# US 2026/0093590 A1 · Safety compliance for maintenance and operations of critical systems

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2026/0093590 A1
- Document ID: US20260093590A1
- Status: Published application
- Kind: A1
- Application number: 18/899,343
- Filed: 2024-09-27
- Published: 2026-04-02
- Earliest claimed: 2024-09-27
- Assignees: Kyndryl, Inc.
- Applicants: Kyndryl, Inc.
- Inventors: Robert S. Milligan; AMY FORSEE; Deepika Murthy Nath; KELLY Ann Washburn
- Web page: https://patentgrep.com/patent/US20260093590A1

## CPC

- G06F 11/3072: {where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting}
- H04L 63/1425: {Traffic logging, e.g. anomaly detection}
- G06F 11/3476: {Data logging (G06F11/14, G06F11/2205 take precedence)}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method may include receiving a set of inputs; transforming the set of inputs into a set of corresponding waveforms; generating from the set of corresponding waveforms, a composite wave spectrum, including identifying a waveform sub-set corresponding to a time interval of the composite wave spectrum; determining based on a comparison of the waveform sub-set to a pattern repository, an anomaly exists within the waveform sub-set in response to determining the composite wave spectrum is an operational-type spectrum; analyzing the anomaly to determine an associated risk; logging based on the anomaly and the associated risk, an incident record; determining based on the anomaly, an approved change control exists; and executing the approved change control.

## Claims

### Claim 1

A method, comprising:
receiving, by a computing device, a set of inputs;
transforming, by the computing device, the set of inputs into a set of corresponding waveforms;
generating, by the computing device, from the set of corresponding waveforms, a composite wave spectrum comprising identifying a waveform sub-set corresponding to a time interval of the composite wave spectrum;
determining, by the computing device, based on a comparison of the waveform sub-set to a pattern repository, an anomaly exists within the waveform sub-set in response to determining the composite wave spectrum is an operational-type spectrum;
analyzing, by the computing device, the anomaly to determine an associated risk;
logging, by the computing device, based on the anomaly and the associated risk, an incident record;
determining, by a computing device, based on the anomaly, an approved change control exists; and
executing, by the computing device, the approved change control.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
updating, by a computing device, the pattern repository to include a pattern within the composite wave spectrum in response to determining the composite wave spectrum is a training type spectrum; and
generating a training-type alert corresponding to the updated pattern repository.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
executing a predefined action based on the associated risk in response to determining the emergency bypass applies.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
determining, by the computing device, no approved change control exists in response to determining the emergency bypass does not apply;
opening, based on the incident record, an update change control ticket; and
executing a predefined action based on the associated risk.

### Claim 5 (depends on 4)

The method of claim 4, wherein the predefined action comprises automatically locking out unauthorized access to a data center by preventing network communication with the data center.

### Claim 6 (depends on 1)

The method of claim 1, further comprising:
completing, by the computing device, a set of predefined mitigation actions in response to determining the composite wave spectrum includes a classified pattern; and
generating a classified pattern alert corresponding to the completed predefined mitigation actions.

### Claim 7 (depends on 1)

The method of claim 1, wherein the determining an approved change control exists based on the anomaly occurs in response to not receiving a user-initiated emergency bypass.

### Claim 8 (depends on 1)

The method of claim 1, further comprising:
generating, by the computing device, an operational-type alert corresponding to an executed approved change control.

### Claim 9 (depends on 1)

The method of claim 1, further comprising:
requesting, by the computing device, user classification and risk assessment of the unclassified pattern in response to determining the composite wave spectrum includes an unclassified pattern;
receiving, by the computing device, user classification of the unclassified pattern;
creating, by the computing device, a newly classified pattern based on the received unclassified pattern; and
storing, by the computing device, the newly classified pattern in the pattern repository.

### Claim 10 (depends on 9)

The method of claim 9, further comprising:
completing, by the computing device, a set of mitigation actions in response to receiving classification and risk assessment of the unclassified pattern.

### Claim 11 (depends on 1)

The method of claim 1, wherein the computing device includes software provided as a service in a cloud environment.

### Claim 12

A computer program product comprising one or more computer readable storage media having program instructions collectively stored on the one or more computer readable storage media, the program instructions executable to:
receive a set of inputs;
transform the set of inputs into a set of corresponding waveforms;
generate from the set of corresponding waveforms, a composite wave spectrum comprising identifying a waveform sub-set corresponding to a time interval of the composite wave spectrum;
determine, based on a comparison of the waveform sub-set to a pattern repository, an anomaly exists within the waveform sub-set in response to determining the composite wave spectrum is an operational-type spectrum;
analyze the anomaly to determine an associated risk;
log, based on the anomaly and the associated risk, an incident record;
determine, based on the anomaly, an approved change control exists; and
execute the approved change control.

### Claim 13 (depends on 12)

The method of claim 12, wherein the program instructions are executable to:
update the pattern repository to include a pattern within the composite wave spectrum in response to determining the composite wave spectrum is a training type spectrum; and
generate a training-type alert corresponding to the updated pattern repository.

### Claim 14 (depends on 12)

The method of claim 12, wherein the program instructions are executable to:
execute a predefined action based on the associated risk in response to determining the emergency bypass applies.

### Claim 15 (depends on 12)

The method of claim 12, wherein the program instructions are executable to:
determine that no approved change control exists in response to determining the emergency bypass does not apply;
open, based on the incident record, an update change control ticket; and
execute a predefined action based on the associated risk.

### Claim 16 (depends on 12)

The method of claim 12, further comprising:
complete a set of predefined mitigation actions in response to determining the composite wave spectrum includes a classified pattern; and
generate a classified pattern alert corresponding to the completed predefined mitigation actions.

### Claim 17 (depends on 12)

The method of claim 12, wherein the determining an approved change control exists based on the anomaly occurs in response to not receiving a user-initiated emergency bypass.

### Claim 18 (depends on 12)

The method of claim 12, wherein the program instructions are executable to:
generate an operational-type alert corresponding to an executed approved change control.

### Claim 19 (depends on 12)

The method of claim 12, wherein the program instructions are executable to:
request user classification and risk assessment of the unclassified pattern in response to determining the composite wave spectrum includes an unclassified pattern;
receive user classification of the unclassified pattern;
create a newly classified pattern based on the received unclassified pattern; and
store a newly classified pattern in the pattern repository.

### Claim 20

A system comprising:
a processor, a computer readable memory, one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions executable to:
receive a set of inputs;
transform the set of inputs into a set of corresponding waveforms;
generate from the set of corresponding waveforms, a composite wave spectrum comprising identifying a waveform sub-set corresponding to a time interval of the composite wave spectrum;
determine, based on a comparison of the waveform sub-set to a pattern repository, an anomaly exists within the waveform sub-set in response to determining the composite wave spectrum is an operational-type spectrum;
analyze the anomaly to determine an associated risk;
log, based on the anomaly and the associated risk, an incident record;
determine, based on the anomaly, an approved change control exists; and
execute the approved change control.