Unified Infrastructure Query Platform for Cloud-Native Operations

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current infrastructure and security analytics for cloud-native applications lack a unified platform for accessing and managing infrastructure operations, configurations, states, and associated data, leading to fragmented solutions and reduced transparency.

Innovation Solution

A Distributed Data Query Language (DDQL) is introduced, enabling users to query infrastructure information by traversing relational structures, aggregating metadata, and establishing relationships between resources, providing a unified platform for DevOps and SecOps teams.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If separate tools and scripts are used to manage vulnerabilities, policies, and infrastructure, then each tool can be specialized and optimized, but the overall system complexity increases and a unified view of infrastructure is lost

Engineering Contradiction:
Improvespecialization of toolsVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple separate tools (vulnerability scanners, policy scanners, CMDBs, data stores) into a unified query platform. The DDQL language enables users to query infrastructure information from all these sources through a single interface, eliminating the need to manage and switch between multiple specialized tools while maintaining their individual capabilities.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The query platform provides universal access to multiple infrastructure domains (vulnerabilities, policies, configurations, states) through a single unified interface. The DDQL language serves multiple functions including data querying, relationship navigation, and aggregation across different infrastructure components, replacing the need for multiple specialized tools.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If different teams use different mechanisms to access infrastructure state, then each team can access data in their preferred format, but different versions of reality are created and transparency is reduced

Engineering Contradiction:
Improveteam-specific access flexibilityVSAvoidtransparency
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The DDQL query platform acts as an intermediary layer between different teams and the infrastructure. Instead of each team directly accessing infrastructure through their own mechanisms, they all query through this unified platform which standardizes the data representation and ensures everyone sees the same version of infrastructure state, maintaining transparency while allowing flexible query capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If manual work and scripts are used to track infrastructure changes, then flexibility in handling edge cases is maintained, but productivity and efficiency are reduced

Engineering Contradiction:
Improvehandling edge casesVSAvoidefficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The query platform enables self-service querying of infrastructure information through DDQL. Users can directly query the infrastructure state, relationships, and changes without requiring manual scripting or intermediate processing steps. The platform automatically handles data aggregation, relationship navigation, and filtering, significantly improving efficiency while maintaining the ability to handle complex queries through the expressive DDQL language.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20240028590A1Systems and methods for querying data
Publication Date: 2024.01.25 MONDOO INC
  • US20240028590A1 patent drawing
  • US20240028590A1 patent drawing
  • US20240028590A1 patent drawing

AI summary

Provided herein are systems and methods for querying data. The method comprises: (a) receiving a input query from a user to examine an object; (b) traversing a graph to identify one or more resources for collecting data based on the input query; and (c) aggregating the data to construct a view for the object. The view comprises information about metadata of the object or a relationship between the object and the one or more resources.