Systems and methods for recording major incident response information

Patent metadata

Field	Value
Publication number	US-11797374-B2
Application number	US-202217670919-A
Country	US
Kind code	B2
Filing date	Feb 14, 2022
Priority date	Feb 14, 2022
Publication date	Oct 24, 2023
Grant date	Oct 24, 2023

Abstract

A system for recordation and retrieval of incident resolution action information is provided. A recordation system processor is provided with a recordation application configured to receive a response action initiation instruction identifying an action taken to resolve an incident on a target system, The processor determines one or more responsible responders each having a responder data processor that displays a responder dashboard. The processor transmits a recordation instruction to the responder data processor of each responsible responder. The recordation instruction includes an instruction to begin recording responder dashboard information. The recordation application is also configured to receive a response action termination instruction and to transmit a recordation termination instruction to the responder data processor of each responsible responder. A data storage unit is configured for receiving, from the responder data processors, real-time responder dashboard information recordings.

First claim

What is claimed is:

1. An automated system for recordation and retrieval of incident resolution action information, the system comprising:
a recordation data processing system having:
a recordation system data processor;
a recordation system network interface in communication with a network; and
a recordation system memory having stored therein a recordation application configured with instructions for the recordation system data processor to
receive a response action initiation instruction, the response action initiation instruction including action information identifying a current action taken in furtherance of resolving an incident on a target data processing system,
determine one or more responsible responders out of a group of responders, each of the group of responders having a responder data processor in communication with one another and an incident response manager processing system over the network, the responder data processor being configured for display of a real-time responder dashboard and for video and audio communication,
transmit a recordation instruction to the responder data processor of each responsible responder, the recordation instruction including an instruction to begin recording responder dashboard information, the responder dashboard information including at least a portion of the real-time responder dashboard display and video and audio communications of a responder data processing system,
receive a response action termination instruction identifying the current action, and
transmit a recordation termination instruction to the responder data processor of each responsible responder, the recordation termination instruction including an instruction to stop recording responder dashboard information; and

a data storage unit comprising a non-transitory storage medium and configured for receiving, from the responder data processors, real-time responder dashboard information recordings.

2. An automated system according to claim 1 wherein the real-time responder dashboard includes at least one of the set consisting of an incident description, incident time and status information, target system status information, responder action information, and responder communication information.

3. An automated system according to claim 2 wherein the incident time and status information includes a graphical representation of a timeline showing action initiation and resolution times.

4. An automated system according to claim 3 wherein the timeline includes projected future action initiation and resolution times.

5. An automated system according to claim 1 wherein the one or more responsible responders are determined based on information provided in the response action initiation instruction.

6. An automated system according to claim 1 wherein the one or more responsible responders are determined, at least in part, based on status and historical information for each of the group of responders and on historical actions.

7. An automated system according to claim 1 further comprising:
a recording retrieval data processing system having:
a retrieval system data processor;
a retrieval system network interface in communication with a network; and
a retrieval system memory having stored therein a recordation application configured with instructions for the retrieval system data processor to
receive, from a requesting processing system over the network, a request for historical incident response information, the request including identification of a requester and incident response information request criteria,
verify authorization of the requester to receive incident response information,
retrieve, from the data storage unit, responder dashboard information meeting the incident response information request criteria, and
transmit the relieved responder dashboard information to a requesting data processing system.

8. An automated system according to claim 7 wherein the incident response information request criteria identifies at least one of the set consisting of
information relating to actions taken to resolve an incident of a particular type,
information relating to one or more particular incident resolution action types,
information relating to incident resolution actions taken by a particular responder, and
information relating to actions taken by responders of a particular team.

9. An automated system according to claim 7 wherein the responder dashboard information meeting the incident response information request criteria includes a complete recording of real-time responder dashboard display and video and audio communications for at least one particular responder during a time interval of a particular action taken in furtherance of resolution of a previous incident.

10. An automated method for recordation and retrieval of incident resolution action information, the method comprising:
receiving, by a recordation data processing system over a network, a response action initiation notification from one of the set consisting of an incident response manager data processing system and an automated incident resolution system, the response action initiation notification including action information identifying, a current action taken in furtherance of resolving an incident on a target data processing system;
determining, by the recordation data processing system, one or more responsible responders out of a group of responders, each of the group of responders having a responder data processor in communication with one another and the incident response manager data processing system over the network, the responder data processor being configured for display of a real-time responder dashboard and for video and audio communication;
transmitting a recordation instruction to the responder data processor of each responsible responder, the recordation instruction including an instruction to begin real-time recording of responder dashboard information and to transmit recorded responder dashboard information to a data storage unit, the responder dashboard information including at least a portion of the real-time responder dashboard display and video and audio communications of a responder data processing system;
receiving a response action termination instruction from one of the set consisting of an incident response manager data processing system and an automated incident resolution system, the response action termination instruction identifying the current action; and
transmitting a recordation termination instruction to the responder data processor of each responsible responder, the recordation termination instruction including an instruction to stop real-time recording of the responder dashboard information.

11. An automated method according to claim 10 wherein the real-time responder dashboard includes at least one of the set consisting of an incident description, incident time and status information, target system status information, responder action information, and responder communication information.

12. An automated method according to claim 10 wherein the one or more responsible responders are determined based on information provided in an action initiation instruction.

13. An automated method according to claim 10 wherein the one or more responsible responders are determined, at least in part, based on status and historical information for each of the group of responders and on historical actions.

14. An automated method according to claim 10 further comprising:
receiving, by a recording retrieval data processing system from a requesting processing system over the network, a request for historical

Assignees

• Capital One Services Llc

Inventors

• Seck Mohamed
• Buell Louis

Classifications

• G06F11/0793 Primary

  Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40) · CPC title

• G06F11/0709

  in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems · CPC title

• G06Q10/0639 Primary

  Performance analysis of employees; Performance analysis of enterprise or organisation operations · CPC title

• G06Q10/10

  Office automation; Time management · CPC title

• G06Q10/20

  Administration of product repair or maintenance · CPC title