Cloud Service Vulnerability Evaluation System

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for an efficient and dynamic cloud service evaluation framework within an enterprise environment that can quickly assess cloud frameworks, identify gaps or weaknesses, and communicate quantifiable data to facilitate necessary controls or actions, while being adaptable and easily updated based on changing enterprise needs.

Innovation Solution

A system comprising a memory device with computer-readable program code, a communication device, and a processing device that automates the evaluation of cloud services by gathering data, generating evaluation tools, and packaging results for review, using authentication credentials, graphical user interfaces, and a tiered passphrase scheme to unlock and convert evaluation tool files, enabling dynamic and adaptable assessment and reporting.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If manual evaluation processes are used for cloud services, then comprehensive assessment can be achieved, but the process is time-consuming and resource-intensive

Engineering Contradiction:
Improveevaluation speedVSAvoidtime for assessment
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The system enables cloud service providers to self-evaluate their own frameworks by automatically generating evaluation tools and populating them with data from their cloud environments. This self-service approach eliminates the need for extensive manual assessment while maintaining comprehensive evaluation coverage through automated data collection and analysis.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical evaluation processes with automated computational systems. The system automatically generates evaluation tools, collects data from cloud service frameworks, performs assessments, and generates reports without requiring manual intervention at each step, thereby dramatically improving evaluation speed and reducing time loss.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If detailed evaluation frameworks are implemented, then comprehensive vulnerability assessment is achieved, but complexity of the system increases

Engineering Contradiction:
Improveassessment accuracyVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The evaluation system is segmented into distinct functional modules: tool generation module, data collection module, assessment module, and reporting module. Each module handles a specific aspect of the evaluation process, making the overall complex system manageable and maintainable while preserving comprehensive assessment capabilities through the coordinated operation of these specialized components.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system employs universal evaluation tools and standardized frameworks that can be applied across different cloud service providers and various types of cloud frameworks. This multi-functionality allows the system to maintain high reliability and comprehensive assessment accuracy without requiring separate complex systems for each evaluation scenario.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Adaptability or versatility

If frequent updates to evaluation criteria are made, then adaptability to changing needs is improved, but system stability decreases

Engineering Contradiction:
Improveadaptability to changing needsVSAvoidsystem stability
Core Design Contradiction:
Adaptability or versatilityVSStability of the object's composition

Solution Approach 1:

The system incorporates dynamic evaluation criteria that can be updated and modified without requiring complete system reconfiguration. The tool generation module can dynamically create new evaluation tools based on updated criteria, and the system adapts to changing enterprise needs while maintaining operational stability through its modular architecture that allows selective updates of specific components rather than the entire system.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11363055B2System and methods for dynamic controlled evaluation of cloud service vulnerabilities
Publication Date: 2022.06.14 BANK OF AMERICA CORP
  • US11363055B2 patent drawing
  • US11363055B2 patent drawing
  • US11363055B2 patent drawing

AI summary

Embodiments of the invention are directed to systems, methods, and computer program products for rapid assessment of cloud frameworks to evaluate those considered for use in an enterprise context. The invention may quickly and consistently identify gaps or weaknesses of cloud frameworks or resources, assess the potential negative impact of such gaps or weaknesses, and facilitate the communication of quantifiable data to responsible parties in order to facilitate the implementation of necessary controls or actions. Embodiments of the invention are highly adaptable and dynamic in fashion such that they can be quickly and easily updated based on the changing needs of the enterprise.