IP Library Granted Patent US 12,197,399
Granted Patent B2
US 12,197,399 · App. 18/314,071 · Granted Jan 14, 2025

Managing and classifying assets in an information technology environment using tags

Inventors: David M. Whitlock (Portland, OR); Mark A. Little (Milwaukie, OR); Julie Booth (Portland, OR); Chyna Trople (Portland, OR)
Assignee: TRIPWIRE, INC.
G06F16/21G06F16/11G06F16/2291H04L41/085
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,197,399
App. No.
18/314,071
Granted
Jan 14, 2025
Kind
B2
Abstract

Disclosed below are representative embodiments of methods, apparatus, and systems for managing and classifying assets in an information technology (“IT”) environment using a tag-based approach. The disclosed tag-based classification techniques can be implemented through a graphical user interface. Embodiments of the disclosed tag-based classification techniques can be used to allow a user to easily and quickly select and perform actions on groups of one or more assets (e.g., monitor policies, perform upgrades, etc.). For example, the tag-based classification techniques can automatically classify assets into “tag sets” (or “tagged sets”) based on node properties or user-selected criteria or conditions (e.g., criteria or conditions that are established in a user-created tagging profile or rule). The tagged assets can then be further filtered to identify even deeper relationships between the assets.

Claims (39)

1. A computer-implemented method, comprising:

receiving a plurality of sets of conditions to establish a tagging profile, each of the sets of conditions specifying a respective set of one or more conditions that must be satisfied by a node before the node is assigned a respective tag of a plurality of tags associated with the tagging profile, a first set of conditions of the plurality of sets of conditions including a geographic location for the node, and a second set of conditions of the plurality of sets of conditions including only one or more characteristics different than the geographic location for the node;

receiving identifications of the plurality of tags associated with the tagging profile;

applying the tagging profile to nodes in an information technology network, the applying the tagging profile comprising assigning one or more of the tags of the plurality of tags associated with the tagging profile to one or more nodes of the nodes in the information technology network that satisfy the respective sets of conditions specified in the tagging profile, thereby generating a tagged set of nodes; and

generating a data set in a database or file system arranged according to a hierarchical tree model that comprises the tagged set of nodes, wherein at least a first node in the tagged set of nodes satisfies both the first set of conditions and the second set of conditions, wherein the hierarchical tree model has a parent node being a tag associated with the first set of conditions, a first child node being a child of the parent node and comprising a tag associated with the second set of conditions, and a second child node being a child of the first child node and comprising the first node in the tagged set of nodes,

wherein the method is performed by a monitoring computer in the information technology network,

wherein the method further comprises applying a rule to the tagged set of nodes in the data set, the rule being applied by software agents at the nodes and identifying a criterion by which a configuration change to the node and detected by the software agent is to be transmitted to the monitoring computer, and

wherein each tag is a keyword or term, and the assigning the tag to one or more nodes comprises storing the keyword or term of the tag as metadata or as a field in a database storing nodal information for the information technology network.

2. The method of claim 1 , further comprising accessing the data set comprising the tagged set of nodes with an information technology compliance and configuration control tool.

3. The method of claim 1 , wherein each tag is a keyword or term, and the assigning the tag to one or more nodes comprises storing the keyword or term of the tag as metadata or as a field in a database storing nodal information for the information technology network.

4. The method of claim 1 , further comprising providing a user interface, wherein the receiving a set of conditions or the receiving identifications of one or more tags is via the user interface.

5. A method implemented by a monitoring computer in an information technology network, the method comprising:

receiving a plurality of sets of conditions to establish a tagging profile, each of the sets of conditions specifying a respective set of one or more conditions that must be satisfied by a node before the node is assigned a respective tag of a plurality of tags associated with the tagging profile, a first set of conditions of the plurality of sets of conditions including a geographic location for the node, and a second set of conditions of the plurality of sets of conditions including only one or more characteristics different than the geographic location for the node;

receiving identifications of the plurality of tags associated with the tagging profile;

assigning one or more of the tags of the plurality of tags associated with the tagging profile to one or more nodes of the nodes in the information technology network that satisfy the respective sets of conditions specified in the tagging profile, thereby generating a tagged set of nodes;

generating a data set in a database or file system arranged according to a hierarchical tree model that comprises the tagged set of nodes, wherein at least a first node in the tagged set of nodes satisfies both the first set of conditions and the second set of conditions, wherein the hierarchical tree model has a parent node being a tag associated with the first set of conditions, a first child node being a child of the parent node and comprising a tag associated with the second set of conditions, and a second child node being a child of the first child node and comprising the first node in the tagged set of nodes;

transmitting, by the monitoring computer, a rule to a monitored node of the tagged set of nodes; and

receiving, by the monitoring computer, notification of a configuration change to the monitored node, wherein the configuration change to the node is detected by a software agent at the monitored node.

6. The method of claim 5 , further comprising allowing a user to select whether the tagging profile is to be applied to a newly detected node in the information technology network automatically or manually.

7. The method of claim 5 , wherein the nodes to which the tagging profile is applied comprise one or more of a database server, directory server, file server, or network device.

8. The method of claim 5 , wherein the list of the one or more tags is displayed in a first panel of the multi-panel display and the list of the nodes associated with the respective one of the tags is displayed in a second panel of the multi-panel display.

9. The method of claim 5 , wherein the one or more conditions comprise at least one of the following conditions:

that a node have a name or attribute that matches a user-selected keyword, and

that a node be tagged with a selected tag, the selected tag being different than the one or more tags associated with the tagging profile.

10. The method of claim 5 , further comprising allowing a user to select whether all conditions of the set or less than all conditions of the set must be satisfied before associating nodes with the one or more tags.

11. A non-transitory computer-readable medium storing computer-executable instructions which when executed by a computer cause the computer to perform a method, the instructions comprising:

instructions that cause the computer to receive a plurality of sets of conditions to establish a tagging profile, each of the sets of conditions specifying a respective set of one or more conditions that must be satisfied by a node before the node is assigned a respective tag of a plurality of tags associated with the tagging profile, a first set of conditions of the plurality of sets of conditions including a geographic location for the node, and a second set of conditions of the plurality of sets of conditions including only one or more characteristics different than the geographic location for the node;

instructions that cause the computer to receive identifications of the plurality of tags associated with the tagging profile;

instructions that cause the computer to assign one or more of the tags of the plurality of tags associated with the tagging profile to one or more nodes of the nodes in the information technology network that satisfy the respective sets of conditions specified in the tagging profile, thereby generating a tagged set of nodes;

instructions that cause the computer to generate a data set in a database or file system arranged according to a hierarchical tree model that comprises the tagged set of nodes, wherein at least a first node in the tagged set of nodes satisfies both the first set of conditions and the second set of conditions, wherein the hierarchical tree model has a parent node being a tag associated with the first set of conditions, a first child node being a child of the parent node and comprising a tag associated with the second set of conditions, and a second child node being a child of the first child node and comprising the first node in the tagged set of nodes;

instructions that cause the computer to transmit a rule to a monitored node of the tagged set of nodes; and

instructions that cause the computer to receive notification of a configuration change to the monitored node, wherein the configuration change to the node is detected by a software agent at the monitored node.

12. The non-transitory computer-readable medium of claim 11 , further comprising instructions that cause the computer to allow a user to select whether the tagging profile is to be applied to a newly detected node in the information technology network automatically or manually.

13. The non-transitory computer-readable medium of claim 11 , wherein the nodes to which the tagging profile is applied comprise one or more of a database server, directory server, file server, or network device.

14. The non-transitory computer-readable medium of claim 11 , wherein the list of the one or more tags is displayed in a first panel of the multi-panel display and the list of the nodes associated with the respective one of the tags is displayed in a second panel of the multi-panel display.

15. The non-transitory computer-readable medium of claim 11 , wherein the one or more conditions comprise at least one of the following conditions:

that a node have a name or attribute that matches a user-selected keyword, and

that a node be tagged with a selected tag, the selected tag being different than the one or more tags associated with the tagging profile.

16. The non-transitory computer-readable medium of claim 11 , further comprising instructions that cause the computer to allow a user to select whether all conditions of the set or less than all conditions of the set must be satisfied before associating nodes with the one or more tags.

Assignments (5)
SECURITY INTEREST Recorded Jan 6, 2026
From: ALERT LOGIC, INC.; DIGITAL GUARDIAN LLC; ECRIME MANAGEMENT STRATEGIES, INC.; FORTRA, LLC; GLOBALSCAPE, INC.; TRIPWIRE, INC.
To: ACQUIOM AGENCY SERVICES LLC, AS COLLATERAL AGENT
Reel/Frame 074233/0632 →
EXTENDED RCF FIRST LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Nov 21, 2025
From: TRIPWIRE, INC.
To: JEFFERIES FINANCE LLC, AS COLLATERAL AGENT
Reel/Frame 073663/0639 →
EXTENDED FIRST LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Nov 21, 2025
From: TRIPWIRE, INC.
To: JEFFERIES FINANCE LLC, AS COLLATERAL AGENT
Reel/Frame 073664/0124 →
NEW MONEY FIRST LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Nov 21, 2025
From: ALERT LOGIC, INC.; DIGITAL GUARDIAN LLC; ECRIME MANAGEMENT STRATEGIES, INC.; FORTRA, LLC; GLOBALSCAPE, INC.; TRIPWIRE, INC.; VERA SECURITY, INC.
To: ARES CAPITAL CORPORATION, AS COLLATERAL AGENT
Reel/Frame 073683/0534 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 14, 2023
From: WHITLOCK, DAVID M.; LITTLE, MARK A.; BOOTH, JULIE; TROPLE, CHYNA
To: TRIPWIRE, INC.
Reel/Frame 064259/0092 →
Continuity (5)
Division 15925436 · Mar 19, 2018
Continuation 13597242 · Aug 28, 2012
Provisional Application 61646126 · May 11, 2012
Provisional Application 61528679 · Aug 29, 2011
Related Publication 20230359595A1 · Nov 9, 2023
References Cited (45)
US 7243348B2 · Good et al. · 2007 [cited by applicant]
US 7316016B2 · Difalco · 2008 [cited by applicant]
US 7360099B2 · Difalco et al. · 2008 [cited by applicant]
US 7587754B2 · Difalco et al. · 2009 [cited by applicant]
US 7620715B2 · Difalco et al. · 2009 [cited by applicant]
US 7765460B2 · Difalco et al. · 2010 [cited by applicant]
US 7822724B2 · Difalco et al. · 2010 [cited by applicant]
US 8140635B2 · Difalco · 2012 [cited by applicant]
US 8176158B2 · Difalco et al. · 2012 [cited by applicant]
US 8566823B2 · Wagner et al. · 2013 [cited by applicant]
US 8600996B2 · Good et al. · 2013 [cited by applicant]
US 8819491B2 · Whitlock et al. · 2014 [cited by applicant]
US 8862941B2 · Whitlock et al. · 2014 [cited by applicant]
US 8868987B2 · Wagner · 2014 [cited by applicant]
US 8875129B2 · Wagner et al. · 2014 [cited by applicant]
US 8914341B2 · Difalco · 2014 [cited by applicant]
US 8996684B2 · Good et al. · 2015 [cited by applicant]
US 9026646B2 · Whitlock et al. · 2015 [cited by applicant]
US 9209996B2 · Difalco · 2015 [cited by applicant]
US 9256841B2 · Difalco et al. · 2016 [cited by applicant]
US 9922055B2 · Whitlock et al. · 2018 [cited by applicant]
US 20030233287A1 · Sadler et al. · 2003 [cited by applicant]
US 20040024660A1 · Ganesh et al. · 2004 [cited by applicant]
US 20060129415A1 · Thukral · 2006 [cited by examiner]
US 20060187026A1 · Kochis · 2006 [cited by applicant]
US 20060242277A1 · Torrence et al. · 2006 [cited by applicant]
US 20070043786A1 · Difalco et al. · 2007 [cited by applicant]
US 20070113293A1 · Blumenau · 2007 [cited by examiner]
US 20070124255A1 · Difalco et al. · 2007 [cited by applicant]
US 20070133293A1 · Chih · 2007 [cited by applicant]
US 20070273519A1 · Ichikawa et al. · 2007 [cited by applicant]
US 20090182610A1 · Palanisamy et al. · 2009 [cited by applicant]
US 20110138038A1 · Good et al. · 2011 [cited by applicant]
US 20120023076A1 · Torrence et al. · 2012 [cited by applicant]
US 20120096065A1 · Suit · 2012 [cited by examiner]
US 20120291056A1 · Donoghue · 2012 [cited by applicant]
US 20130054601A1 · Whitlock et al. · 2013 [cited by applicant]
US 20130073704A1 · Whitlock et al. · 2013 [cited by applicant]
US 20140053145A1 · Steigleder · 2014 [cited by applicant]
US 20140082620A1 · Wagner et al. · 2014 [cited by applicant]
US 20140096181A1 · Rivers · 2014 [cited by applicant]
US 20150263926A1 · Narayanan · 2015 [cited by examiner]
US 20170208088A1 · Molloy · 2017 [cited by examiner]
Kim et al., “The Design and Implementation of Tripwire: A File System Integrity Checker,” Computer Science Technical Reports, Report No. 93-071, 23 pp. (Nov. 1993). [cited by applicant]
Kim et al., “Experiences with Tripwire: Using Integrity checkers for Intrusion Detection,” Computer Science Technical Reports, Report No. 94-012, 15 pp. (Mar. 1994). [cited by applicant]