# US 11,907,730 B2 · Systems and methods for identifying and managing mutually independent computer subsystems

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,907,730 B2
- Document ID: US11907730B2
- Status: Granted
- Kind: B2
- Application number: 17/154,126
- Filed: 2021-01-21
- Published: 2021-08-05
- Granted: 2024-02-20
- Earliest claimed: 2020-01-22
- Assignees: Acentium Inc.
- Applicants: Acentium Inc
- Inventors: Amine Hamdi
- Web page: https://patentgrep.com/patent/US11907730B2

## CPC

- G06F 21/552: {involving long-term monitoring or reporting}
- G06F 9/44505: {Configuring for program initiating, e.g. using registry, configuration files}
- G06Q 40/08: Insurance
- H04L 41/12: Discovery or management of network topologies
- H04L 41/145: {involving simulating, designing, planning or modelling of a network}
- H04L 63/1416: {Event detection, e.g. attack signature detection}
- H04L 63/1433: {Vulnerability analysis}
- G06F 21/577: {Assessing vulnerabilities and evaluating computer system security}
- H04L 63/0209: {Architectural arrangements, e.g. perimeter networks or demilitarized zones}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and methods for determining subsystems of a computer environment that are in a mutual independence state can include a computing device obtaining information indicative of a group of assets of a subsystem of a computer environment. For each asset of the group of assets, the computing device can identify one or more first assets on which the asset depends and one or more second assets that depend on the asset, and determine whether the one or more first assets and the one or more second assets belong to the group of assets. The computing device can determine that the subsystem is in a mutual independence state upon determining, for each asset of the group of assets, that the first and second assets belong to the group of assets. The computing device can update a data record to indicate the determined state of subsystem of the computer environment.

## Claims

### Claim 1

A system comprising:
one or more processors and a memory configured to cause the system to:
obtain information indicative of a group of assets of a subsystem of a computer environment;
for each asset of the group of assets,
receive electronic data indicative of dependencies of the asset, the electronic data comprising at least one of connectivity data of the asset, one or more communication logs of the asset, one or more configuration logs of the asset or one or more application programming interfaces (APIs) associated with the asset;
identify, based on the electronic data indicative of the dependencies of the asset, one or more corresponding first assets of the computer environment on which the asset depends and one or more corresponding second assets of the computer environment that depend on the asset; and
determine whether the one or more corresponding first assets and the one or more corresponding second assets belong to the group of assets;
determine that the subsystem of the computer environment is in a mutual independence state upon determining, for each asset of the group of assets, that the one or more corresponding first assets and the one or more corresponding second assets belong to the group of assets; and
update, responsive to determining that the subsystem of the computer environment is in a mutual independence state, a data record to indicate that the subsystem of the computer environment is in a mutual independence state.

### Claim 2 (depends on 1)

The system of claim 1, wherein the one or more processors and the memory are configured to cause the system to identify, for each asset of the group of assets, the one or more corresponding first assets and the one or more corresponding second assets according to a first dependency level of a plurality of dependency levels.

### Claim 3 (depends on 2)

The system of claim 2, wherein each dependency level of the plurality of dependency levels is defined by a set of dependency types, the one or more corresponding first assets and the one or more corresponding second assets identified based on a first set of dependency types defining the first dependency level.

### Claim 4 (depends on 3)

The system of claim 3, wherein the one or more processors and the memory are configured to cause the system to:
determine that the subsystem of the computer environment is not in a mutual independence state upon determining, for any asset of the group of assets, that at least one of the one or more corresponding first assets and the one or more corresponding second assets does not belong to the group of assets; and
update the data record to indicate that the subsystem of the computer environment is not in a mutual independence state.

### Claim 5 (depends on 1)

The system of claim 1, wherein the one or more processors and the memory are configured to cause the system to determine a risk score of the subsystem of the computer environment based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 6 (depends on 1)

The system of claim 1, wherein the one or more processors and the memory are configured to cause the system to determine a monitoring procedure of the subsystem of the computer environment based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 7 (depends on 1)

The system of claim 1, wherein the one or more processors and the memory are configured to cause the system to determine a maintenance procedure of the subsystem of the computer environment based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 8 (depends on 1)

The system of claim 1, wherein an insurance policy, among a plurality of insurance policies, is selected for the subsystem of the computer environment based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 9 (depends on 1)

The system of claim 1, wherein the one or more processors and the memory are configured to cause the system to determine a cybersecurity threat response procedure based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 10 (depends on 9)

The system of claim 9, wherein the threat response procedure includes:
identifying a point of impact, within the computer environment, of a cybersecurity attack;
determining a type of relationship between the point of impact and the subsystem; and
determining a segregation level of the point of impact or the subsystem based on the relationship between the point of impact and the subsystem.

### Claim 11

A method comprising:
obtaining, by a computing device, information indicative of a group of assets of a subsystem of a computer environment;
for each asset of the group of assets,
receiving, by the computing device, electronic data indicative dependencies of the asset, the electronic data comprising at least one of connectivity data of the asset, one or more communication logs of the asset, one or more configuration logs of the asset or one or more application programming interfaces (APIs) associated with the asset;
identifying, by the computing device based on the electronic data indicative of the dependencies of the asset, one or more corresponding first assets of the computer environment on which the asset depends and one or more corresponding second assets of the computer environment that depend on the asset; and
determining, by the computing device, whether the one or more corresponding first assets and the one or more corresponding second assets belong to the group of assets;
determining, by the computing device, that the subsystem of the computer environment is in a mutual independence state upon determining, for each asset of the group of assets, that the one or more corresponding first assets and the one or more corresponding second assets belong to the group of assets; and
updating, by the computing device, responsive to determining that the subsystem of the computer environment is in a mutual independence state, a data record to indicate that the subsystem of the computer environment is in a mutual independence state.

### Claim 12 (depends on 11)

The method of claim 11, comprising:
identifying, for each asset of the group of assets, the one or more corresponding first assets and the one or more corresponding second assets according to a first dependency level of a plurality of dependency levels.

### Claim 13 (depends on 12)

The method of claim 12, wherein each dependency level of the plurality of dependency levels is defined by a set of dependency types, the one or more corresponding first assets and the one or more corresponding second assets identified based on a first set of dependency types defining the first dependency level.

### Claim 14 (depends on 13)

The method of claim 13, comprising:
determining that the subsystem of the computer environment is not in a mutual independence state upon determining, for any asset of the group of assets, that at least one of the one or more corresponding first assets and the one or more corresponding second assets does not belong to the group of assets; and
updating the data record to indicate that the subsystem of the computer environment is not in a mutual independence state.

### Claim 15 (depends on 11)

The method of claim 11, comprising:
determining a risk score of the subsystem of the computer environment based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 16 (depends on 11)

The method of claim 11, comprising:
determining a monitoring procedure of the subsystem of the computer environment based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 17 (depends on 11)

The method of claim 11, comprising:
determining a maintenance procedure of the subsystem of the computer environment based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 18 (depends on 11)

The method of claim 11, wherein an insurance policy, among a plurality of insurance policies, is selected for the subsystem of the computer environment based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 19 (depends on 11)

The method of claim 11, comprising:
determining a cybersecurity threat response procedure based on whether or not the subsystem of the computer environment is in a mutual independence state.

### Claim 20

A non-transitory computer-readable medium with computer code instructions stored thereon, the computer code instructions when executed by one or more processors cause the one or more processors to:
obtain information indicative of a group of assets of a subsystem of a computer environment;
for each asset of the group of assets,
receive electronic data indicative dependencies of the asset, the electronic data comprising at least one of connectivity data of the asset, one or more communication logs of the asset, one or more configuration logs of the asset or one or more application programming interfaces (APIs) associated with the asset;
identify, based on the electronic data indicative of the dependencies of the asset, one or more corresponding first assets of the computer environment on which the asset depends and one or more corresponding second assets of the computer environment that depend on the asset; and
determine whether the one or more corresponding first assets and the one or more corresponding second assets belong to the group of assets;
determine that the subsystem of the computer environment is in a mutual independence state upon determining, for each asset of the group of assets, that the one or more corresponding first assets and the one or more corresponding second assets belong to the group of assets; and
update, responsive to determining that the subsystem of the computer environment is in a mutual independence state, a data record to indicate that the subsystem of the computer environment is in a mutual independence state.