Conducting investigations under limited connectivity

• US 10,523,787 B2
• Filed: 06/29/2018
• Issued: 12/31/2019
• Est. Priority Date: 12/19/2016
• Status: Active Grant

• Current Assignee: Palantir Technologies Incorporated
• Original Assignee: Palantir Technologies Incorporated
• Inventors: Laub, Brian, Scianna, Mark, Kozak, Carter, Zangri, Daniel, Baker, Izaak, Henke, Joseph
• Primary Examiner(s): Alam, Uzma
• Application Number:
  US16/023,286
• Publication Number:
  US 20180309853A1
• Time in Patent Office: 550 Days
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

Systems and methods are provided for obtaining and providing one or more resources for an investigation to be conducted remotely from a server. Resources needed to conduct an investigation may include one or more portions of a database and/or one or more functionalities of a data analysis platform. Based on the investigation to be conducted (e.g., type of investigation, location of investigation, personnel involved, etc.), a computing system may obtain different amounts/types of resources from the server. The investigation may be conducted via a web application that runs on the computing system. The web application may access the resources obtained from the server. The results of the investigation may be sent by the computing system to the server. The computing system may receive updates from the server. The computing system may act as a server for other remote systems that are conducting investigations.

Claims

1. A server system comprising:

one or more processors; and

memory storing instructions that, when executed by the one or more processors, cause the server system to perform;

determining one or more resources for an investigation to be performed remotely from the server system;

providing the one or more resources to a first client device, the first client device being a client of the server system; and

receiving a first result of the investigation from the first client device, the first result of the investigation being determined by the first client device based on an aggregation of a second result of the investigation and a third result of the investigation, the second result of the investigation being determined, based on the one or more resources, by a first investigation application executed on a second client device, the third result of the investigation being determined, based on the one or more resources, by a second investigation application executed on a third client device, the second and third client devices being clients of the first client device, the one or more resources enabling the first investigation application and the second investigation application to facilitate the investigation without an active connection between the server system and the first client device, the first result of the investigation being provided from the first client device to the server system in response to an active connection being detected between the first client device and the server system.

2. The system of claim 1, wherein the one or more resources include a subset of a database accessed by the server system.

3. The system of claim 1, wherein the one or more resources are provided to the first client device using a first communication protocol.

4. The system of claim 3, wherein the first result of the investigation is received from the first client device using the first communication protocol.

5. The system of claim 3, wherein the third result of the investigation is received by the first client device from the second client device using a second communication protocol, the second communication protocol being different from the first communication protocol.

6. The system of claim 1, wherein the instructions further cause the server system to perform providing one or more updates for the one or more resources.

7. The system of claim 1, wherein the first result of the investigation is determined without an active connection between the first client device and the server system.

8. A method implemented by a computing system including one or more processors and storage media storing machine-readable instructions, wherein the method is performed using the one or more processors, the method comprising:

determining, by a server system, one or more resources for an investigation to be performed remotely from the server system;

providing, by the server system, the one or more resources to a first client device, the first client device being a client of the server system; and

receiving, by the server system, a first result of the investigation from the first client device, the first result of the investigation being determined by the first client device based on an aggregation of a second result of the investigation and a third result of the investigation, the second result of the investigation being determined, based on the one or more resources, by a first investigation application executed on a second client device, the third result of the investigation being determined, based on the one or more resources, by a second investigation application executed on a third client device, the second and third client devices being clients of the first client device, the one or more resources enabling the first investigation application and the second investigation application to facilitate the investigation without an active connection between the server system and the first client device, the first result of the investigation being provided from the first client device to the server system in response to an active connection being detected between the first client device and the server system.

9. The method of claim 8, wherein the one or more resources include a subset of a database accessed by the server system.

10. The method of claim 8, wherein the one or more resources are provided to the first client device using a first communication protocol.

11. The method of claim 10, wherein the first result of the investigation is received from the first client device using the first communication protocol.

12. The method of claim 10, wherein the third result of the investigation is received by the first client device from the second client device using a second communication protocol, the second communication protocol being different from the first communication protocol.

13. The method of claim 8, further comprising providing one or more updates for the one or more resources.

14. The method of claim 8, wherein the first result of the investigation is determined without an active connection between the first client device and the server system.

16. The non-transitory computer readable medium of claim 8, wherein the one or more resources are provided to the first client device using a first communication protocol.

17. The non-transitory computer readable medium of claim 16, wherein the first result of the investigation is received from the first client device using the first communication protocol.

18. The non-transitory computer readable medium of claim 16, wherein the third result of the investigation is received by the first client device from the second client device using a second communication protocol, the second communication protocol being different from the first communication protocol.

15. A non-transitory computer readable medium comprising instructions that, when executed, cause one or more processors to perform:

determining, by a server system, one or more resources for an investigation to be performed remotely from the server system;

providing, by the server system, the one or more resources to a first client device, the first client device being a client of the server system; and

receiving, by the server system, a first result of the investigation from the first client device, the first result of the investigation being determined by the first client device based on an aggregation of a second result of the investigation and a third result of the investigation, the second result of the investigation being determined, based on the one or more resources, by a first investigation application executed on a second client device, the third result of the investigation being determined, based on the one or more resources, by a second investigation application executed on a third client device, the second and third client devices being clients of the first client device, the one or more resources enabling the first investigation application and the second investigation application to facilitate the investigation without an active connection between the server system and the first client device, the first result of the investigation being provided from the first client device to the server system in response to an active connection being detected between the first client device and the server system.