IP Library Patent Application 17520591
Patent Application
App. No. 17/520,591

DATA PIPELINE MANAGEMENT IN OPERATIONAL TECHNOLOGY HARDWARE AND NETWORKS

Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US None
App. No.
17/520,591
Abstract

On an operational technology network device, a first environment and a second environment are created and isolated. A first set of data pipelines are executed in the first environment that ingest a first set of data from a first set of data sources. A second set of data pipelines are executed in the second environment that ingest a second set of data from a second set of data sources. A first set of data management applications are executed in the first environment that access the first set of data and are isolated from the second set of data. A second set of data management applications are executed in the second environment that access the second set of data and are isolated from the first set of data. Execution of the first set of data pipelines is prioritized over execution of the second set of data pipelines.

Claims (76)

1 . An operational technology network device comprising:

one or more processors;

at least one memory coupled to the one or more processors and storing instructions which, when executed by the one or more processors, cause the one or more processors to:

create, on the operational technology network device, a first environment and a second environment that are isolated;

execute, in the first environment, a first set of data pipelines that ingest a first set of data from a first set of data sources deployed in an operational technology (OT) network;

execute, in the second environment, a second set of data pipelines that ingest a second set of data from a second set of data sources deployed in the OT network;

execute, in the first environment, a first set of data management applications that access the first set of data and are isolated from the second set of data;

execute, in the second environment, a second set of data management applications that access the second set of data and are isolated from the first set of data; and

prioritize execution of the first set of data pipelines over execution of the second set of data pipelines.

2 . The operational technology network device of claim 1 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:

prioritize execution of the first set of data management applications over execution of the second set of data management applications.

3 . The operational technology network device of claim 1 , wherein the first set of data pipelines is generated based on pipeline component templates designed by an authorized party.

4 . The operational technology network device of claim 1 , wherein the second set of data pipelines is generated based on pipeline component templates designed by an end user of the operational technology network device.

5 . The operational technology network device of claim 1 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:

execute a third environment that is isolated from the first environment and the second environment;

execute, in the third environment, a third set of data pipelines that ingest a third set of data from a third set of data sources; and

execute, in the third environment, a third set of data management applications that access the third set of data and are isolated from the first set of data and the second set of data;

wherein execution of the third set of data pipelines is prioritized after execution of the first set of data pipelines and before execution of the second set of data pipelines.

6 . The operational technology network device of claim 5 , wherein the third set of data pipelines is generated based on pipeline component templates designed by an approved third party.

7 . The operational technology network device of claim 1 :

wherein the first set of data management applications comprises a search application instance for searching the first set of data; and

wherein the second set of data management applications comprises a search application instance for searching the second set of data.

8 . The operational technology network device of claim 1 :

wherein the first set of data management applications comprises a visualization application instance for manipulating and presenting the first set of data; and

wherein the second set of data management applications comprises a visualization application instance for manipulating and presenting the second set of data.

9 . The operational technology network device of claim 1 :

wherein executing the first set of data pipelines includes executing, in the first environment, at least one data pipeline application instance that executes the first set of data pipelines; and

wherein executing the second set of data pipelines includes executing, in the second environment, at least one data pipeline application instance that executes the second set of data pipelines.

10 . The operational technology network device of claim 9 :

wherein the at least one data pipeline application instance that executes the first set of data pipelines includes at least one Logstash instance executing in the first environment;

wherein the at least one data pipeline application instance that executes the second set of data pipelines includes at least one Logstash instance executing in the second environment; and

wherein the first set of data management applications and the second set of data management applications each comprise an Elasticsearch instance and a Kibana instance.

11 . The operational technology network device of claim 1 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:

maintain a template library comprising a plurality of pipeline component templates;

provide a pipeline creation user interface (UI) to a client device;

accept user input including a selected set of pipeline component templates;

accept user input including a set of attribute values required by the selected set of pipeline component templates; and

execute a data pipeline based on the selected set of templates and the set of attribute values.

12 . The operational technology network device of claim 11 , wherein the plurality of pipeline component templates comprises at least one extract template, at least one transform template, and at least one load template.

13 . A computer-readable medium storing instructions which, when executed by one or more processors, cause the one or more processors to:

create, on an operational technology network device, a first environment and a second environment that are isolated;

execute, in the first environment, a first set of data pipelines that ingest a first set of data from a first set of data sources deployed in an operational technology (OT) network;

execute, in the second environment, a second set of data pipelines that ingest a second set of data from a second set of data sources deployed in the OT network;

execute, in the first environment, a first set of data management applications that access the first set of data and are isolated from the second set of data;

execute, in the second environment, a second set of data management applications that access the second set of data and are isolated from the first set of data; and

prioritize execution of the first set of data pipelines over execution of the second set of data pipelines.

14 . The computer-readable medium of claim 13 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:

prioritize execution of the first set of data management applications over execution of the second set of data management applications.

15 . The computer-readable medium of claim 13 ,

wherein the first set of data pipelines is generated based on pipeline component templates designed by an authorized party;

wherein the second set of data pipelines is generated based on pipeline component templates designed by an end user of the operational technology network device.

16 . The computer-readable medium of claim 13 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:

execute a third environment that is isolated from the first environment and the second environment;

execute, in the third environment, a third set of data pipelines that ingest a third set of data from a third set of data sources; and

execute, in the third environment, a third set of data management applications that access the third set of data and are isolated from the first set of data and the second set of data;

wherein execution of the third set of data pipelines is prioritized after execution of the first set of data pipelines and before execution of the second set of data pipelines.

17 . The computer-readable medium of claim 13 :

wherein the first set of data management applications comprises a search application instance for searching the first set of data; and

wherein the second set of data management applications comprises a search application instance for searching the second set of data.

18 . The computer-readable medium of claim 13 :

wherein the first set of data management applications comprises a visualization application instance for manipulating and presenting the first set of data; and

wherein the second set of data management applications comprises a visualization application instance for manipulating and presenting the second set of data.

19 . The computer-readable medium of claim 13 , wherein the instructions, when executed by the one or more processors, cause the one or more processors to:

maintain a template library comprising a plurality of pipeline component templates;

provide a pipeline creation user interface (UI) to a client device;

accept user input including a selected set of pipeline component templates;

accept user input including a set of attribute values required by the selected set of pipeline component templates; and

execute a data pipeline based on the selected set of templates and the set of attribute values.

20 . A method comprising:

creating, on an operational technology network device, a first environment and a second environment that are isolated;

executing, in the first environment, a first set of data pipelines that ingest a first set of data from a first set of data sources deployed in an operational technology (OT) network;

executing, in the second environment, a second set of data pipelines that ingest a second set of data from a second set of data sources deployed in the OT network;

executing, in the first environment, a first set of data management applications that access the first set of data and are isolated from the second set of data;

executing, in the second environment, a second set of data management applications that access the second set of data and are isolated from the first set of data; and

prioritizing execution of the first set of data pipelines over execution of the second set of data pipelines.

wherein the method is performed by a hardware device comprising one or more processors.

Assignments (4)
RELEASE OF SECURITY INTEREST Recorded Jul 1, 2025
From: HERCULES CAPITAL, INC.
To: DRAGOS, INC.
Reel/Frame 071582/0570 →
SECURITY INTEREST Recorded Jun 30, 2025
From: DRAGOS, INC.
To: ACQUIOM AGENCY SERVICES LLC
Reel/Frame 071568/0864 →
SECURITY INTEREST Recorded Jul 3, 2023
From: DRAGOS, INC.
To: HERCULES CAPITAL, INC.
Reel/Frame 064136/0559 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 5, 2021
From: BLADOW, GARRETT
To: DRAGOS, INC.
Reel/Frame 058037/0294 →