Patent ID: 11956216
Assignee: AGENCY CYBER INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 13:
14. A system, comprising:
an individually-owned electronic device of a first user; and
a network operations center comprising an enrollment system and a device management system,
wherein the enrollment system is configured to receive from the first user, a communication identifier for the first user, an identification of a device type of the individually-owned electronic device of the first user, and an identification of an operating system for the individually-owned electronic device of the first user,
wherein the device management system is configured to
generate, using the received communication identifier, identification of the device type, and the identification of the operating system, a configuration file,
transmit a message addressed to the communication identifier for the first user,
receive, from the individually-owned electronic device of the first user, a request to download the configuration file, and
transmit the configuration file to the individually-owned electronic device of the first user,

wherein the individually-owned electronic device is configured to install the transmitted configuration file on the individually-owned electronic device of the first user, wherein, responsive to the installation of the configuration file, the individually-owned electronic device is configured to install a security application on the individually-owned electronic device of the first user and configure a virtual private network connection for communications to and from the individually-owned electronic device of the first user,
the system further comprising:
a network layer security system, which is configured to
monitor metadata of data transmitted or received by the individually-owned electronic device over the virtual private network connection;
detect, based on the metadata, an anomaly in the data transmitted or received by the individually-owned electronic device over the virtual private network connection,
wherein, responsive to the detection of the anomaly, the network layer security system is configured to
send an alert to the individually-owned electronic device;
interrupt transmission or reception of the individually-owned electronic device with an endpoint associated with the anomaly; or
notify the security application installed on the individually-owned electronic device of the anomaly.