IP Library Granted Patent US 11,537,409
Granted Patent B2
US 11,537,409 · App. 17/188,185 · Granted Dec 27, 2022

System and method for managing system configuration data models

Inventors: Tuomo Mickelsson (Helsinki, FI); Kari Nurmela (Helsinki, FI); Marko Niiranen (Helsinki, FI)
Assignee: FORCEPOINT LLC
G06F9/44505G06F8/30G06F8/71H04L41/0813H04L41/22
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,537,409
App. No.
17/188,185
Granted
Dec 27, 2022
Kind
B2
Abstract

A system, for managing application specific configuration data, that receives, from a local server, a standardized configuration object, at a configuration engine, for a configurable entity, generates at least one configuration object file for the configuration entity, wherein the standardized configuration object is generated based on the application specific configuration data according to a system wide metadata specification. The system can further write each configuration object file to a shared memory structure associated with a configuration file of a configurable entity. The system receives the configuration object, compares the configuration object with another standardized configuration object, and interfaces the configuration object with the configuration engine. The interfaced configuration object can be a piece of configuration. The system permits read access to the configuration engine to the configuration object, permits read and write access to the management server to the configuration object. The local management server executes in a virtual container.

Claims (30)

1. A system comprising a non-transitory data memory device and a processor having one or more algorithms stored in the non-transitory data memory device that are loaded onto the processor to configure the processor to perform predetermined functions, comprising:

a local management server operating on the processor and configured to generate a plurality of standardized configuration objects;

a configuration engine operating on the processor and coupled to the local management server by a secure connection, wherein the local management server has sole authority to access the configuration engine; and

wherein the configuration engine is configured to generate custom configuration data including dynamic update package metadata using the standardized configuration objects according to a system wide metadata specification for an update package for each of a plurality of remote servers.

2. The system of claim 1 wherein the configuration engine is configured to write a modified configuration object file to a shared memory object structure associated with a configuration file of one of the plurality remote servers as a function of system wide metadata for a plurality of different configuration files.

3. The system of claim 1 wherein the standardized configuration object is a JSON based configuration object.

4. The system of claim 1 wherein the configuration object file comprises at least one of a C and C++ data structure and the local management engine uses the configuration engine through a protocol over a stream type UNIX domain socket.

5. The system of claim 1 wherein the local management server is configured to generate an HTML UI to modify the standard configuration object.

6. The system of claim 1 wherein the local management server is configured to deactivate the remote server prior to the generation of the custom configuration data.

7. The system of claim 6 wherein the local management server is configured to activate the remote server after generation of the custom configuration data.

8. The system of claim 6 wherein deactivating occurs over a control channel.

9. The system of claim 7 wherein activating occurs over a control channel.

10. The system of claim 7 wherein activating the remote server causes the configuration file to be loaded.

11. The system of claim 1 wherein the configuration engine is configured to compare the standardized configuration object with a stored standardized configuration object in a storage resource to generate the custom configuration data based on a difference between the standardized configuration object and the stored standardized configuration object.

12. The system of claim 11 wherein the configuration engine is configured to read the custom configuration data for one of the plurality of remote servers.

13. The system of claim 1 wherein the local management server is configured to permit read access to the configuration engine to at least one of the standardized configuration objects for one of the plurality of remote servers.

14. The system of claim 1 wherein the local management server is configured to permit read and write access to one of the remote servers to at least one of the standardized configuration object.

15. A method comprising:

generating a plurality of standardized configuration objects using a local management server operating on a processor;

coupling a configuration engine operating on the processor to the local management server by a secure connection, wherein the local management server has sole authority to access the configuration engine; and

generating custom configuration data including dynamic update package metadata with the configuration engine, using the standardized configuration objects according to a system wide metadata specification for an update package for each of a plurality of remote servers.

16. The method of claim 15 further comprising writing a modified configuration object file to a shared memory object structure associated with a configuration file of one of the plurality remote servers using the configuration engine as a function of system wide metadata for a plurality of different configuration files.

17. The method of claim 15 wherein the standardized configuration object is a JSON based configuration object.

18. The method of claim 15 wherein the configuration object file comprises at least one of a C and C++ data structure and the local management engine uses the configuration engine through a protocol over a stream type UNIX domain socket.

19. The method of claim 15 wherein the local management server executes in a virtual container.

20. A method comprising:

generating a plurality of standardized configuration objects using a local management server operating on a processor wherein the standardized configuration object is a JSON based configuration object;

coupling a configuration engine operating on the processor to the local management server by a secure connection, wherein the local management server has sole authority to access the configuration engine;

generating custom configuration data including dynamic update package metadata with the configuration engine, using the standardized configuration objects according to a system wide metadata specification for an update package for each of a plurality of remote servers; and

writing a modified configuration object file to a shared memory object structure associated with a configuration file of one of the plurality remote servers using the configuration engine as a function of system wide metadata for a plurality of different configuration files.

Assignments (4)
PATENT SECURITY AGREEMENT Recorded Aug 31, 2021
From: FORCEPOINT LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS THE COLLATERAL AGENT
Reel/Frame 057651/0150 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 19, 2021
From: FORCEPOINT FEDERAL HOLDINGS LLC
To: FORCEPOINT LLC
Reel/Frame 056294/0618 →
CHANGE OF NAME Recorded May 12, 2021
From: FORCEPOINT LLC
To: FORCEPOINT FEDERAL HOLDINGS LLC
Reel/Frame 056216/0204 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 1, 2021
From: MICKELSSON, TUOMO; NURMELA, KARI; NIIRANEN, MARKO
To: FORCEPOINT LLC
Reel/Frame 055443/0708 →
Continuity (2)
Continuation 15907658 · Feb 28, 2018
Related Publication 20210182082A1 · Jun 17, 2021