Patch Installation Timing Optimization via Calendar Correlation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for distributing and installing security patches for application programs on computer systems often disrupt operations and fail to efficiently manage vulnerabilities, particularly in large organizations like banks and governments, where quick installation is critical to prevent security breaches.

Innovation Solution

A system that correlates parameters for data patch installation with the computer system's calendar to determine optimal installation times, allowing users to interactively select the best time for patch application while minimizing disruptions, and includes parameters for determining if a reboot is required and the duration of the installation process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security patches are installed immediately upon receipt, then security vulnerability mitigation is improved, but computer system operation interruption increases

Engineering Contradiction:
Improvesecurity vulnerability mitigationVSAvoidcomputer system operation interruption
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system dynamically adjusts patch installation timing based on multiple factors including patch priority levels, system operational status, and user-defined preferences. Critical security patches trigger immediate installation warnings, while non-critical patches allow deferred installation during scheduled maintenance windows, resolving the contradiction between immediate security mitigation and operational continuity

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system performs preliminary assessment of patch requirements upon receipt, correlating patch parameters with system calendar and operational conditions to pre-determine optimal installation time periods before user interaction, allowing users to select from pre-evaluated time options that minimize disruption while ensuring timely security updates

Inventive Principle:
Principle #10Preliminary action

2Loss of time

If patch installation is deferred to optimal time periods, then computer system operation interruption is reduced, but security vulnerability exposure increases

Engineering Contradiction:
Improvecomputer system operation interruptionVSAvoidsecurity vulnerability exposure
Core Design Contradiction:
Loss of timeVSObject-affected harmful factors

Solution Approach 1:

The system continuously monitors patch installation status and provides feedback through user notifications and warnings. When critical security patches are received, the system generates urgent alerts requiring user attention, ensuring that security vulnerabilities are addressed promptly while still allowing operational planning, thus balancing security requirements with operational convenience

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system pre-evaluates and ranks multiple patch installation scenarios based on security urgency and operational impact, presenting users with pre-analyzed optimal time periods that minimize vulnerability exposure while reducing interruption, eliminating the need for users to perform complex security-operations trade-off analysis

Inventive Principle:
Principle #10Preliminary action

3Manufacturing precision

If multiple patch parameters are correlated for optimal installation timing, then installation scheduling precision is improved, but system complexity increases

Engineering Contradiction:
Improveinstallation scheduling precisionVSAvoidparameter correlation system complexity
Core Design Contradiction:
Manufacturing precisionVSDevice complexity

Solution Approach 1:

The system autonomously correlates multiple patch parameters including installation duration, reboot requirements, priority levels, and system calendar constraints to automatically generate optimal installation time period recommendations, reducing the complexity burden on users while maintaining high scheduling precision through automated multi-parameter analysis

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10318276B2Optimized installation of received patches for application programs already running on computer systems
Publication Date: 2019.06.11 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US10318276B2 patent drawing
  • US10318276B2 patent drawing
  • US10318276B2 patent drawing

AI summary

A data patch for a program already installed in an interactive display computer system is received over a network and stored. There is also received a first set of parameters for controlling the installation of the patch. At the computer, a second set of parameters for controlling optimum installation time periods is predetermined wherein the data patch may be installed. The first and second sets of parameters are correlated to determine a set of optimum time periods during which the data patch may be installed, and this set of time periods are displayed so that a user may interactively select an optimum time period for installation of the data patch.