Anomaly Influence Extraction via Relationship Graph Shared Extents

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods fail to effectively detect anomaly influence processes when anomalies occur at multiple points in a network system, requiring manual analysis and being dependent on operator expertise, and may not accurately identify the extent of influence.

Innovation Solution

An information processing apparatus that uses a relationship graph to extract reach extents from detected anomaly locations and identifies shared extents across multiple paths, allowing for the extraction of anomaly influence processes even when anomalies occur at multiple points.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual analysis of logs is performed to locate anomaly cause and extent of influence, then the anomaly can be detected, but the process requires large amount of man-hour and is dependent on operator ability

Engineering Contradiction:
Improveanomaly detection accuracyVSAvoidman-hour for analysis
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent replaces manual mechanical analysis with an automated computer-based system that uses relationship graphs and path extraction algorithms to automatically identify anomaly causes and extent of influence, eliminating dependence on operator ability and significantly reducing analysis time

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system enables self-service anomaly analysis by automatically extracting reach extents and shared extents from relationship graphs without requiring human operators to manually trace through logs, allowing the system to independently identify anomaly propagation paths

Inventive Principle:
Principle #25Self-service

2Reliability

If existing anomaly detection methods are used, then single-point anomalies can be detected, but anomalies at multiple points cannot have their influence processes detected

Engineering Contradiction:
Improveanomaly detection coverageVSAvoidmulti-point anomaly handling capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent merges multiple reach extents from different anomaly locations by extracting their shared extents, combining individual anomaly analyses into a unified view that captures the overall anomaly propagation process across the system

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The relationship graph approach provides a universal framework that can handle both single-point and multi-point anomalies uniformly, making the system adaptable to various anomaly scenarios without requiring different detection methods

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10887331B2Information processing apparatus and influence-process extraction method
Publication Date: 2021.01.05 NEC CORP
  • US10887331B2 patent drawing
  • US10887331B2 patent drawing
  • US10887331B2 patent drawing

AI summary

An information processing apparatus includes: a reach-extent extraction unit configured to extract, with use of a relationship graph representing relationships between a plurality of elements included in a system and location information that indicates, on the relationship graph, a plurality of locations in the system where anomalies have been detected, paths in the relationship graph as being reach extents, the path including a set of the elements that are directly or indirectly related to each of the plurality of locations as a source; and a shared-extent extraction unit configured to extract an influence process of an anomaly by extracting an extent that is shared in at least a prescribed number of paths among paths in the relationship graph that have been extracted as the reach extents.