IP Library Granted Patent US 11,507,467
Granted Patent B2
US 11,507,467 · App. 16/673,341 · Granted Nov 22, 2022

Method and system for asset protection threat detection and mitigation using interactive graphics

Inventors: Amarendra Behera (Bangalore, IN); Shelesh Chopra (Bangalore, IN); Tushar B. Dethe (Bangalore, IN); Gururaj Soma (Bangalore, IN); Himanshu Arora (Bangalore, IN); Deependra Pratap Singh (Bangalore, IN)
Assignee: EMC IP HOLDING COMPANY LLC
G06F11/1451G06F11/1461G06F11/1464G06F11/1469G06F21/6218
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,507,467
App. No.
16/673,341
Granted
Nov 22, 2022
Kind
B2
Abstract

A method and system for asset protection threat detection and mitigation using interactive graphics. Specifically, the disclosed method and system entail discerning protection vulnerabilities exhibited by assets (or databases) based on maintained backup metadata. These protection vulnerabilities may subsequently be visualized as part of a projected graphical user interface, which may not only disclose the protection vulnerabilities to a user but also may enable the user to rectify the disclosed protection vulnerabilities through on-demand asset backup operations.

Claims (70)

1. A method for mitigating asset protection threats, comprising:

initializing a user interface comprising an asset matrix of asset matrix elements and a backup asset matrix of backup asset matrix elements;

identifying a live service from a set of services;

issuing, to a backup storage system, a first query comprising a first set of asset names associated with a first set of assets of the asset matrix mapped to the live service;

receiving, in response to the first query and from the backup storage system, first backup asset metadata for a first set of backup assets mapped to the first set of asset names;

updating the backup asset matrix based on at least a portion of the first backup asset metadata;

publishing the user interface to obtain a published user interface;

detecting an asset protection intent based on user interaction with the published user interface, wherein the published user interface comprises:

the asset matrix of asset matrix elements, each of the asset matrix elements being a user interface object associated with an asset belonging to the live service, and

the backup asset matrix of backup asset matrix elements, each of the backup asset matrix elements being a user interface object associated with a backup asset belonging to the live service;

identifying the asset to which the asset protection intent is directed;

initiating, in response to the detecting the asset protection intent, a backup operation targeting the asset to obtain a corresponding backup asset; and

issuing, to a backup storage system, a backup request comprising the corresponding backup asset.

2. The method of claim 1 , wherein the asset protection intent reflects user intention to mitigate an asset protection threat detected for the asset, wherein the asset protection threat is exhibited using at least one user interface object of the backup asset matrix of the published user interface.

3. The method of claim 1 , wherein the asset represents a database managed by a service executing on a client device operatively connected to the backup storage system.

4. The method of claim 3 , wherein the service represents a database management system instance.

5. The method of claim 1 , wherein the corresponding backup asset comprises a replication of at least a granularity of the asset for a current point-in-time.

6. The method of claim 1 , further comprising: prior to issuing the backup request:

identifying a protection policy based on user selection from a plurality of protection policies exhibited on the published user interface; and

obtaining protection policy metadata associated with the protection policy,

wherein the backup request further comprises the protection policy metadata.

7. The method of claim 1 , further comprising:

receiving, in response to the backup request, an acknowledgement from the backup storage system; and

updating, based on the acknowledgment, at least a portion of the published user interface.

8. The method of claim 7 , wherein updating the at least portion of the published user interface, comprises:

modifying at least one property of at least one user interface object of the backup asset matrix of the published user interface in response to the acknowledgement,

wherein by modifying the at least one property of the at least one user interface object, at least one selected from a group consisting of an appearance of the at least one user interface object and information disclosed by the at least one user interface object, is changed to remove an exhibition of an asset protection threat on the backup asset matrix of the published user interface,

wherein the asset protection threat had been detected for the asset.

9. The method of claim 1 , wherein the first backup asset metadata comprises a last backup operation timestamp encoding a date and time marking a completion of a last backup operation targeting the first set of assets.

10. The method of claim 9 , wherein updating the backup asset matrix, comprises:

modifying at least one property of at least a first portion of user interface objects of the backup asset matrix based at least on the last backup operation timestamp,

wherein by modifying the at least one property of the at least first portion of the plurality of user interface objects, at least one selected from a group consisting of an appearance of the at least first portion of the plurality of user interface objects and information disclosed by the at least first portion of the plurality of user interface objects, is changed to exhibit a detected asset protection threat on the user interface,

wherein the detected asset protection threat is directed to the asset.

11. The method of claim 1 , further comprising:

prior to publishing the user interface:

identifying a second live service from the set of services;

issuing, to the backup storage system, a second query comprising a second set of asset names of the asset matrix associated with a second set of assets mapped to the second live service;

receiving, in response to the second query and from the backup storage system, second backup asset metadata for a second set of backup assets mapped to the second set of asset names; and

updating the user interface objects of the backup asset matrix based on at least a portion of the second backup asset metadata.

12. A non-transitory computer readable medium (CRM) comprising computer readable program code, which when executed by a computer processor, enables the computer processor to:

initiate a user interface comprising an asset matrix of asset matrix elements and a backup asset matrix of backup asset matrix elements;

identify a live service from a set of services;

issue, to a backup storage system, a first query comprising a first set of asset names associated with a first set of assets of the asset matrix mapped to the live service;

receive, in response to the first query and from the backup storage system, first backup asset metadata for a first set of backup assets mapped to the first set of asset names;

update the backup asset matrix based on at least a portion of the first backup asset metadata;

publish the user interface to obtain a published user interface;

detect an asset protection intent based on user interaction with the published user interface, wherein the published user interface comprises:

the asset matrix of asset matrix elements, each of the asset matrix elements being a user interface object associated with an asset belonging to the live service, and

the backup asset matrix of backup asset matrix elements, each of the backup asset matrix elements being a user interface object associated with a backup asset belonging to the live service;

identify the asset to which the asset protection intent is directed;

initiate, in response to the detecting the asset protection intent, a backup operation targeting the asset to obtain a corresponding backup asset; and

issue, to a backup storage system, a backup request comprising the corresponding backup asset.

13. The non-transitory CRM of claim 12 , wherein the asset protection intent reflects user intention to mitigate an asset protection threat detected for the asset, wherein the asset protection threat is exhibited using at least one user interface object of the backup asset matrix of the published user interface.

14. The non-transitory CRM of claim 12 , comprising computer readable program code, which when executed by the computer processor, further enables the computer processor to:

prior to issuing the backup request:

identify a protection policy based on user selection from a plurality of protection policies exhibited on the published user interface; and

obtain protection policy metadata associated with the protection policy,

wherein the backup request further comprises the protection policy metadata.

15. The non-transitory CRM of claim 12 , comprising computer readable program code, which when executed by the computer processor, further enables the computer processor to:

receive, in response to the backup request, an acknowledgement from the backup storage system; and

update, based on the acknowledgment, at least a portion of the published user interface.

16. The non-transitory CRM of claim 15 , comprising computer readable program code directed to updating the at least portion of the published user interface, which when executed by the computer processor, further enables the computer processor to:

modify at least one property of at least one user interface object of the backup asset matrix of the published user interface in response to the acknowledgement,

wherein by modifying the at least one property of the at least one user interface object, at least one selected from a group consisting of an appearance of the at least one user interface object and information disclosed by the at least one user interface object, is changed to remove an exhibition of an asset protection threat on the backup asset matrix of the published user interface,

wherein the asset protection threat had been detected for the asset.

17. The non-transitory CRM of claim 12 , wherein the first backup asset metadata comprises a last backup operation timestamp encoding a date and time indicating a completion of a last backup operation targeting the first set of assets.

18. The non-transitory CRM of claim 17 , comprising computer readable program code directed to updating the backup asset matrix, which when executed by the computer processor, further enables the computer processor to:

modify at least one property of at least a first portion of the user interface objects of the backup asset matrix based at least on the last backup operation timestamp,

wherein by modifying the at least one property of the at least first portion of the plurality of user interface objects, at least one selected from a group consisting of an appearance of the at least first portion of the plurality of user interface objects and information disclosed by the at least first portion of the plurality of user interface objects, is changed to exhibit a detected asset protection threat on the user interface,

wherein the detected asset protection threat is directed to the asset.

Assignments (9)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053311/0169) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
Reel/Frame 060438/0742 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (052216/0758) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
Reel/Frame 060438/0680 →
RELEASE OF SECURITY INTEREST AF REEL 052243 FRAME 0773 Recorded Nov 2, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
Reel/Frame 058001/0152 →
SECURITY INTEREST Recorded Jun 5, 2020
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 053311/0169 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 26, 2020
From: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
Reel/Frame 052243/0773 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Mar 24, 2020
From: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 052216/0758 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 4, 2020
From: BEHERA, AMARENDRA; CHOPRA, SHELESH; DETHE, TUSHAR B.; SOMA, GURURAJ; ARORA, HIMANSHU; SINGH, DEEPENDRA PRATAP
To: EMC IP HOLDING COMPANY LLC
Reel/Frame 051709/0824 →