PATENT CLAIM ANALYSIS

Application Number: 16293882
Application Type: Utility
Filing Date: 2019-03
Publication Date: 2019-07
Patent Classification: ["713", "176000"]

Abstract:
In one implementation, a method for providing security on an externally connected controller includes launching, by the controller, a security layer that includes a whitelist of permitted processes on the controller, the whitelist including (i) signatures for processes that are authorized to be executed and (ii) context information identifying permitted controller contexts within which the processes are authorized to be executed; determining, by the security layer, whether the particular process is permitted to be run on the controller based on a comparison of the determined signature with a verified signature for the particular process from the whitelist; identifying, by the security layer, a current context for the controller; determining, by the security layer, whether the particular process is permitted to be run on the controller based on a comparison of the current context with one or more permitted controller contexts for the particular process from the whitelist.

Claim (Index 23):
A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for providing security on a network-connected data processing controller, comprising:\n launching, by the network-connected data processing controller, a kernel-level security layer that includes a whitelist of permitted processes on the network-connected data processing controller, the whitelist being part of a custom security policy for the network-connected data processing controller and including signatures for processes that are verified; identifying, at the kernel-level security layer, a request to run a particular process; determining, by the kernel-level security layer, a signature for the particular process; determining, by the kernel-level security layer, whether the particular process is permitted to be run on the network-connected data processing controller based on a comparison of the determined signature with a verified signature for the particular process from the whitelist; blocking, by the kernel-level security layer, the particular process from running on the network-connected data processing controller based on determining that the determined signature does not match the verified signature for the process; and making available, from the network-connected data processing controller to an external computer resource, information that identifies the particular process as being blocked.

Metadata:
- Claim Count in Document: 26.0
- Percentile: 99.0
- Lexical Diversity: 2.75
- Patent Class: 713.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['16011987', '16011906', '16205725', '15861309', '16036521']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.4460519651646412
- 35 USC 102 Novelty (BERT): 0.5510439499067612
- Combined Prediction Score: 0.4565511636388533
- Mean Citation Score: 351.37965599999984
- Max Citation Score: 429.67728
- Similarity Product: 327.4820943813515

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test