IP Library Granted Patent US 9,906,530
Granted Patent B2
US 9,906,530 · App. 14/857,775 · Granted Feb 27, 2018

Rolling security platform

Inventor: Robert Pike (Woodinville, WA)
Assignee: Cyemptive Technologies, Inc.
H04L63/10H04L63/0846H04L63/102H04L63/1408H04L63/1441
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,906,530
App. No.
14/857,775
Granted
Feb 27, 2018
Kind
B2
Abstract

A method of rolling security for a system that includes multiple server groups, such as a first server group of one or more servers and a second server group of one or more servers. The method includes repeatedly initiating rebuilding of the first server group of one or more servers. The method also includes repeatedly initiating rebuilding of the second server group of one or more servers. The rebuilding of the first server group of one or more servers is staggered in time from the rebuilding of the second server group of one or more servers. The servers may be physical servers or virtual machines. Rolling security may also be applied to software containers, computing devices within a data center, and computing devices outside of a datacenter.

Claims (55)

1. A system for rolling security, comprising:

a first server group of servers;

a second server group of servers, each server in the first server group and second server group including software that includes an operating system and an application that supports user sessions; and

a non-transitory computer readable medium storing instructions, the instructions when executed by at least one processor cause the at least one processor to:

access rolling timing information generated based on monitored durations of previous user sessions established between the application and client devices, the rolling timing information indicating rebuild timings for the first server group and rebuild timings for the second server group, the rebuild timings for the first server group being staggered in time from the rebuild timings of the second server group;

periodically initiate rebuilding of the software of each server of the first server group of servers according to the rebuild timings for the first server group; and

periodically initiate rebuilding of the software of each server in the second server group of servers according to the second rebuild timings for the second server group, the rebuilding of the first server group of servers staggered in time from the rebuilding of the second server group of servers.

2. The system of claim 1 , wherein the instructions further cause the at least one processor to:

monitor the durations of the previous user sessions; and

generate the rolling timing information.

3. A non-transitory computer readable medium storing instructions to implement rolling security for a system that includes a first server group of servers and a second server group of servers, each server in the first server group and second server group including software that includes an operating system and an application that supports user sessions, the instructions when executed by at least one processor cause the at least one processor to:

accessing rolling timing information generated based on monitored durations of previous user sessions established between the application and client devices, the rolling timing information indicating first rebuild timings for rebuilding the first server group and second rebuild timings for rebuilding the second server group, the first rebuild timings staggered in time from the second rebuild timings;

periodically initiate rebuilding of the first server group of servers according to the first rebuild timings; and

periodically rebuilding of the second server group of servers according to the second rebuild timings, the rebuilding of the first server group of servers being staggered in time from the rebuilding of the second server group of servers.

4. The computer readable medium of claim 3 , wherein:

periodically initiating rebuilding of the first server group comprises initiating rebuilding of software of each server of the first server group; and

periodically initiating rebuilding of the second server group comprises initiating rebuilding software of each server of the second server group.

5. The computer readable medium of claim 3 , wherein:

periodically initiating rebuilding of the first server group comprises initiating a rebuilding of firmware in each server of the first server group; and

periodically initiating rebuilding of the second server group comprises initiating a rebuilding of firmware in each server of the second server group.

6. The computer readable medium of claim 3 , wherein the instructions are executable to:

periodically initiate a password change of each server in the first server group when rebuilding the first server group; and

periodically a password change of each server in the second server group when rebuilding the second server group.

7. The computer readable medium of claim 3 , the instructions further causing the at least one processor to:

monitor the durations of the previous user sessions; and

generate the rolling timing information.

8. The computer readable medium of claim 3 , wherein the servers in the first server group and the second server group that are periodically rebuilt are physical servers.

9. The computer readable medium of claim 3 , wherein the servers in the first server group and the second server group that are periodically rebuilt are virtual machines.

10. The computer readable medium of claim 3 , wherein the system further comprises one or more load balancers to balance network traffic between the first server group and the second server group, and the instructions cause the processor to:

periodically initiate shutdown preparation mode of the first server group prior to each rebuilding of the first server group, the load balancers preventing new sessions from being established with applications of the first server group while the first server group is in shutdown preparation mode; and

periodically initiate shutdown preparation mode of the second server group prior to each rebuilding of the second server group, the load balancers preventing new sessions from being established with applications of the second server group while the second server group is in shutdown preparation mode.

11. A computer implemented method of rolling security for a system that includes a first server group of servers and a second server group of servers, each server in the first server group and second server group including software that includes an operating system and an application that supports user sessions, the method comprising:

accessing rolling timing information generated based on monitored durations of previous user sessions established between the application and client devices, the rolling timing information indicating first rebuild timings for rebuilding the first server group and second rebuild timings for rebuilding the second server group, the first rebuild timings staggered in time from the second rebuild timings;

periodically initiating rebuilding of the first server group of one or more servers according to the first rebuild timings; and

periodically initiating rebuilding of the second server group of one or more servers according to the second rebuild timings, the rebuilding of the first server group being staggered in time from the rebuilding of the second server group.

12. The method of claim 11 , wherein:

periodically initiating rebuilding of the first server group comprises initiating rebuilding of software of each server of the first server group; and

periodically initiating rebuilding of the second server group comprises initiating rebuilding software of each server of the second server group.

13. The method of claim 11 , wherein:

periodically initiating rebuilding of the first server group comprises initiating a rebuilding of firmware in each server of the first server group; and

periodically initiating rebuilding of the second server group comprises initiating a rebuilding of firmware in each server of the second server group.

14. The method of claim 11 , further comprising:

periodically initiating a password change of each server in the first server group when rebuilding the first server group; and

periodically initiating a password change of each server in the second server group when rebuilding the second server group.

15. The method of claim 11 , further comprising:

monitoring the durations of the previous user sessions; and

generating the rolling timing information.

16. A non-transitory computer readable medium storing instructions to implement rolling security of a system that includes a first group of software containers and a second group of software containers, each software container in the first group of software containers and the second group of software containers including software that includes an operating system and an application that supports user sessions, the instructions when executed by at least one processor cause the at least one processor to:

access rolling timing information generated based on monitored durations of previous user sessions established between the application and client devices, the rolling timing information indicating first rebuild timings for rebuilding the first group of software containers and second rebuild timings for rebuilding the second group of software containers, the first rebuild timings staggered in time from the second rebuild timings;

periodically initiate rebuilding of the first group of software containers according to the first rebuild timings; and

periodically initiate rebuilding of the second group of software containers according to the second rebuild timings, the rebuilding of the first group of software containers being staggered in time from the rebuilding of the second group of software containers.

17. A method to implement rolling security of a system that includes a first group of software containers and a second group of software containers, each software container in the first group of software containers and the second group of software containers including software that includes an operating system and an application that supports user sessions, the method comprising:

accessing rolling timing information generated based on monitored durations of previous user sessions established between the application and client devices, the rolling timing information indicating first rebuild timings for rebuilding the first group of software containers and second rebuild timings for rebuilding the second group of software containers, the first rebuild timings staggered in time from the second rebuild timings;

periodically initiating rebuilding of the first group of software containers according to the first rebuild timings; and

periodically initiating rebuilding of the second group of software containers according to the second rebuild timings, the rebuilding of the first group of software containers being staggered in time from the rebuilding of the second group of software containers.

Assignments (2)
CHANGE OF NAME Recorded Sep 28, 2017
From: ENZOO INC.
To: CYEMPTIVE TECHNOLOGIES, INC.
Reel/Frame 044052/0438 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 6, 2015
From: PIKE, ROBERT
To: ENZOO, INC.
Reel/Frame 036740/0030 →
Continuity (2)
Provisional Application 62105685 · Jan 20, 2015
Related Publication 20160212128A1 · Jul 21, 2016