Access Profile-Based Software Change Assessment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In large computer systems, it is challenging to determine which software corrections or configuration changes to implement, as incorrect installations can lead to malfunctions or failures, and existing methods do not effectively assess the impact on operating security, particularly considering interactions among software components.

Innovation Solution

A method that involves acquiring access profiles for software components, determining change profiles for configuration changes, and assessing these changes based on operating security to ensure improvements, avoiding unnecessary or harmful changes by analyzing access rights and priorities, and using separate workstation and maintenance computers for remote maintenance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If software corrections or configuration changes are installed to improve operating security, then the security level increases, but the risk of causing malfunctions or failures increases

Engineering Contradiction:
Improveoperating securityVSAvoidmalfunctions or failures
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent performs preliminary analysis by creating access profiles that document which software components access which files and resources before any configuration changes are made. This preliminary documentation enables assessment of potential impacts before corrections are installed, preventing harmful effects while maintaining security improvements

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system establishes feedback loops where access profiles are continuously monitored and updated. When a configuration change is planned, the system feedback-assesses it against existing access profiles to predict impacts on software component functionality, allowing corrective actions to be taken before malfunctions occur

Inventive Principle:
Principle #23Feedback

2Measurement precision

If comprehensive analysis of all software components is performed to assess configuration changes, then the accuracy of security assessment improves, but the complexity and time required increases

Engineering Contradiction:
Improvesecurity assessment accuracyVSAvoidanalysis complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the complex system into manageable units by creating individual access profiles for each software component. Each profile independently documents the access patterns of specific components to specific files and resources, making the overall analysis tractable while maintaining comprehensive coverage

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system transforms the complex problem of assessing configuration change impacts into a parameter-based analysis by comparing access profile parameters (which files/resources each component accesses) before and after planned changes. This parameterized approach simplifies the assessment process while maintaining accuracy

Inventive Principle:
Principle #35Parameter changes

3Reliability

If error corrections are installed for all software components to improve security, then the overall security level increases, but unnecessary changes may cause incompatibilities or failures

Engineering Contradiction:
Improveoperating securityVSAvoidconfiguration change appropriateness
Core Design Contradiction:
ReliabilityVSManufacturing precision

Solution Approach 1:

Rather than applying error corrections universally to all software components, the patent uses access profiles to identify which components are actually present and active in the system. Corrections are applied only where needed based on the profile data, avoiding unnecessary changes that could cause incompatibilities while still achieving comprehensive security coverage for relevant components

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS8176552B2Computer system, computer program product and method for assessing a profile of a computer system
Publication Date: 2012.05.08 FUJITSU TECHNOLOGY SOLUTIONS GMBH
  • US8176552B2 patent drawing
  • US8176552B2 patent drawing
  • US8176552B2 patent drawing

AI summary

A method for maintaining a computer system on the basis of an access profile and a change profile is disclosed. The computer system includes at least one workstation computer and a maintenance computer. The invention further relates to a method for providing an access profile and a method for assessing a software correction.