IP Library Granted Patent US 12688069
Granted Patent B2
US 12688069 · App. 17/934,306 · Granted Jul 21, 2026

Systems and methods for secured and integrated analytics deployment accelerator

Inventors: Rakesh Venuturumilli (Tempe, AZ); Srinivasu Nalam (Cumming, GA)
Assignee: HONEYWELL INTERNATIONAL INC.
G06F9/5038G06F8/63G06F9/5077G06F21/6209G06F2209/505G06F2221/2125
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12688069
App. No.
17/934,306
Granted
Jul 21, 2026
Kind
B2
Abstract

Disclosed are methods and systems for securely deploying obfuscated modules in an external system. For instance, a method may include selecting one or more modules from a module repository, the one or more modules associated with completing a task, receiving a custom base image, the custom base image including one or more environment modules configured to provide a specific execution environment for the one or more modules, transforming based on the custom base image, the one or more modules into a container image, the transforming including performing at least one obfuscation action on the one or more modules, and publishing the container image and a container image identifier to the external system, the external system configured to execute a cluster instance corresponding to the task, the cluster instance comprising at least one of: the container image identifier, one or more environmental parameters, and one or more entry point parameters.

Claims (44)

1 . A computer-implemented method for securely deploying obfuscated modules in an external system, the method comprising:

selecting, by one or more processors of one or more servers in communication with the external system via a network, one or more modules from a module repository, the one or more modules associated with completing a task;

sending, by the one or more processors, a custom base image for a deployment build to a deployment agent, wherein the deployment agent comprises one or more transforming modules;

automatically receiving, by the deployment agent, the custom base image, the custom base image including one or more custom environment modules configured to provide a specific execution environment for the one or more modules, wherein the one or more custom environment modules override default environment modules of the execution environment;

transforming, by the deployment agent using the one or more transforming modules, based on the custom base image, the one or more modules into a container image, the transforming including performing at least one obfuscation action on the one or more modules, wherein the performing of the at least one obfuscation action comprises determination of one or more environment module values to include in the execution environment to support the one or more modules, and wherein the external system is prevented from accessing the module repository, the deployment agent, and the custom base image used for the deployment build, wherein all processes until transforming the one or more modules into the container image are performed within a private network; and

publishing, by the one or more processors, the container image and a container image identifier to the external system, wherein the external system is in communication with the execution environment via the network, the external system configured to execute a cluster instance corresponding to the task, the cluster instance comprising at least one of: the container image identifier, one or more environmental parameters indicative of an environment to execute the container image, and one or more entry point parameters indicative of an initial configuration for executing the container image.

2 . The computer-implemented method of claim 1 , wherein executing the cluster instance includes retrieving and executing the container image corresponding to the container image identifier from a container registry.

3 . The computer-implemented method of claim 1 , wherein performing the at least one obfuscation action further includes:

determining, by the one or more processors, at least one environment module requirement of the one or more modules; and

analyzing, by the one or more processors, the one or more environment modules to determine that at least one of the one or more environment modules include the at least one environment module requirement.

4 . The computer-implemented method of claim 1 , the transforming including executing at least one user acceptance test on the one or more modules.

5 . The computer-implemented method of claim 1 , the transforming including:

associating, by the one or more processors, the container image with a task identifier, wherein the task identifier is associated with the task; and

utilizing, by the one or more processors, one or more encrypted variables.

6 . The computer-implemented method of claim 1 , wherein the one or more modules include one or more resource modules indicating one or more settings to be applied to the environment, one or more third party library modules that include one or more components created by a third party, one or more command modules that include one or more task instructions for how to complete a task, one or more interface modules that include one or more interfaces for visualizing text, or one or more execution modules for interacting with one or more system components for completing the task.

7 . The computer-implemented method of claim 1 , wherein the one or more environment modules includes one or more user level variables indicating variables created by a user, one or more custom testing variables indicating variables for performing testing of the custom base image, one or more custom environment modules for executing the custom base image, or one or more custom security modules for protecting the custom base image.

8 . The computer-implemented method of claim 1 , wherein the at least one obfuscation action utilizes at least one unique key.

9 . The computer-implemented method of claim 1 , wherein upon execution of the task, the external system is further configured to destroy the cluster instance so that the cluster instance is removed from the external system.

10 . A computer system for securely deploying obfuscated modules in an external system, the computer system comprising:

a memory having processor-readable instructions stored therein; and

one or more processors of one or more servers in communication with the external system via a network, wherein the one or more processors are configured to access the memory and execute the processor-readable instructions, which when executed by the one or more processors configures the one or more processors to perform a plurality of functions, including functions for:

selecting one or more modules from a module repository, the one or more modules associated with completing a task;

sending a custom base image for a deployment build to a deployment agent, wherein the deployment agent comprises one or more transforming modules;

automatically receiving, by the deployment agent the custom base image, the custom base image including one or more custom environment modules configured to provide a specific execution environment for the one or more modules, wherein the one or more custom environment modules override default environment modules of the execution environment;

transforming, by the deployment agent using the one or more transforming modules, based on the custom base image, the one or more modules into a container image, the transforming including performing at least one obfuscation action on the one or more modules, wherein the performing of the at least one obfuscation action comprises determination of one or more environment module values to include in the execution environment to support the one or more modules, and wherein the external system is prevented from accessing the module repository, the deployment agent, and the custom base image used for the deployment build, wherein all processes until transforming the one or more modules into the container image are performed within a private network; and

publishing the container image and a container image identifier to the external system, wherein the external system is in communication with the execution environment via the network, the external system configured to execute a cluster instance corresponding to the task, the cluster instance comprising at least one of: the container image identifier, one or more environmental parameters indicative of an environment to execute the container image, and one or more entry point parameters indicative of an initial configuration for executing the container image.

11 . The computer system of claim 10 , wherein executing the cluster instance includes retrieving and executing the container image corresponding to the container image identifier from a container registry.

12 . The computer system of claim 10 , wherein performing the at least one obfuscation action further includes:

determining at least one environment module requirement of the one or more modules; and

analyzing the one or more environment modules to determine that at least one of the one or more environment modules include the at least one environment module requirement.

13 . The computer system of claim 10 , the transforming including executing at least one user acceptance test on the one or more modules.

14 . The computer system of claim 10 , the transforming including:

associating the container image with a task identifier, wherein the task identifier is associated with the task.

15 . The computer system of claim 10 , wherein upon execution of the task, the external system is further configured to destroy the cluster instance so that the cluster instance is removed from the external system.

16 . The computer system of claim 10 , wherein the one or more modules include one or more resource modules indicating one or more settings to be applied to the environment, one or more third party library modules that include one or more components created by a third party, one or more command modules that include one or more task instructions for how to complete a task, one or more interface modules that include one or more interfaces for visualizing text, or one or more execution modules for interacting with one or more system components for completing the task.

17 . A non-transitory computer-readable medium containing instructions for securely deploying obfuscated modules in an external system, the instructions comprising:

selecting one or more modules from a module repository, the one or more modules associated with completing a task;

sending a custom base image for a deployment build to a deployment agent, wherein the deployment agent comprises one or more transforming modules;

automatically receiving, by the deployment agent the custom base image, the custom base image including one or more custom environment modules configured to provide a specific execution environment for the one or more modules, wherein the one or more custom environment modules override default environment modules of the execution environment;

transforming, by the deployment agent using the one or more transforming modules, based on the custom base image, the one or more modules into a container image, the transforming including performing at least one obfuscation action on the one or more modules, wherein the performing of the at least one obfuscation action comprises determination of one or more environment module values to include in the execution environment to support the one or more modules, and wherein the external system is prevented from accessing the module repository, the deployment agent, and the custom base image used for the deployment build, wherein all processes until transforming the one or more modules into the container image are performed within a private network; and

publishing the container image and a container image identifier to the external system wherein the external system is in communication with the execution environment via the network, the external system configured to execute a cluster instance corresponding to the task, the cluster instance comprising at least one of: the container image identifier, one or more environmental parameters indicative of an environment to execute the container image, and one or more entry point parameters indicative of an initial configuration for executing the container image.

18 . The non-transitory computer-readable medium of claim 17 , wherein the one or more modules include one or more resource modules indicating one or more settings to be applied to the environment, one or more third party library modules that include one or more components created by a third party, one or more command modules that include one or more task instructions for how to complete a task, one or more interface modules that include one or more interfaces for visualizing text, or one or more execution modules for interacting with one or more system components for completing the task.

19 . The non-transitory computer-readable medium of claim 17 , wherein the one or more environment modules includes one or more user level variables indicating variables created by a user, one or more custom testing variables indicating variables for performing testing of the custom base image, one or more custom environment modules for executing the custom base image, or one or more custom security modules for protecting the custom base image.

20 . The non-transitory computer-readable medium of claim 17 , wherein upon execution of the task, the external system is further configured to destroy the cluster instance so that the cluster instance is removed from the external system.