External-Identifier Correlation for Unified Open-Source Component Results

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional software composition analysis systems fail to correlate open-source component matching results from different scanning techniques, leading to duplicate and inconsistent entries that confuse users.

Innovation Solution

Implement Match as a Service (MaaS) to integrate multiple scanning techniques, using external identifiers to correlate results, disambiguate versions, and provide a unified set of accurate open-source component identifications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple scanning techniques are used to identify open-source components, then the completeness of component identification is improved, but duplicate and inconsistent entries increase

Engineering Contradiction:
Improvecompleteness of component identificationVSAvoidduplicate and inconsistent entries
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent segments the component identification process into multiple independent scanning techniques (signature matching, package manager matching, binary matching, snippet matching), where each technique operates independently to identify components from different perspectives. This segmentation allows comprehensive coverage while enabling separate processing and correlation of results to eliminate duplicates.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent merges results from multiple scanning techniques through a correlation process that uses external identifiers to consolidate findings. The system combines the outputs of different scanning methods into a unified result set, eliminating duplicates and resolving inconsistencies by correlating matches across techniques using common identifier fields.

Inventive Principle:
Principle #5Merging (Combining)

2Measurement precision

If multiple scanning techniques are used to identify open-source components, then the accuracy of component identification is improved, but the complexity of the system increases

Engineering Contradiction:
Improveaccuracy of component identificationVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent implements a universal correlation mechanism that handles results from multiple different scanning techniques through a common processing framework. The system uses external identifiers as a universal key to correlate and consolidate results across diverse scanning methods, managing complexity through a standardized multi-functional approach rather than separate handling for each technique.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces external identifiers as an intermediary element that mediates between different scanning techniques and the final correlation process. These identifiers serve as a common language and reference point that allows results from disparate scanning methods to be correlated and merged, simplifying the integration of multiple techniques.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If multiple scanning techniques are used to identify open-source components, then the coverage of component detection is improved, but the processing time increases

Engineering Contradiction:
Improvecoverage of component detectionVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs preliminary actions by executing multiple scanning techniques in parallel or pre-coordinating their execution. The system prepares and runs different scanning methods simultaneously on the target components, gathering results from all techniques before the correlation process begins, thereby reducing total processing time while maintaining comprehensive coverage.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent maintains continuity of useful action by orchestrating multiple scanning techniques to operate concurrently rather than sequentially. The system keeps all scanning processes active and running simultaneously, maximizing resource utilization and reducing overall processing time while ensuring all techniques contribute to the final comprehensive result.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS12406015B2Correlating open source component matching results using different scanning techniques
Publication Date: 2025.09.02 BLACK DUCK SOFTWARE INC
  • US12406015B2 patent drawing
  • US12406015B2 patent drawing
  • US12406015B2 patent drawing

AI summary

A processing device receives a request to analyze the file hierarchy comprising the plurality of components and sends respective commands to a plurality of matching services. The processing device further receives respective individual results from the plurality of matching services, each of the respective individual results indicating a respective subset of the plurality of components, and correlates the respective individual results using external identifiers associated with the components of each respective subset to generate a unified set of results.