# US 11,444,826 B1 · Systems and methods for embedding automated remediation into network solution instructions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,444,826 B1 - Document ID: US11444826B1 - Status: Granted - Kind: B1 - Application number: 17/238,297 - Filed: 2021-04-23 - Granted: 2022-09-13 - Earliest claimed: 2021-04-23 - Assignees: Fortinet, Inc. - Applicants: Fortinet, Inc. - Inventors: Jason Abate; Shabbir Karimi - Web page: https://patentgrep.com/patent/US11444826B1 ## CPC - H04L 41/0654: using network fault recovery (ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437) - H04L 41/0663: Performing the actions predefined by failover planning, e.g. switching to standby network elements - H04L 41/0627: {by acting on the notification or alarm source} - H04L 41/0645: {by additionally acting on or stimulating the network after receiving notifications} - H04L 41/0686: Additional information in the notification, e.g. enhancement of specific meta-data - H04L 41/30: {Decision processes by autonomous network management units using voting and bidding} - H04L 41/5048: {Automatic or semi-automatic definitions, e.g. definition templates} - H04L 41/5074: Handling of user complaints or trouble tickets - H04L 43/0817: by checking functioning - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Various approaches for providing network maintenance and health monitoring. In some cases, some approaches include systems, methods, and/or devices for receiving and cataloging network incidents and in providing proposed solutions that may include embedded automated remediations and/or embedded dynamic instructions to mitigate the network incidents. ## Claims ### Claim 1 A method for distributing network intelligence, the method comprising: generating, by a processing resource, a subset of proposed solutions from a plurality of solutions that correspond to a network element malfunction, wherein at least one of the subset of proposed solutions includes at least one of an automated remediation or a dynamic instruction; presenting, by the processing resource, the subset of proposed solutions to a user, wherein the at least one of the proposed solutions includes a branching dynamic instruction that includes at least two branch processes and a criteria for selecting between the two branch processes; receiving, by the processing resource, a selection from the user indicating one of the plurality of proposed solutions; and providing, by the processing resource, the one of the plurality of proposed solutions to the user. ### Claim 2 (depends on 1) The method of claim 1, wherein generating the subset of proposed solutions that correspond to the network element malfunction comprises: scoring, by the processing resource, each of the plurality of solutions relative to an indication of the network element malfunction based upon a similarity of at least a first data and a second data to corresponding information associated with each of the plurality of solutions to yield a plurality of scores, wherein each of the plurality of scores corresponds to a respective one of the plurality of solutions; and selecting, by the processing resource, the subset proposed solutions based upon the plurality of scores. ### Claim 3 (depends on 2) The method of claim 2, wherein the at least one of the subset of proposed solutions that includes the at least one of the automated remediation or the dynamic instruction is associated with at least one indication of success or indication of failure received from a prior user of the at least one of the subset of proposed solutions, and wherein the scoring, by the processing resource, relies on the at least one indication of success or indication of failure. ### Claim 4 (depends on 1) The method of claim 1, wherein the at least one of the proposed solutions includes a non-dynamic instruction. ### Claim 5 (depends on 1) The method of claim 1, wherein the at least two branch processes are selected from a group consisting of: two manual instructions, two automated remediations, two dynamic instructions, a manual instruction and an automated remediation, a manual instruction and a dynamic instruction, and an automated remediation and a dynamic instruction. ### Claim 6 (depends on 1) The method of claim 1, wherein the at least one of the proposed solutions includes an automated remediation. ### Claim 7 (depends on 6) The method of claim 6, wherein the automated remediation is a restricted automated remediation. ### Claim 8 (depends on 6) The method of claim 6, wherein the method further comprises: receiving, by the processing resource, a selection of the automated remediation from the user; and executing, by the processing resource, the automated remediation. ### Claim 9 A network incident system, the network incident system comprising: a processing resource; a database, wherein the database includes a catalog of solutions for network element malfunctions, wherein at least one of the solutions includes at least one of an automated remediation or a dynamic instruction; wherein each of the solutions is related to one or more prior incidents of network element malfunctions, wherein each of the incidents is related to one or more incident tags, and wherein each of the incident tags includes an element describing an aspect of the network element malfunction for the particular incident to which the incident tag is related; and a memory, wherein the memory has stored therein instructions, which when executed by the processing resource, cause the processing resource to: generate a subset of proposed solutions from the catalog of solutions that correspond to a network element malfunction, wherein at least one of the subset of proposed solutions includes at least one of an automated remediation or a dynamic instruction; provide the subset of proposed solutions to a user, wherein the at least one of the proposed solutions includes both a dynamic instruction and a non-dynamic instruction, and wherein the dynamic instruction is a branching dynamic instruction that includes at least two branch processes and a criteria for selecting between the two branch processes; receive a selection from the user indicating one of the plurality of proposed solutions; and provide the one of the plurality of proposed solutions to the user. ### Claim 10 (depends on 9) The network incident system of claim 9, wherein the memory further has stored therein instructions, which when executed by the processing resource, cause the processing resource to: score each of the plurality of solutions relative to an indication of the network element malfunction based upon a similarity of at least a first data and a second data to corresponding information associated with each of the plurality of solutions to yield a plurality of scores, wherein each of the plurality of scores corresponds to a respective one of the plurality of solutions; and select the subset proposed solutions based upon the plurality of scores. ### Claim 11 (depends on 10) The network incident system of claim 10, wherein the at least one of the subset of proposed solutions that includes the at least one of the automated remediation or the dynamic instruction is associated with at least one indication of success or indication of failure received from a prior user of the at least one of the subset of proposed solutions, and wherein the scoring, by the processing resource, relies on the at least one indication of success or indication of failure. ### Claim 12 (depends on 9) The network incident system of claim 9, wherein the at least two branch processes are selected from a group consisting of: two manual instructions, two automated remediations, two dynamic instructions, a manual instruction and an automated remediation, a manual instruction and a dynamic instruction, and an automated remediation and a dynamic instruction. ### Claim 13 (depends on 9) The network incident system of claim 9, wherein the at least one of the proposed solutions includes an automated remediation. ### Claim 14 (depends on 13) The network incident system of claim 13, wherein the automated remediation is a restricted automated remediation. ### Claim 15 (depends on 14) The network incident system of claim 14, wherein the memory further has stored therein instructions, which when executed by the processing resource, cause the processing resource to: receive a selection of the automated remediation from the user; and execute the automated remediation. ### Claim 16 A non-transitory computer-readable storage medium embodying a set of instructions, which when executed by one or more processing resources of a computer system, causes the processing resource to perform a method comprising: generating, by a processing resource, a subset of proposed solutions from a plurality of solutions that correspond to a network element malfunction, wherein at least one of the subset of proposed solutions includes at least one of an automated remediation or a dynamic instruction; presenting, by the processing resource, the subset of proposed solutions to a user, wherein the at least one of the proposed solutions includes a branching dynamic instruction that includes at least two branch processes and a criteria for selecting between the two branch processes; receiving, by the processing resource, a selection from the user indicating one of the plurality of proposed solutions; and providing, by the processing resource, the one of the plurality of proposed solutions to the user. ### Claim 17 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the set of instructions, which when executed by one or more processing resources of the computer system, causes the processing resource to generate the subset of proposed solutions that correspond to the network element malfunction includes instructions, which when executed by one or more processing resources of the computer system, causes the processing resource to perform a method comprising: scoring, by the processing resource, each of the plurality of solutions relative to an indication of the network element malfunction based upon a similarity of at least a first data and a second data to corresponding information associated with each of the plurality of solutions to yield a plurality of scores, wherein each of the plurality of scores corresponds to a respective one of the plurality of solutions; and selecting, by the processing resource, the subset proposed solutions based upon the plurality of scores. ### Claim 18 (depends on 17) The method of claim 17, wherein the at least one of the subset of proposed solutions that includes the at least one of the automated remediation or the dynamic instruction is associated with at least one indication of success or indication of failure received from a prior user of the at least one of the subset of proposed solutions, and wherein the scoring, by the processing resource, relies on the at least one indication of success or indication of failure. ### Claim 19 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the at least two branch processes are selected from a group consisting of: two manual instructions, two automated remediations, two dynamic instructions, a manual instruction and an automated remediation, a manual instruction and a dynamic instruction, and an automated remediation and a dynamic instruction. ### Claim 20 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the at least one of the proposed solutions includes an automated remediation. ### Claim 21 (depends on 20) The non-transitory computer-readable storage medium of claim 20, wherein the automated remediation is a restricted automated remediation. ### Claim 22 (depends on 20) The non-transitory computer-readable storage medium of claim 20, wherein the method further comprises: receiving, by the processing resource, a selection of the automated remediation from the user; and executing, by the processing resource, the automated remediation.