-organizing communication orbits in distributed networks
    Patent number: 10136415
    Abstract: In one aspect, machines in a managed network implements a set of rules that cause individual machines to directly interact with only a small number of machines in the network (i.e., a local neighborhood within the network), while the independent local actions of the individual machines collectively cause the individual machines to be self-organized into one or more communication orbits without any global control or coordination by a server or an administrator. The communication orbits are used for supporting network, security and system management communications in the managed network.
    Type: Grant
    Filed: January 22, 2016
    Date of Patent: November 20, 2018
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • Cost prioritized evaluations of indicators of compromise
    Patent number: 10372904
    Abstract: A method for evaluating indicators of compromise (IOCs) is performed at a device having one or more processors and memory. The method includes receiving respective specifications of a plurality of IOCs, wherein the respective specifications of each IOC of the plurality of IOCs includes a respective cost associated with evaluating the IOC. The method further includes dynamically determining an order for evaluating the plurality of IOCs based on the respective costs associated with the plurality of IOCs, and determining whether a threat is present based on results for evaluating one or more of the plurality of IOCs in accordance with the dynamically determined order, instead of an order by which the plurality of IOCs have been received at the device.
    Type: Grant
    Filed: July 20, 2016
    Date of Patent: August 6, 2019
    Assignee: TANIUM INC.
    Inventors: Christian L. Hunt, Thomas R. Gissel, Thomas W. Savage
  • Distributed data analysis for streaming data sources
    Patent number: 11700303
    Abstract: A server system, coupled to a linear communication orbit, has a plurality of function modules. Each function module is configured to collect data from machines located at nodes of the linear communication orbit, process collected data according to a schema definition to generate result data, and store the result data in a database. Data collection requests, based on the schema definition, are sent through the linear communication orbit to collecting data from a set of machines via the linear communication orbit. In some embodiments, a central data management module of the one or more servers is configured to provide the schema definition to and receive result data reported from the function modules.
    Type: Grant
    Filed: October 15, 2021
    Date of Patent: July 11, 2023
    Assignee: TANIUM INC.
    Inventors: Ryan S. Richards, John R. Coates, James B. Evans
  • Parallel distributed network management
    Patent number: 9729429
    Abstract: A method of parallel processing by networked devices, in which distributed data in a network is accessed in parallel to provide results. Commands and queries by a user station define a set of such distributed data. The networked devices access the distributed data in portions, individually process each portion, conduct peer-to-peer communication to aggregate results from processing each portion, and individually determine whether and when to report results. Making effective use of network assets (such as processing and storage at each node), making effective use of concurrency of network assets, limiting bandwidth use between network assets and user stations, and limiting use of assets (such as processing and storage) at user stations.
    Type: Grant
    Filed: October 31, 2014
    Date of Patent: August 8, 2017
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • Parallel distributed network management
    Patent number: 8903973
    Abstract: A method of parallel processing by networked devices, in which distributed data in a network is accessed in parallel to provide results. Commands and queries by a user station define a set of such distributed data. The networked devices access the distributed data in portions, individually process each portion, conduct peer-to-peer communication to aggregate results from processing each portion, and individually determine whether and when to report results. Making effective use of network assets (such as processing and storage at each node), making effective use of concurrency of network assets, limiting bandwidth use between network assets and user stations, and limiting use of assets (such as processing and storage) at user stations.
    Type: Grant
    Filed: May 13, 2011
    Date of Patent: December 2, 2014
    Assignee: Tanium Inc.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • Fast detection and remediation of unmanaged assets
    Patent number: 10148536
    Abstract: A first managed machine of a plurality of managed machines arranged in a linear communication orbit based on a predefined order of respective machine identifiers of the managed machines scans for live unmanaged machines within a selected portion of the network that is associated with a first range of machine identifiers that includes identifiers between the respective identifiers of the first managed machine and a respective neighbor machine of the first managed machine, determines whether the remedial instruction specifies a respective remedial operation applicable to the one or more live unmanaged machines that have been detected within the selected portion of the network, and requests the one or more live unmanaged machines to execute the respective remedial operation specified by the remedial instruction.
    Type: Grant
    Filed: August 24, 2017
    Date of Patent: December 4, 2018
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • Parallel distributed network management
    Patent number: 10708116
    Abstract: In a network of a plurality of machines and a server, the machines have self-organized into a linearly ordered sequence in accordance with a predefined order of their respective machine identifiers. The linearly ordered sequence includes one or more local segments each include a first machine followed by a sequence of second machines. A query regarding management information of a local segment is injected into the network at the first machine of the local segment. The query is forwarded along the local segment, and each machine in the local segment responds to the query by adding its own local information to any answers already accumulated in the payload of the query. A second machine in the local segment sends a report message containing aggregated management information that has been collected in the payload of the query to the server.
    Type: Grant
    Filed: August 3, 2017
    Date of Patent: July 7, 2020
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • Local data caching for data transfers on a network of computational devices
    Patent number: 9667738
    Abstract: In accordance with some embodiments, a computational machine having one or more processors, a local cache and memory receives from a first machine a data request that is used to request specific data. The computational machine determines whether the computational machine stores the specific data in the local cache. In accordance with a determination that the computational machine does not store the specific data in the local cache, the computational machine responds to the data request by passing the data request to a second machine and returning the specific data to the first machine when the second machine returns the specific data to the computational machine. Additionally, the computational machine determines whether to store the returned specific data in the local cache according to a data caching method.
    Type: Grant
    Filed: November 26, 2014
    Date of Patent: May 30, 2017
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • Parallel distributed network management
    Patent number: 11258654
    Abstract: Decoupling of a first machine from a plurality of machines in a network is disclosed. Each machine has a machine identifier. The plurality of machines are organized into a linearly ordered sequence in accordance with a predefined order of the machine identifiers. The first machine is configured to receive a query from a preceding machine and propagate the query to a succeeding machine in the linearly ordered sequence. Prior to decoupling from the network, the first machine informs respective presence of a first subset of machines to a second subset of machines that are not overlapping with the first subset of machines. The first subset of machines includes a machine having a lower machine identifier relative to the machine identifier of the first machine, and the second subset of machines includes a machine having a higher machine identifier relative to the machine identifier of the first machine.
    Type: Grant
    Filed: June 30, 2020
    Date of Patent: February 22, 2022
    Assignee: Tanium Inc.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
  • System and method for performing event inquiries in a network
    Patent number: 10095864
    Abstract: A remote server dispatches an instruction packet to a node in a network through a linear communication orbit formed by a collection of nodes. The instruction packet propagates from node to node along the linear communication orbit until reaching the node. The instruction packet includes instructions for establishing a direct duplex connection between the node and the remote server. After dispatching the instruction packet to the node through the linear communication orbit, the remote server receives, from the node, a request for establishing the direct duplex connection. In response to receiving the request from the node, the remote server establishes the direct duplex connection. After establishing the direct duplex connection, the remote server issues instructions to the node to upload local data from the node to the remote server through the direct duplex connection.
    Type: Grant
    Filed: July 20, 2016
    Date of Patent: October 9, 2018
    Assignee: TANIUM INC.
    Inventors: Christian L. Hunt, Thomas R. Gissel, Aaron Tarter, Daniel Floyd, Benjamin Hobbs
  • Large-scale network querying and reporting
    Patent number: 8904039
    Abstract: A server receives “registration” messages from nodes in a network, sufficiently infrequently to prevent overburden. Registration messages include information about registering nodes, other nodes, or node relationships. The server sends “instruction” messages to registering nodes, requesting information about the network. Each registering node obtains the requested information, and forwards those messages to other nodes, which act similarly. Nodes receiving instruction messages sometimes send “reporting” messages to the server, providing information it originally requested. The server thus receives detailed information about the network, without communicating with too many nodes, and without aggregating too much of that information. The server can interact with users using only resources growing at O(1) with the size of the network.
    Type: Grant
    Filed: April 12, 2011
    Date of Patent: December 2, 2014
    Assignee: Tanium Inc.
    Inventors: Orion Hindawi, David Hindawi, Peter Lincroft, Lisa Lippincott
  • Software application updating in a local network
    Patent number: 10873645
    Abstract: A method of updating software, performed by respective machines in a linear communication orbit includes, at a local server executed by a respective machine, receiving, via the linear communication orbit, update metadata. At an update module executed by the respective machine, an update module evaluates software version information using the update metadata to determine a set of one or more updates to be applied to one or more software programs. A patch module sends, via the linear communication orbit, requests for one or more software update files corresponding to the set of one or more updates, and receives the one or more software update files corresponding to the set of one or more updates. The update module then updates the one or more of the software programs by applying the received one or more software update files to the one or more of the software programs.
    Type: Grant
    Filed: September 9, 2019
    Date of Patent: December 22, 2020
    Assignee: TANIUM INC.
    Inventors: Max Freilich, Andrew R. White, Christian L. Hunt, Peter Constantine, Peter Lincroft
  • Software application updating in a local network
    Patent number: 11277489
    Abstract: A method of updating software, performed by respective machines in a linear communication orbit includes, at a local server executed by a respective machine, receiving, via the linear communication orbit, update metadata. At an update module executed by the respective machine, an update module evaluates software version information using the update metadata to determine a set of one or more updates to be applied to one or more software programs. A patch module sends, via the linear communication orbit, requests for one or more software update files corresponding to the set of one or more updates, and receives the one or more software update files corresponding to the set of one or more updates. The update module then updates the one or more of the software programs by applying the received one or more software update files to the one or more of the software programs.
    Type: Grant
    Filed: December 21, 2020
    Date of Patent: March 15, 2022
    Assignee: TANIUM INC.
    Inventors: Max Freilich, Andrew R. White, Christian L. Hunt, Peter Constantine, Peter Lincroft
  • Compliance management in a local network
    Patent number: 10824729
    Abstract: A local environment verification method, performed by a server of a computer network, includes injecting, into a linear communication orbit, a bundle of information items regarding deployment of a respective local environment verification framework at each of a first subset of nodes in the computer network. The bundle of information items is distributed to a respective node of the first subset of nodes through the linear communication orbit, and used to establish the respective local environment verification framework at the respective node of the first subset of nodes. The respective node of the first subset of nodes is configured to perform a set of local environment verifications using the respective local environment verification framework. The method further includes injecting, into the linear communication orbit, a query message to collect respective local results of the set of local environment verifications from the first subset of nodes.
    Type: Grant
    Filed: July 11, 2018
    Date of Patent: November 3, 2020
    Assignee: TANIUM INC.
    Inventors: James B. Hoscheit, Kevin N. Smathers, Connor J. Hindley, Christian L. Hunt
  • Fast detection and remediation of unmanaged assets
    Patent number: 9769037
    Abstract: In one aspect, methods, system, and computer-readable media for monitoring unmanaged assets in a network having a plurality of managed machines include: at a first managed machine of the plurality of managed machines, wherein the plurality of managed machine are arranged in a linear communication orbit and have respective identifiers, and each managed machine is coupled to at least one respective neighbor by a corresponding local segment of the linear communication orbit: responding to a detection instruction for detecting unmanaged assets currently present in the network, by: scanning for live unmanaged machines within a selected portion of the network that is associated with a range of identifiers that includes identifiers between the respective identifiers of the first managed machine and a respective neighbor of the first managed machine; and generating a local report identifying one or more unmanaged machines that have been detected within the selected portion of the network.
    Type: Grant
    Filed: November 25, 2014
    Date of Patent: September 19, 2017
    Assignee: TANIUM INC.
    Inventors: David Hindawi, Orion Hindawi, Lisa Lippincott, Peter Lincroft
Narrow Results

Filter by US Classification