Logic-Based Device Attribute Assignment With Belief-Value Conflict Resolution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network security systems struggle with accurately classifying and assigning attributes to network devices due to inherent uncertainty and lack of transparency in classification methods, leading to trust issues and ineffective security measures.

Innovation Solution

Utilizing logic programming with defined logical predicates and heuristic rules to assign attributes to network devices, incorporating belief values to represent uncertainty and resolve conflicts, while providing explanations for classification decisions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If traditional classification methods are used to classify network devices, then the classification process is simple, but the accuracy and transparency of classification are poor leading to trust issues

Engineering Contradiction:
Improveclassification accuracyVSAvoidclassification system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The classification system is segmented into multiple independent components: evidence collection module, logical predicate module, heuristic rule module, belief value calculation module, and conflict resolution module. Each component handles a specific aspect of the classification process, improving overall accuracy while maintaining modularity that manages complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Logical predicates and heuristic rules serve as intermediaries between raw device evidence and final classification decisions. These intermediaries transform complex classification problems into structured logical operations with associated belief values, enhancing both accuracy and interpretability without proportionally increasing system complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If logic programming with belief values is used to classify network devices, then classification transparency and trust are improved, but the processing complexity and computational overhead increase

Engineering Contradiction:
Improveclassification trustVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system introduces belief values as an additional parameter to traditional classification outcomes. This parameter quantifies uncertainty and confidence levels, enabling transparent representation of classification reliability. The belief value parameter transforms qualitative trust issues into quantitative measurements that can be systematically processed and compared.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The conflict resolution module implements feedback mechanisms that use belief values to iteratively refine classifications. When multiple heuristic rules produce conflicting results, the system uses belief value comparisons to resolve conflicts and provide explanatory feedback about the classification decision process, enhancing trust while managing complexity through structured feedback loops.

Inventive Principle:
Principle #23Feedback

3Measurement precision

If multiple heuristic rules are applied to network devices, then classification accuracy improves, but conflicts between rules increase requiring complex resolution mechanisms

Engineering Contradiction:
Improvedevice attribute accuracyVSAvoidclassification efficiency
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The system applies multiple heuristic rules beyond what a single rule would provide, accepting some redundancy and conflict as necessary for improved accuracy. The belief value framework allows the system to process these excessive classifications efficiently by comparing belief values rather than requiring complex logical deduction for every conflict, maintaining productivity while achieving higher precision.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentEP4409854B1Entity attribute designation based on logic programming
Publication Date: 2025.12.24 FORESCOUT TECHNOLOGIES INC
  • EP4409854B1 patent drawingFigure 1
  • EP4409854B1 patent drawingFigure 2
  • EP4409854B1 patent drawingFigure 3

AI summary

Systems, methods, and related technologies for entity classification and attribute designation are described. Device property data associated with a device coupled to a network is accessed. One or more features for the device are identified based on the device property data. A first value for an attribute of the device is determined based on a set of rules applied to the one or more features of the device. A first belief value for the attribute is determined based on the set of rules applied to the one or more features of the device. A final value for the attribute of the device is selected based at least in part on the first belief value for the first value of the attribute.