Systems and methods for creating fingerprints of encryption devices

摘要

Systems and methods for creating fingerprints for encryption devices are described herein. In various embodiments, the system includes an encryption device operatively connected to a device management system. According to particular embodiments, the device management system: 1) receives a first payload from the encryption device, the first payload including data in a particular format; 2) creates a fingerprint for the encryption device, the fingerprint including a section format for each of one or more distinct sections of the particular format; 3) storing a record of the fingerprint for the encryption device and the unique identifier at the at least one database; and 4) comparing a format of each subsequent payload received from the encryption device to the fingerprint for the device to determine whether the device has been compromised.

主权项

1. A computer system for creating a fingerprint for a device, the computer system comprising the device operatively connected to a device management system, the device management system comprising at least one processor operatively coupled to at least one database, the at least one processor configured for:
receiving a first payload from the device, the first payload comprising data in a particular format, a device indicator comprising a unique identifier used for identifying the device, and an indication of a version of firmware running on the device; creating the fingerprint for the device, the fingerprint comprising a section format for each of one or more distinct sections of the particular format in a particular order and the indication of the version of the firmware running on the device; storing a record of the fingerprint for the device and the unique identifier at the at least one database; parsing the particular format of the first payload into the one or more distinct sections of the particular format; determining the section format of each of the one or more distinct sections; creating a record of the section format of each of the one or more distinct sections in the particular order; and comparing a format of each subsequent payload received from the device to the fingerprint for the device to determine whether the device has been compromised.