# US 2022/0044255 A1 · Risk mitigation for service delivery > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2022/0044255 A1 - Document ID: US20220044255A1 - Status: Published application - Kind: A1 - Application number: 16/984,647 - Filed: 2020-08-04 - Published: 2022-02-10 - Earliest claimed: 2020-08-04 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Rui Leca; James O'Mahony; John Finn; Fiona Munchberg; Denis Gerald Noonan; Brian Power; Bridget Drexler; Martin Kerrigan; Derek OKeeffe; Waqas Raja - Web page: https://patentgrep.com/patent/US20220044255A1 ## CPC - G06Q 30/0185: {Product, service or business identity fraud} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A system and method mitigate configuration change risk for a managed service in a customer environment. Reconfiguration commands sent to a management interface are intercepted and provided to a mitigation service executing in the customer environment. The mitigation service computes a risk rating for each such command based on a wide variety of factors. If the risk is low, then the mitigation service passes the command transparently to the management interface for execution. However, if the risk is too high, then the mitigation service requests an authorization code before the command can be executed. The acceptable level of risk may be set jointly by the customer and the managed service provider according to a service level agreement. Authorization codes can confirm performance of many mitigation actions, including approval by the customer or a supervising manager, studying relevant documentation, and clean execution of the command in a testing environment. ## Claims ### Claim 1 A system for mitigating configuration change risk for a managed service in a customer environment, the system comprising: a command interceptor configured for intercepting a command sent to a management interface for altering operation of the managed service; a risk rating module configured for rating a risk of error if the intercepted command were to be executed in the customer environment; a thresholding module configured for comparing the rated risk of error to a given error threshold; a command forwarder configured for, when the rated risk of error is below the given error threshold, forwarding the intercepted command to the management interface to execute the command, thereby altering the operation of the managed service; and an authorization module configured for, when the rated risk of error is equal to or above the given error threshold, (1) requesting an authorization code, and (2) only in response to receiving the authorization code, forwarding the intercepted command to the management interface to execute the command, thereby altering the operation of the managed service. ### Claim 2 (depends on 1) The system according to claim 1, wherein the management interface comprises a command line interface (CLI) and the command interceptor includes a wrapper around the CLI. ### Claim 3 (depends on 1) The system according to claim 1, wherein the management interface comprises an application programming interface (API) and the command interceptor includes a proxy. ### Claim 4 (depends on 1) The system according to claim 1, wherein the risk rating module is configured for combining risk factors relating to a respective plurality of sources of risk. ### Claim 5 (depends on 4) The system according to claim 4, further comprising a knowledge database that is executing outside the customer environment, wherein the risk rating module is configured for obtaining the risk factors from the knowledge database. ### Claim 6 (depends on 4) The system according to claim 4, wherein the risk rating module is configured for multiplying risk factors associated with: the customer environment, or the customer, or the intercepted command, or a person who sent the intercepted command, or any managed software or hardware associated with the intercepted command, or the vendor of any such managed software or hardware, or errors logged by the managed service, or any combination of these. ### Claim 7 (depends on 6) The system according to claim 6, wherein the risk factors are provided as default values that are increased or decreased on a per-customer basis. ### Claim 8 (depends on 1) The system according to claim 1, wherein the given error threshold is provided as a default value that is increased or decreased on a per-customer basis. ### Claim 9 (depends on 1) The system according to claim 1, wherein the authorization module is configured for requesting an authorization code that indicates completion, by a person who sent the intercepted command to the management interface of a particular risk-mitigating action from a plurality of such actions. ### Claim 10 (depends on 9) The system according to claim 9, wherein the plurality of risk-mitigating actions includes confirming: that an administrative supervisor or peer of the person has approved execution of the intercepted command, or that the person has read a training document relating to the intercepted command, or that the person has executed the intercepted command in a testing environment without errors, or that the intercepted command does not include common typographical errors, or that the person is certain that the intercepted command should be executed, or that a mechanism exists to undo the execution of the intercepted command if necessary, or that execution of the intercepted command will not result in a configuration of the managed service known to have errors, or any combination of these. ### Claim 11 A method of mitigating configuration change risk for a managed service in a customer environment, the method comprising: intercepting a command sent to a management interface for altering operation of the managed service; rating, by a risk rating module executing in the customer environment, a risk of error if the intercepted command were to be executed in the customer environment; comparing the rated risk of error to a given error threshold; when the rated risk of error is below the given error threshold, forwarding the intercepted command to the management interface to execute the command, thereby altering the operation of the managed service; and when the rated risk of error is equal to or above the given error threshold, (1) requesting an authorization code, and (2) only in response to receiving the authorization code, forwarding the intercepted command to the management interface to execute the command, thereby altering the operation of the managed service. ### Claim 12 (depends on 11) The method according to claim 11, wherein the management interface comprises a command line interface (CLI) and intercepting the command includes installing a wrapper around the CLI. ### Claim 13 (depends on 11) The method according to claim 11, wherein the management interface comprises an application programming interface (API) and intercepting the command includes installing a proxy. ### Claim 14 (depends on 11) The method according to claim 11, wherein rating the risk of error includes combining risk factors relating to a respective plurality of sources of risk. ### Claim 15 (depends on 14) The method according to claim 14, wherein rating the risk of error includes obtaining the risk factors from a knowledge database that is executing outside the customer environment. ### Claim 16 (depends on 14) The method according to claim 14, wherein rating the risk of error includes multiplying risk factors associated with: the customer environment, or the customer, or the intercepted command, or a person who sent the intercepted command, or any managed software or hardware associated with the intercepted command, or the vendor of any such managed software or hardware, or errors logged by the managed service, or any combination of these. ### Claim 17 (depends on 16) The method according to claim 16, wherein the risk factors are provided as default values that are increased or decreased on a per-customer basis. ### Claim 18 (depends on 11) The method according to claim 11, wherein the given error threshold is provided as a default value that is increased or decreased on a per-customer basis. ### Claim 19 (depends on 11) The method according to claim 11, wherein requesting the authorization code includes requesting an authorization code that indicates completion, by a person who sent the intercepted command to the management interface of a particular risk-mitigating action from a plurality of such actions. ### Claim 20 (depends on 19) The method according to claim 19, wherein the plurality of risk-mitigating actions includes confirming: that an administrative supervisor or peer of the person has approved execution of the intercepted command, or that the person has read a training document relating to the intercepted command, or that the person has executed the intercepted command in a testing environment without errors, or that the intercepted command does not include common typographical errors, or that the person is certain that the intercepted command should be executed, or that a mechanism exists to undo the execution of the intercepted command if necessary, or that execution of the intercepted command will not result in a configuration of the managed service known to have errors, or any combination of these.