Technology system auto-recovery and optimality engine and techniques

Patent metadata

Field	Value
Publication number	US-12045127-B2
Application number	US-202318157997-A
Country	US
Kind code	B2
Filing date	Jan 23, 2023
Priority date	Nov 27, 2018
Publication date	Jul 23, 2024
Grant date	Jul 23, 2024

Abstract

Disclosed are hardware and techniques for correcting computer process faults by identifying risk associated with correcting a computer process fault and computer processes that may depend on the corrected computer process. The interdependent computer processes in a network may be determined by evaluating a stream of process break flags from a monitoring component coupled to the network. Each computer process break flag in the stream of computer process break flags indicates a process fault detected by the monitoring component and is correlated to a corrective response. The break flag and the corrective response are assigned a risk. A risk matrix accounts for interdependencies between computer processes and identified corrective actions. A final response strategy that corrects the computer process faults is determined using the assigned risk and computer system interdependence. A runbook stores the final response strategy, which may be updated based on changing computer process interdependencies and assigned risk.

First claim

What is claimed is:

1. An apparatus, comprising:
a memory storing programming code; and
a triage processing component coupled with the memory, the triage processing component to:
populate, for one or more corrective actions in a list of corrective actions, a risk assessment matrix with a break risk assessment value and a fix risk assessment value, the one or more corrective actions identified to correct a possible cause of a current event, the current event to indicate a potential operational breakdown of a computer process; and
generate, based on correlation of the break risk assessment values and fix risk assessment values in the risk assessment matrix, a response strategy incorporating at least one corrective action from the list of corrective actions.

2. The apparatus of claim 1 , the triage processing component further to identify interdependency risk patterns that indicate risks related to each corrective action in a runbook and an effect of applying each corrective action on the computer process in a network, wherein the runbook comprises the list of corrective actions.

3. The apparatus of claim 1 , wherein the break risk assessment values indicate a likelihood of occurrence of the potential operational breakdown of the computer process in a network and the triage processing component assigns at least one of the fix risk assessment values to each of the one or more corrective actions.

4. The apparatus of claim 3 , wherein:
the break risk assessment value has a range from a high likelihood value indicating the potential operational breakdown has a high likelihood of occurring to a low likelihood value indicating the potential operation breakdown has a low likelihood of occurring; and
the fix risk assessment value assigned to each of the identified corrective actions has a range from a value indicating the potential operational breakdown has a high likelihood of being fixed to a different value indicating the potential operation breakdown has a low likelihood of being fixed by the respective identified corrective action.

5. The apparatus of claim 1 , the triage processing component further to:
assign an interdependency rating to each corrective action in the list of corrective actions, wherein the interdependency rating quantifies a level of interdependence of the computer process on other computer processes potentially affected by application of each of the one or more corrective action in the list of corrective actions;
populate the risk assessment matrix with the assigned interdependency rating of each corrective action in the list of corrective actions; and
evaluate the risk assessment matrix, based on the assigned interdependency rating of each corrective action in the list of corrective actions to one another.

6. The apparatus of claim 1 , the triage processing component further to:
after an evaluation of the risk assessment matrix, flag a respective corrective action from the list of corrective actions as an optimal corrective action for use in the response strategy.

7. The apparatus of claim 6 , the triage processing component further to:
apply the flagged respective corrective action to the computer process experiencing a process fault associated with a computer process break flag in a network.

8. The apparatus of claim 1 , the triage processing component further to:
receive successive process break flags that follow previous process break flags from a monitoring circuit coupled to the triage processing component;
generate additional break risk assessment values and fix risk assessment values of the successive process break flags;
populate a copy of the risk assessment matrix using the additional break risk assessment values and the fix risk assessment values to produce a revised risk assessment matrix;
analyze the break risk assessment values and the fix risk assessment values of the previous process break flags in the populated risk assessment matrix with reference to the additional break risk assessment values and the fix risk assessment values of the successive process break flags in the revised risk assessment matrix; and
update, based on results of the analysis of the additional break risk assessment values and the fix risk assessment values and the break risk assessment values and the fix risk assessment values of the previous process break flags, a runbook to identify a corresponding corrective action in the list of corrective actions for implementing the corresponding corrective action to fix the potential operational breakdown.

9. A method, comprising:
populating, for one or more corrective actions in a list of corrective actions, a risk assessment matrix with a break risk assessment value and a fix risk assessment value, the one or more corrective actions identified to correct a possible cause of a current event, the current event to indicate a potential operational breakdown of a computer process; and
generating, based on correlation of the break risk assessment values and fix risk assessment values in the risk assessment matrix, a response strategy incorporating at least one corrective action from the list of corrective actions.

10. The method of claim 9 , further comprising:
applying the at least one corrective action in the response strategy to the computer process experiencing a process fault associated with a computer process break flag associated with the current event in a network environment.

11. The method of claim 9 , further comprising identifying interdependency risk patterns to indicate risks related to each corrective action in a runbook and an effect of applying each corrective action on the computer process in a network.

12. The method of claim 9 , further comprising:
assigning the break risk assessment value indicating a likelihood of occurrence of the potential operational breakdown of the computer process;
assigning a respective fix risk assessment value to each of the identified corrective actions; and
populating the risk assessment matrix with the assigned break risk assessment value of the computer process to each of the identified corrective actions and the assigned fix risk assessment value to each of the identified corrective actions.

13. The method of claim 9 , wherein:
the break risk assessment value has a range from a high likelihood value indicating the potential operational breakdown has a high likelihood of occurring to a low likelihood value indicating the potential operation breakdown has a low likelihood of occurring; and
the fix risk assessment value assigned to each of the identified corrective actions has a range from a value indicating the potential operational breakdown has a high likelihood of being fixed to a different value indicating the potential operation breakdown has a low likelihood of being fixed by a respective identified corrective action.

14. The method of claim 9 , further comprising:
assigning an interdependency rating to each corrective action in the list of corrective actions, wherein the interdependency rating quantifies a level of interdependence of each of the computer processes potentially affected by application of each corrective action in the list of corrective actions;
populating the risk assessment matrix with the assigned interdependency rating of each corrective action in the list of corrective actions;
evaluating the risk assessment matrix, based on the assigned interdependency rating of each corrective action in the list of corrective actions to one another; and
based on the evaluation of the risk assessment matrix, flagging a respective corrective action from the list of corrective actions as an optimal corre

Assignees

• Capital One Services Llc

Inventors

• Gudka Bhavik
• Avirneni Surya
• Barnum Eric
• Patel Milind

Classifications

• G06F11/0751

  Error or fault detection not based on redundancy (power supply failures G06F1/30; network fault management H04L41/06) · CPC title

• G06F11/0787

  Storage of error reports, e.g. persistent data storage, storage using memory protection · CPC title

• G06F11/079

  Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36) · CPC title

• G06F11/0793 Primary

  Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40) · CPC title