Patent ID: 11924232
Assignee: SCHNEIDER ELECTRIC USA, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 14:
15. A system, comprising:
one or more computer processors; and
a non-transitory computer-readable memory containing computer program code that, when executed by operation of the one or more computer processors, performs an operation comprising:
determining a plurality of characteristics for a first device of a first device type, comprising:
determining a media access control (MAC) address of the first device;
determining a window of time during which the first device was manufactured, by querying a data store using at least the MAC address of the first device; and
determining a range of serial numbers assigned to devices during the window of time;

analyzing the plurality of characteristics against a set of expected characteristics of the first device type, comprising validating a serial number assigned to the first device by determining whether the serial number is within the range of serial numbers assigned to devices during the window of time;
monitoring runtime behavior of the first device over a window of time to collect runtime behavior data;
analyzing the runtime behavior data for the first device to determine whether the first device is operating in a manner consistent with the first device type; and
upon determining that the analyzed plurality of characteristics is consistent with the set of expected characteristics and that the first device is operating in a manner consistent with the first device type, generating a security profile for the first device designating the first device as a trusted device.