Automated Patch Deployment System for Enterprise Server Infrastructure

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In large enterprises with diverse computing networks, the manual process of deploying software updates/patches across multiple servers is inefficient, prone to human error, and delays the timely deployment of critical security fixes, as data is spread across various sources requiring manual consolidation and monitoring.

Innovation Solution

An automated system that extracts data from multiple sources, consolidates and transforms it for reporting and analytics, determines which servers need updates, schedules optimal deployment times, and implements updates through automated communication to minimize downtime and ensure timely deployment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If manual processes are used to monitor and consolidate data from multiple sources, then device complexity is reduced, but productivity deteriorates and loss of time increases

Engineering Contradiction:
Improvedata consolidation processVSAvoidupdate deployment efficiency
Core Design Contradiction:
Device complexityVSProductivity

Solution Approach 1:

The system automatically monitors servers, extracts data from multiple sources, consolidates information, identifies vulnerable servers, and schedules updates without requiring manual intervention. The automated remediation system performs all these tasks independently, eliminating the need for manual data consolidation while maintaining comprehensive monitoring capabilities.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical processes (physically pulling reports, consolidating data manually) with automated electronic systems that use software algorithms to extract, consolidate, and process data from multiple sources automatically, thereby eliminating manual labor while maintaining comprehensive data processing capabilities.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Device complexity

If manual processes are used for update deployment, then device complexity is reduced, but reliability deteriorates due to human error

Engineering Contradiction:
Improvedeployment systemVSAvoidupdate deployment accuracy
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The automated remediation system independently identifies vulnerable servers, determines update requirements, schedules deployments, and executes updates without manual intervention. This self-service approach eliminates human error in the process while maintaining comprehensive control over the deployment lifecycle.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system continuously monitors server status, vulnerability states, and deployment progress, using this feedback to automatically adjust and optimize the update deployment process. The feedback mechanism ensures accurate identification of vulnerable servers and reliable execution of updates while adapting to changing system conditions.

Inventive Principle:
Principle #23Feedback

3Device complexity

If manual monitoring of multiple data sources is performed, then device complexity is reduced, but loss of time increases

Engineering Contradiction:
Improvedata monitoring processVSAvoidtime for data consolidation
Core Design Contradiction:
Device complexityVSLoss of time

Solution Approach 1:

The system continuously and automatically monitors all servers and data sources in real-time, maintaining constant surveillance without interruption. This continuous automated monitoring eliminates the need for periodic manual checks and data consolidation, ensuring timely detection of vulnerable servers and continuous progress toward update deployment.

Inventive Principle:
Principle #20Continuity of useful action

Solution Approach 2:

The system proactively identifies vulnerable servers and schedules updates before they become critical issues. By continuously monitoring and preparing update deployments in advance, the system eliminates the need for reactive manual responses and reduces overall time loss associated with data consolidation and decision-making.

Inventive Principle:
Principle #10Preliminary action

4Productivity

If automated data extraction and consolidation is implemented, then productivity improves, but device complexity increases

Engineering Contradiction:
Improvedata processing efficiencyVSAvoidautomated system architecture
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The automated remediation system performs multiple functions through a single integrated platform: monitoring servers, extracting data from various sources, consolidating information, identifying vulnerable servers, scheduling updates, and executing deployments. This multi-functional approach improves productivity while managing complexity through consolidation rather than proliferation of separate systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9176728B1Global software deployment/remediation management and associated analytics
Publication Date: 2015.11.03 BANK OF AMERICA CORP
  • US9176728B1 patent drawing
  • US9176728B1 patent drawing
  • US9176728B1 patent drawing

AI summary

Embodiments of the invention relate to systems, methods, and computer program products for an automated infrastructure management and remediation in an enterprise-type computing infrastructure that provides for automated deployment of critical updates/patches to enterprise-wide computing servers to insure that such updates occur and within prescribed time limits. Further, the invention provides for automatic extraction data from the various different data sources that contain data relevant to the update/patch process, consolidation and transformation of the data to accommodate reporting needs and analytical research and relying on the data to automatically determine the current state of the servers for the subsequent purpose of determining which of enterprise-wide servers require a pending update/patch. Additionally, the data is relied upon to automatically determine optimal times for deploying the update/patch to each of the servers, scheduling of an optimal time for deployment and subsequent automated deployment.