MUMBAI, India, Oct. 12 -- Intellectual Property India has published a patent application (202641118780 A) filed by Dr. Reji R; Dr. Rajkumar T; Ms. Leskhmi R. Nair; Dr. Abhiraj T K; Dr. Safiya K. M.; Mr. Rupesh Ravi M. R.; Ms. Nasreen Ali Ashraf Ali; Ms. Ammu Raj; Ms. Lekshmi Ramesh; and Ms. Mahima Susan Abraham on October 05, 2026, for A Context-Aware Cyber Security System For Detecting And Isolating Anomalous Behaviour In Iot Networks.
Inventors include Dr. Reji R; Dr. Rajkumar T; Ms. Leskhmi R. Nair; Dr. Abhiraj T K; Dr. Safiya K. M.; Mr. Rupesh Ravi M. R.; Ms. Nasreen Ali Ashraf Ali; Ms. Ammu Raj; Ms. Lekshmi Ramesh; and Ms. Mahima Susan Abraham.
The application for the patent was published on October 09, 2026, under issue no. 41/2026.
Abstract: The invention relates to a context-aware cyber security system for detecting and isolating anomalous behaviour in IoT networks. The system observes network traffic, device activity, communication patterns, device states, and contextual operating information. Context information may include time, device role, location class, operational state, communication relationship, and expected activity profile. An IoT security gateway acquires and normalizes relevant telemetry from devices, gateways, and network infrastructure. A feature-processing module converts the telemetry into behavioural indicators suitable for continuous anomaly assessment. A context engine determines the expected behaviour of a device or communication flow under a current operational context. An anomaly detection engine compares observed behaviour with context-conditioned profiles and calculates an anomaly or risk score. The system can identify deviations involving communication frequency, destination changes, protocol misuse, access patterns, or unusual resource activity. Temporal persistence and contextual consistency are used to distinguish transient operational events from potentially malicious behaviour. When a risk threshold is exceeded, an isolation controller determines an appropriate containment action according to security policy. Containment may include traffic restriction, device quarantine, session termination, access-policy modification, or gateway-level blocking. An alert and forensic module records the triggering observations, contextual state, risk score, and containment decision. The system supports adaptive security policies so that legitimate changes in IoT operation do not automatically generate persistent false alarms. Edge-based analysis can provide rapid local response, while centralized analytics can support historical correlation and fleet-wide security intelligence. The invention therefore provides context-sensitive, explainable, and responsive protection for heterogeneous IoT environments.
Disclaimer: Curated by HT Syndication.
