Network User Manifest Aggregation for Security Deployment Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for verifying security technology deployment efficacy across a computer network are inefficient and lack comprehensive inventory management of assets, users, and applications, leading to incomplete and inaccurate assessments.

Innovation Solution

A method that aggregates objects generated by various sources to create user and application manifests, identifying and labeling attributes of assets, users, and applications, and generating visualizations to provide a comprehensive inventory of assets affiliated with the computer network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If existing methods are used for verifying security technology deployment, then the process can be completed, but the accuracy and completeness of the inventory management are insufficient

Engineering Contradiction:

Improveaccuracy of asset inventoryVSAvoidcompleteness of security deployment verification

Core Design Contradiction:

Measurement precisionVSReliability

Solution Approach 1:

The patent merges data from multiple sources (endpoint devices, users, applications, security technologies) into a unified inventory manifest. This consolidation allows comprehensive verification of security deployment by cross-referencing all asset types together, improving both accuracy and completeness of the verification process.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The system creates a universal inventory management framework that handles multiple asset types (endpoints, users, applications, security technologies) through a single manifest structure. This multi-functional approach enables accurate tracking and verification across the entire network infrastructure, resolving the limitations of traditional single-purpose methods.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Quantity of substance

If comprehensive inventory management is implemented, then the completeness of asset tracking improves, but the system complexity increases

Engineering Contradiction:

Improvecompleteness of asset inventoryVSAvoidcomplexity of inventory management system

Core Design Contradiction:

Quantity of substanceVSDevice complexity

Solution Approach 1:

The patent segments the inventory management system into distinct data structures (endpoint containers, user containers, application containers, security technology containers) that can be independently managed and processed. This segmentation reduces overall system complexity by allowing modular handling of each asset type while maintaining comprehensive inventory coverage.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system employs a nested structure where containers hold multiple attributes and related objects. For example, user containers can hold endpoint devices, applications, and security technologies associated with that user. This nesting approach consolidates comprehensive inventory data into organized hierarchies, improving completeness without proportionally increasing complexity.

Inventive Principle:

Principle #7Nested doll (Nesting)

3Adaptability or versatility

If multiple data sources are aggregated, then the comprehensiveness of security verification improves, but the processing time increases

Engineering Contradiction:

Improvecomprehensiveness of security verificationVSAvoidprocessing time for inventory aggregation

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent implements preliminary actions by pre-establishing data structures and schemas for containers before aggregation occurs. This preparation allows incoming data from multiple sources to be directly mapped into the predetermined structures, reducing processing time while maintaining comprehensive verification across all asset types.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system optimizes processing by dynamically adjusting aggregation parameters based on data volume and source complexity. This allows the system to maintain comprehensive security verification while reducing processing time through intelligent parameter adjustment during the aggregation process.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS12526285B2Method for verifying security technology deployment efficacy across a computer network

Publication Date: 2026.01.13 ARCTIC WOLF NETWORKS INC

AI summary

A method includes: accessing objects, generated by a set of sources, representing attributes of users affiliated with a computer network; partitioning the objects into object groups, each object group representing a particular user; for each object group, aggregating objects in the object group into a user container, in a set of user containers, representing a user during the first time interval; generating a manifest of users affiliated with the computer network during the first time interval based on the set of user containers; and, in response to selection of a first user in the manifest of users at an operator portal: generating a visualization representing a set of attributes exhibited by the first user during the first time interval.