Asynchronous Scan Assistant for Network Asset Assessment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Authenticated scans in network computing systems face challenges due to the need for creating, managing, and distributing credentials, which can complicate acceptance and require integration with third-party credential services. Additionally, scan performance is affected by latency between the scan engine and the asset being scanned, as each request is synchronous and contingent on prior responses.
Innovation Solution
The implementation of a scan assistant that authenticates a scan engine without using third-party credentials, and the use of an asynchronous API to decrease scan latency and improve performance by allowing concurrent requests and reducing the impact of increasing latency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If synchronous scan requests are used, then each request can be processed sequentially with proper response waiting, but scan performance decreases as latency increases due to round trip time for each request
Solution Approach 1:
The patent implements an asynchronous scanning mechanism where multiple scan requests are sent periodically and concurrently to different assets, with responses collected in batches rather than waiting for each individual response sequentially. This transforms the scanning process from a series of synchronous round-trip operations to a more efficient periodic batch processing model, improving scan performance while maintaining response reliability through proper correlation of requests and responses using correlation IDs.
2Reliability
If administrative/root access credentials are used for authenticated scans, then scan authentication is achieved, but network challenges arise and integration with third-party credential services is required
Solution Approach 1:
The patent introduces a credential service as an intermediary component that manages authentication credentials separately from the scanning engine and assets. This credential service acts as a mediator that provides authenticated access tokens to the scanning engine without requiring direct integration between the scanner and third-party credential management systems. The intermediary handles credential storage, rotation, and distribution, reducing complexity while maintaining secure authentication.
Solution Approach 2:
The scanning engine implements self-service authentication by automatically obtaining credentials from the integrated credential service without requiring manual credential management or complex integration logic. The system performs self-authentication using tokens obtained through the credential service, eliminating the need for administrators to manually configure and manage administrative or root access credentials for each scan operation.
3Measurement precision
If scan requests are sent to asset each time scan is performed, then complete scan data is obtained, but lost scan performance and increased latency occur
Solution Approach 1:
The patent implements a caching mechanism that stores scan results and asset information in advance. When performing subsequent scans, the system retrieves previously cached data to avoid redundant scanning operations, thereby reducing scan latency and time loss while maintaining data completeness through selective updates of cached information with new scan data.
Solution Approach 2:
The system implements incremental scanning that discards redundant scan operations by identifying which asset data has already been collected and which new data is needed. The scanning engine recovers time by skipping already-scanned assets and only performing scans on assets that require updated information, thereby maintaining complete scan coverage while reducing overall scan latency through intelligent omission of redundant operations.
Data Source
AI summary
A method for authenticated asset assessment is provided. The method includes authenticating, by a scan assistant, a scan engine with the scan assistant for executing one or more scan operations on the asset to determine a state of the asset. The asset includes at least one computing resource. The method also includes receiving, by the scan assistant, a plurality of scan requests associated with the one or more scan operations from the scan engine. The method further includes responding, by the scan assistant, to at least one scan request of the plurality of scan requests by transmitting one or more scan responses to the scan engine after receiving the plurality of scan requests. The scan assistant and the scan engine implement an asynchronous communication protocol that permits the scan engine to send the scan requests without waiting for scan responses for previous scan requests.