Bank of America Corporation

Abdul Rafman Azeez

Yair Frankel

Jisoo Lee

Boulos M Dib

Joerg Schneider

Matthew Laine Donlan

Angel A Vargas

Bridget E O'Connor

Dhananjay Bhat

Rajashekar A Reddy

A system that includes a first network node configured to store a first ledger, a second network node configured to store a second ledger, and a third network node. The third network node includes a transformation engine configured to generate a plurality of shares derived using a data entry, which includes setting a share quantity indicating the number of shares to generate and setting a threshold value indicating the number of shares from the share quantity needed to determine the data entry. The transformation engine generates a first share for the first ledger and a second share for the second ledger using a polynomial function. The transformation engine includes enriched data with information indicating when to publish the first share and the second share. The transformation engine transmits the first enriched share to the first network node and transmit the second enriched share to the second network node.

Block chain encoding with fair delay for distributed network devices

An apparatus that includes a memory configured to store encryption keys and encrypted data entries. The apparatus further includes an encryption service engine configured to periodically re-encrypt the encrypted data element, which includes determining that an encryption wait time period has lapsed, obtaining a first encryption key using a first key index, and decrypting the encrypted data element using the first encryption key to recover the original data. The encryption service engine is further configured to obtain a second encryption key, encrypt the original data using the second encryption key, and modify the metadata linked with the encrypted data element with a second key index referencing the second encryption key. The encryption service engine is further configured to receive a data request for the encrypted data element, to send the encrypted data element, and to limit the bandwidth of a data channel used to send the encrypted data element.

Communication network with rolling encryption keys and data exfiltration control

A system that includes a first network device in a first network configured to send a file from a plurality of files to a compliance controller in the first network. The compliance controller is configured to determine whether the file satisfies a set of compliance rules and to send the file to the virtual machine in the first network in response to determining that the file satisfies the set of compliance rules. The virtual machine is configured to send the file to a second network device in a second network via a network interface. The network interface is configured to block the first network device from sending the file from the first memory to the second network device in the second network. The network interface is also configured to send the file from the virtual machine to the second network device in the second network.

Data leakage and information security using access control

The present invention provides for indirect access to public cloud-based computing environments for the purpose of running ad-hoc commands, on-demand, on any public cloud-based computing resource. Messages including the ad-hoc commands are communicated to a cloud-based command queue, which acts as the intermediary between the user (i.e., command requester) and the public cloud-based computing resources. A command executor agent installed on the cloud-based computing resources, polls the command queue for commands designated for the application(s) currently being executed on the cloud-based computing resources. Results of the command are communicated from the cloud-based computing resource to the command queue, which is periodically polled by a monitoring queue in order for the user/command requester to obtain the results of the execution of the command.

Executing ad-hoc commands on-demand in a public cloud environment absent use of a command line interface

A system that includes a first network node configured to store a first ledger, a second network node configured to store a second ledger, and a third network node. The third network node includes a transformation engine configured to obtain a plurality of enriched shares from at least one ledger using an index identifying enriched shares linked with a data entry. The number of obtained enriched shares is at least a threshold value corresponding to the number of enriched shares needed to determine the data entry. The transformation engine configured to remove enriched data from the plurality of enriched shares to generate a plurality of shares and perform polynomial interpolation using the plurality of shares to determine the result of the polynomial interpolation at zero. The result of the polynomial interpolation at zero is equal to the data entry.

Block chain decoding with fair delay for distributed network devices

In certain embodiments, a kiosk deployed at a customer location communicates a plurality of financial products available for provisioning by the kiosk and, for each financial product, one or more vendors that offers the financial product. The kiosk provisions a selected one of the financial products in response to input from a user. The input indicates the selected financial product and a selected one of the vendors.

Growing community of inventors

Watchung, NJ, United States of America

Abdul Rafman Azeez