Endpoint Assessment Deduplication for Dispersed Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional endpoint assessment systems struggle to efficiently assess and manage large networks of geographically dispersed devices due to temporal inactivity and connectivity issues, leading to incomplete and inaccurate compliance evaluations.
Innovation Solution
A method involving staggered batch assessments across different times and geographic regions, followed by deduplication of assessment results to generate a comprehensive and accurate endpoint compliance status, including actions to mitigate noncompliant devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional endpoint assessment systems perform assessments on all devices simultaneously, then the assessment process is simple, but geographically dispersed devices in different time zones cannot be assessed due to inactivity during the assessment window
Solution Approach 1:
The patent divides the endpoint assessment into multiple time-based batches, where each batch targets specific time zones or geographic regions. This segmentation allows the system to assess devices in different locations at different times, ensuring all devices can be evaluated regardless of their operational status during any single assessment window.
Solution Approach 2:
The system performs periodic assessments at different time intervals and time zones. By scheduling assessments periodically across multiple time windows, the system ensures that devices active during any given period can be assessed, while devices active during other periods are captured in subsequent assessment cycles.
2Measurement precision
If the system performs multiple batch assessments over time to capture all active devices, then assessment completeness improves, but the complexity of managing and deduplicating assessment results increases
Solution Approach 1:
The patent segments assessment results into distinct batches corresponding to different time windows and device subsets. Each batch is processed and stored separately, allowing the system to manage multiple assessment cycles without overwhelming complexity. The segmented approach enables systematic consolidation of results while maintaining clarity about which devices were assessed when and under what conditions.
Solution Approach 2:
The system merges multiple batch assessment results into a unified compliance evaluation. By combining results from different time windows and device subsets while accounting for temporal relationships, the system produces a comprehensive compliance status that reflects the state of all devices across the entire assessment period.
3Productivity
If devices are assessed during their inactive periods, then assessment throughput increases, but the accuracy of compliance evaluation decreases due to inability to detect actual device state
Solution Approach 1:
The system performs periodic assessments during different time windows to capture devices in various operational states. By scheduling assessments at multiple time points, the system ensures that devices are evaluated when they are active, providing accurate compliance data while maintaining high throughput through parallel processing of multiple time-based batches.
Data Source
AI summary
Security compliance may be facilitated for multiple endpoints associated with a network. Multiple batch endpoint assessments may be performed. Each batch endpoint assessment of the multiple batch endpoint assessments may include receiving multiple status indicators associated with at least a subset of endpoints of the multiple endpoints. For each batch endpoint assessment of the multiple batch endpoint assessments, a status may be assigned to each endpoint of the multiple endpoints based on the plurality of status indicators. A state may be generated for each endpoint of the multiple endpoints based on the statuses assigned to the multiple endpoints.