PATENT CLAIM ANALYSIS

Application Number: 15861367
Application Type: Utility
Filing Date: 2018-01
Publication Date: 2018-05
Patent Classification: ["726", "025000"]

Abstract:
Blocking high-risk IP connections in real-time while allowing tailoring of an acceptable risk profile to match the security requirements of network resources. By acquiring IP threat information about IP addresses, traffic from IP addresses posing unacceptable levels of risk is blocked. A computer executed method is disclosed for sorting a plurality of internet protocol (IP) addresses. The method includes dividing the range of IP addresses into a plurality of clusters representing a plurality of contiguous sub-ranges, assigning each IP address to the cluster associated with the sub-range that includes that IP address, and assigning the IP addresses in each cluster to one of a plurality of pages. A network appliance incorporating aspects of the method is also disclosed.

Claim (Index 1):
A computer network firewall system comprising:\n at least one tangible, non-transitory a computer-readable medium storing processor-executable instructions; a threat assessment processor programmed to execute the instructions, wherein the instructions, when executed by the processor, configure the firewall system to:\n acquire a plurality of threat information from one or more internet risk intelligence providers (IRIPs) via a computer communications network; \n store the plurality of threat information on the computer-readable medium, the threat information including an IP address, a risk category associated with the IP address, and a risk confidence level associated with the IP address, the threat information further including a determination of geographic proximity characteristics associated with the IP address in relation to geographic proximity characteristics associated with one or more other IP addresses having risk confidence levels exceeding a threshold level; \n determine a risk category value associated with the IP address as a function of:\n the risk confidence level stored on the computer-readable medium, and \n timing information stored on the computer-readable medium, the timing information comprising:\n a number of instances the risk confidence level has exceeded the risk category acceptance level during a first time interval, and \n a second time interval representing the elapsed time since the risk confidence level previously exceeded the risk category acceptance level; and \n \n \n block computer network communications with a computing device associated with the IP address when the risk category value is greater than or equal to a risk category acceptance level.

Metadata:
- Claim Count in Document: 41.0
- Percentile: 86.0
- Lexical Diversity: 1.75342
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15481030', '14208998', '13855510', '12509957', '14147402']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2630673309772038
- 35 USC 102 Novelty (BERT): 0.5993532508135576
- Combined Prediction Score: 0.2966959229608392
- Mean Citation Score: 333.479642
- Max Citation Score: 505.52365
- Similarity Product: 485.78763044039306

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test