Automated data risk assessment

Patent metadata

Field	Value
Publication number	US-10348739-B2
Application number	US-201615019750-A
Country	US
Kind code	B2
Filing date	Feb 9, 2016
Priority date	Feb 9, 2016
Publication date	Jul 9, 2019
Grant date	Jul 9, 2019

Abstract

A method is described for receiving a plurality of node data streams through a data network from a plurality of source nodes, respectively, each of the plurality of node data streams comprising a plurality of node data. The method further comprises determining a respective risk assessment for each of the plurality of node data streams based on a plurality of elements, wherein the respective risk assessment indicates a level of trustworthiness of each of the plurality of node data streams. Moreover, the method comprises determining a plurality of respective actions for each of the plurality of source nodes, based on the respective risk assessment of the plurality of node data streams. The method further comprises instructing each of the plurality of source nodes to perform the respective action.

First claim

What is claimed is:

1. A method comprising:
receiving a plurality of node data streams through a data network from a plurality of source nodes, respectively, each of the plurality of node data streams comprising a plurality of node data;
determining a respective risk assessment for each of the plurality of node data streams based on characteristics of each source node and based on consistency of the plurality of node data of each source node compared within the node data of each source node and compared with the node data of other node data within the plurality of node data streams, wherein the respective risk assessment indicates a level of reliability of each of the plurality of node data streams;
determining a respective action for each of the plurality of source nodes, based on the respective risk assessment of the plurality of node data streams, the respective action to adjust an interval reading of the source node or to calibrate the source node, and wherein determining a respective action for each of the plurality of source nodes further comprises determining a respective action based on the response latency or geographic location of the source node;
transmitting, through the data network, instructions for each of the plurality of source nodes to perform the respective action.

2. The method of claim 1 , further comprising:
adjusting, in real time, the risk assessment of each of the plurality of node data streams in response to the performance of the respective action by each of the plurality of source nodes.

3. The method of claim 1 , further comprising:
determining, based on the risk assessments of the plurality of node data streams, a risk landscape of the plurality of source nodes.

4. The method of claim 3 , wherein determining a respective risk assessment for each of the plurality of node data streams further comprises:
comparing each of the plurality of node data streams to the risk landscape.

5. The method of claim 1 , wherein determining a respective risk assessment for each of the plurality of node data streams further comprises:
determining a baseline performance for each of the plurality of source nodes, respectively;
determining a deviation between a node performance of each of the plurality of node data streams and the respective baseline performance.

6. The method of claim 1 , wherein determining a respective risk assessment for each of the plurality of node data further comprises:
determining a baseline performance for each of the plurality of source nodes, respectively;
determining a deviation between a node performance of one of the plurality of node data streams of one of the plurality of source nodes and the respective baseline performance of at least another one of the plurality of source nodes.

7. The method of claim 1 , further comprising:
appending each of the plurality of node data with the respective risk assessment of the respective node data stream;
publishing the plurality of node data with the respective risk assessments to a publish-subscribe system.

8. The method of claim 1 , the characteristics comprising a source node calibration history of the plurality of source nodes, respectively.

9. The method of claim 1 , the characteristics comprising a source node specification standard of the plurality of source nodes, respectively.

10. The method of claim 1 , wherein the characteristics comprises a geographic location of the source node; and
wherein determining a respective action for each of the plurality of source nodes further comprises determining a respective action based on the geographic location of the source node.

11. The method of claim 10 , wherein the characteristics comprises a response latency of the source node; and
wherein determining a respective action for each of the plurality of source nodes further comprises determining the respective action based on the response latency of the source node.

12. A system comprising:
a computer processor configured to perform processes comprising:
receiving a plurality of node data streams through a data network from a plurality of source nodes, respectively, each of the plurality of node data streams comprising a plurality of node data;
determining a respective risk assessment for each of the plurality of node data streams based on characteristics of each source node and based on consistency of the plurality of node data of each source node compared within the node data of each source node and compared with the node data of other node data within the plurality of node data streams, wherein the respective risk assessment indicates a level of reliability of each of the plurality of node data streams;
determining a plurality of respective actions for each of the plurality of source nodes, based on the respective risk assessment of the plurality of node data streams;
instructing each of the plurality of source nodes to perform the respective action, the respective action to adjust an interval reading of the source node or to calibrate the source node, and wherein determining a respective action for each of the plurality of source nodes further comprises determining a respective action based on the response latency or geographic location of the source node; and
adjusting, in real time, the risk assessment of each of the plurality of node data streams in response to the performance of the respective action by each of the plurality of source nodes.

13. The system of claim 12 , the characteristics further comprising:
a geographic location of the source node; and
a humidity measurement of the source node.

14. The system of claim 12 , further comprising:
determining, based on the risk assessments of the plurality of node data streams, a risk landscape of the plurality of source nodes.

15. The system of claim 14 , wherein determining a respective risk assessment for each of the plurality of node data streams further comprises:
comparing each of the plurality of node data streams to the risk landscape.

16. The system of claim 12 , wherein determining a respective risk assessment for each of the plurality of node data streams further comprises:
determining a baseline performance for each of the plurality of source nodes, respectively;
determining a deviation between a node performance of each of the plurality of node data streams and the respective baseline performance.

17. The system of claim 12 , wherein determining a respective risk assessment for each of the plurality of node data further comprises:
determining a baseline performance for each of the plurality of source nodes, respectively;
determining a deviation between a node performance of one of the plurality of node data streams of one of the plurality of source nodes and the respective baseline performance of at least another one of the plurality of source nodes.

18. The system of claim 12 , further comprising:
appending each of the plurality of node data with the respective risk assessment of the respective node data stream;
publishing the plurality of node data with the risk assessment to a publish-subscribe system.

19. The system of claim 12 , the plurality of elements comprising a source node calibration history of the plurality of source nodes, respectively.

20. A computer program product comprising:
a non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code comprising:
computer-readable program code configured to receive a plurality of node data

Assignees

• Greenspan Steven L
• Danielson Debra J
• Morrison Kenneth William Scott
• Ca Inc

Inventors

• Greenspan Steven L
• Danielson Debra J
• Morrison Kenneth William Scott

Classifications

• H04L63/1425

  Traffic logging, e.g. anomaly detection · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title

• H04L63/126 Primary

  the source of the received data · CPC title

• H04W12/37

  Managing security policies for mobile devices or for controlling mobile applications · CPC title

• H04L63/205

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title