Microsoft patents image-based method to detect phone tethering
Microsoft describes a method for detecting when a user is sharing their internet connection with another device, a practice known as tethering. The system converts network data packets into images and uses a machine learning model to identify the operating systems of the connected devices. If the model detects two different operating systems in the same data flow, it flags the activity as tethering.
In the filing’s own words
Packets are captured that are associated with a communications flow in a communications network. An image generated by converting bits of the captured packets to pixel data. The image is input to a machine learning model that is trained to identify an operating system or operating system version based on image data. Identities of operating systems or operating system versions of source devices of the packets are received. Based on the identities, it is determined whether the packets are associated with at least two different operating systems or operating system versions. This indicates the use of device tethering in the communications flow.
What exactly they claim (claim 1)
1. A method for detecting presence of device tethering, the method comprising: capturing a plurality of packets associated with a communications flow in a communications network, the communications flow associated with a subscription allowing for use of the communications network by a user; based on the captured packets, generating an image by converting bits of the captured packets to pixel data; inputting the image to a machine learning model that is trained to identify an operating system or a version of an operating system based on image data; receiving, from the machine learning model, identities of operating systems or versions of operating systems of source devices of the plurality of packets; based on the identities, determining that the plurality of packets are associated with at least two different operating systems or two different operating system versions; and based on the determining that the plurality of packets are associated with at least two different operating systems or two different operating system versions, outputting an indication of device tethering in the communications flow.
Facts
- Company
- Microsoft (MICROSOFT TECHNOLOGY LICENSING, LLC)
- Official title
- DEEP LEARNING BASED TETHERING DETECTION
- Publication number
- US20260303490A1
- Application number
- 19094774
- Filed
- Mar 28, 2025
- Published
- Oct 1, 2026
- Inventors
- 4
- Claims
- 20
Classified under
H04L 43/045 Electricity & electronicsG06V 10/82 Physics & computingMore from Microsoft in Networks & wireless
- Microsoft patents camera-based data transfer between server displays Sep 22, 2026
- Microsoft patents system that uses AI to plan network capacity Oct 13, 2026
- Microsoft patents method to spot cloud outages by checking individual user traffic Sep 10, 2026
- Microsoft patents hand gestures to control devices without menus Sep 24, 2026
- Microsoft patents system that auto-fixes cloud slowdowns to meet service promises Sep 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.