Automated change approval

• US 10,785,110 B2
• Filed: 06/12/2017
• Issued: 09/22/2020
• Est. Priority Date: 03/31/2005
• Status: Active Grant

• Current Assignee: Tripwire Incorporated (Belden Inc.)
• Original Assignee: Tripwire Incorporated (Belden Inc.)
• Inventors: Torrence, Gregor, Thompson, Troy D.
• Primary Examiner(s): Zand, Davoud A
• Application Number:
  US15/620,765
• Publication Number:
  US 20180069756A1
• Time in Patent Office: 1,198 Days
• Field of Search: None
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/0866 Checking the configuration

Abstract

An automated method for facilitating management of a data processing environment is disclosed. In various embodiments, the method may include facilitating creation of a first memorialization, in digital form, of first one or more changes made to a first data processing device of the data processing environment. In various embodiments, the method may further include facilitating creation of a second and a third memorialization, both in digital form, of second and third one or more changes made to a second and a third data processing device of the data processing environment, respectively. In various embodiments, the method may still further include facilitating automated approval of the second and third changes made to the second and third data processing devices, using the first, second and third memorializations. Other embodiments of the present invention may include, but are not limited to, apparatus adapted to facilitate practice of the above-described method.

Claims

1. A computer-implemented method for facilitating management of servers in a data processing environment, comprising:

generating a template of approved changes, wherein the approved changes are changes verified to have been made at a first server of the data processing environment, wherein the approved changes are represented in the template at least in part by hashes of first server data objects and by object names of the first server data objects;

generating a record of second server data objects detected at a second server of the data processing environment, wherein the second server was directed to have the same changes made as the first server, and wherein the second server data objects are represented in the record at least in part by hashes of second server data objects and by object names of the second server data objects;

detecting a failing second server data object that fails to have the same change as a corresponding first server data object, the detecting being performed by determining that an object name and hash in the template do not match an object name and hash in the record; and

providing a remediation response to change the failing second server data object so that it matches the corresponding first server data object.

2. The method of claim 1, wherein the approved changes are detected by comparing one or more pre-change hashes of the first server data objects with corresponding one or more post-change hashes of the first server data objects.

3. The method of claim 1, wherein the first server is a test server and the second server is a production server.

4. The method of claim 1, further comprising displaying a report that identifies one or more failing second server data objects.

5. The method of claim 4, further comprising displaying a report that identifies one or more passing second server data objects, wherein a passing second server data object is a second server data object that has the same change as a corresponding first server data object.

6. The method of claim 1, wherein the hashes are generated by a SHA hashing technique.

7. The method of claim 1, wherein the hashes are generated by an MD5 hashing technique.

8. A system for facilitating management of a data processing environment, the system comprising:

one or more system memories; and

one or more processors programmed to;

generate a template of approved changes, wherein the approved changes are changes verified to have been made at a first server of the data processing environment, wherein the changes made to the first server are represented in the template at least in part by hashes of first server data objects and by object names of the first server data objects;

generate a record of second server data objects detected at a second server of the data processing environment, wherein the second server was directed to have the same changes made as the first server, and wherein the second server data objects are represented in the record at least in part by hashes of second server data objects and by object names of the second server data objects;

detect a failing second server data object that fails to have the same change as a corresponding first server data object, the detecting being performed by determining that an object name and hash in the template do not match an object name and hash in the record; and

provide a remediation response to change the failing second server data object so that it matches the corresponding first server data object.

9. The system of claim 8, wherein the approved changes are detected by comparing one or more pre-change hashes of the first server data objects with corresponding one or more post-change hashes of the first server data objects.

10. The system of claim 8, wherein the first server is a test server and the second server is a production server.

11. The system of claim 8, wherein the one or more processors are further programmed to display a report that identifies one or more failing second server data objects.

12. The system of claim 11, wherein the one or more processors are further programmed to display a report that identifies one or more passing second server data objects, wherein a passing second server data object is a second server data object that has the same change as a corresponding first server data object.

13. The system of claim 8, wherein the hashes are generated by a SHA hashing technique.

14. The system of claim 8, wherein the hashes are generated by an MD5 hashing technique.

15. One or more non-transitory storage devices storing computer-executable instructions which, when executed by a computer, cause the computer to perform a method, the method comprising:

generating a template of approved changes, wherein the approved changes are changes verified to have been made at a first server of a data processing environment, wherein the changes made to the first server are represented in the template at least in part by hashes of first server data objects and by object names of the first server data objects;

generating a record of second server data objects detected at a second server of the data processing environment, wherein the second server was directed to have the same changes made as the first server of the data processing environment, and wherein the second server data objects are represented in the record at least in part by hashes of second server data objects and by object names of the second server data objects;

detecting a failing second server data object that fails to have the same change as a corresponding first server data object, the detecting being performed by determining that an object name and hash in the template do not match an object name and hash in the record; and

providing a remediation response to change the failing second server data object so that it matches the corresponding first server data object.

16. The one or more non-transitory storage devices of claim 15, wherein the approved changes are detected by comparing one or more pre-change hashes of the first server data objects with corresponding one or more post-change hashes of the first server data objects.

17. The one or more non-transitory storage devices of claim 15, wherein the first server is a test server and the second server is a production server.

18. The one or more non-transitory storage devices of claim 15, further comprising displaying a report that identifies one or more failing second server data objects.

19. The one or more non-transitory storage devices of claim 15, further comprising displaying a report that identifies one or more passing second server data objects, wherein a passing second server data object is a second server data object that has the same change as a corresponding first server data object.

20. The one or more non-transitory storage devices of claim 15, wherein the hashes are generated by a SHA hashing technique.

21. The one or more non-transitory storage devices of claim 15, wherein the hashes are generated by an MD5 hashing technique.