US 2024/0187474 A1Published application

Cloud intelligence data model and framework

AssigneeSonrai Security Inc.

InventorsBen Wuest, William Bird, Brad Peters, Albert Lockett

Life of this patent

Estimating the term…

Loading patent…

Abstract

A network-accessible service provides an enterprise with a view of identity and data activity in the enterprise's cloud accounts. The service enables distinct cloud provider management models to be normalized with centralized analytics and views across large numbers of cloud accounts. The service enables an enterprise to model all activity and relationships across cloud vendors, accounts and third party stores. Using a domain-specific query language, the system enables rapid interrogation of a complete and centralized data model of all data and identity relationships. User reports may be generated showing all privileges and data to which a particular identity has access. Using the display views, a user can pivot all functions across teams, applications and data, geography, provider and compliance mandates, and the like.

Claims1

Dependent claims

A method operative in a multi-tenant shared infrastructure to monitor a set of cloud deployments associated with an enterprise, comprising:

receiving a data set generated by execution within a cloud deployment of a reporting code component, the reporting code component having been generated from a classification model, the data set comprising identities of subscriber users and their associated permissions with respect to resources in the cloud deployments;
generating a knowledge graph specific to the enterprise that embeds data from the data set and the classification model, the knowledge graph instantiating, collectively, the associated permissions of the enterprise for the set of cloud deployments;
and
responsive to receipt of an information request structured according to a query language, the query language being generated at least in part from a schema associated with the classification model, querying the knowledge graph and returning a response to the information request.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 18/440,682Filed 13 Feb 2024
Priority: 8 Oct 2018
Published: 6 Jun 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 12/2856
Wide area networks, e.g. public data networks: access arrangements, e.g. Internet access
G06F 16/9024
Indexing; Data structures therefor; Storage structures: graphs; Linked lists
G06F 16/9027
Indexing; Data structures therefor; Storage structures: trees
G06F 16/906
Details of database functions independent of the retrieved data types: clustering; Classification

Family

Application62/742,747Us provisional application · filed 8 Oct 2018
Application16/505,038Continuation · filed 8 Jul 2019
Application16/939,890Continuation · filed 27 Jul 2020
Application18/103,821Continuation · filed 31 Jan 2023
Application18/440,682Continuation
US 10,728,307 B2Related patent
US 11,570,231 B2Related patent
US 11,902,354 B2Related patent
US 2020/0112602 A1Published application
US 2020/0358842 A1Published application
US 2023/0179649 A1Published application
US 2024/0187474 A1This patent

From the US filing history. Foreign family members aren’t listed.