Omni-Collection Data Collector Framework Reducing System Complexity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Ensuring the safety and security of information systems while optimizing technical operations is challenging, particularly in preventing unauthorized access to resources through electronic portals.
Innovation Solution
A computing platform with processors, memory, and communication interfaces receives configuration settings for device data collectors, generates configuration commands, and sends them to a native collector, collecting and processing state information, which is then shared with an authentication hub for processing by collector support servers, optimizing data collection and reducing redundancy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple collectors are used to collect data from different sources, then data collection coverage is improved, but system complexity increases
Solution Approach 1:
The patent combines multiple collectors into a unified collector framework that handles data from diverse sources (devices, logs, network traffic) through a single standardized interface. This merging approach maintains comprehensive data collection coverage while reducing system complexity by eliminating redundant collection logic across multiple independent collectors.
Solution Approach 2:
The unified collector is designed with multi-functional capabilities to handle various data sources and formats through a single standardized interface. This universal collector can process device data, log files, and network traffic uniformly, improving adaptability while reducing the need for multiple specialized collectors.
2Speed
If data is collected and processed in real-time, then security response time is improved, but computational resources are consumed
Solution Approach 1:
The patent applies local quality by processing data with different levels of computational intensity at different stages. Critical security events are processed immediately with high computational resources, while routine data collection and analysis use standardized, lower-resource processes. This selective resource allocation maintains fast security response for critical events while optimizing overall resource consumption.
Solution Approach 2:
The system performs partial real-time processing by immediately analyzing critical security indicators while batching less urgent data for later processing. This approach ensures fast response to security threats while reducing continuous computational resource consumption through selective real-time action.
3Measurement precision
If comprehensive device state information is collected, then security monitoring accuracy is improved, but data processing overhead increases
Solution Approach 1:
The patent extracts only the most relevant security-critical fields from comprehensive device state information using standardized schemas. Instead of processing entire data sets, the system identifies and processes specific security-relevant parameters (authentication status, device state, security events), maintaining monitoring accuracy while significantly reducing processing overhead.
Solution Approach 2:
The system transforms comprehensive device state data into standardized security parameters through defined schemas and data models. This parameter transformation converts raw comprehensive data into focused security-relevant metrics, preserving monitoring accuracy while enabling more efficient processing through standardized parameter structures.
Data Source
AI summary
Aspects of the disclosure relate to controlling device data collectors using omni-collection techniques. A computing platform may receive configuration settings associated with a first collector and a second collector. Subsequently, the computing platform may generate one or more configuration commands for a native collector based on the configuration settings. The computing platform may send, to a client interface computing platform associated with the native collector, the one or more configuration commands generated for the native collector. Thereafter, the computing platform may receive state information collected by the native collector based on the one or more configuration commands generated for the native collector. Then, the computing platform may send the state information to an authentication hub computing platform, and sending the state information may cause the authentication hub computing platform to share at least a portion of the state information with one or more collector support servers for processing.