Bank of America Corporation

Amanda Jane Adams

Lawrence Robert Labella

Manu Jacob Kurian

Michael Ogrinz

Joseph Neil Johansen

Heather Roseann Dolan

William P Jacobson

Beverley Claire Morgan

Richard John Woodward

Edward L Haletky

Ben Lightowler

Myles Lawrence

Aspects of the disclosure relate to enhanced tracking of data over an asset lifecycle. A computing platform may receive, via the communication interface, user account information as part of an onboarding process in which a first user account is created. The computing platform may then compute, using a cryptographic hash function, a first hash value associated with the first user account, wherein the first hash value provides a trackable, immutable code corresponding to the first user account. Thereafter, the computing platform may monitor one or more events in a transaction activity pool. Upon detecting a new activity associated with the first user account in the transaction activity pool, the computing platform may append the new activity to a record in a trackable log linked to the first hash value.

Tracking data throughout an asset lifecycle

Aspects of the disclosure relate to enhanced chain of custody certification. A computing platform may establish, within a period of time of receiving data, a first distributed ledger that includes the data. The computing platform may receive a request to access the data. The computing platform may compute a first hash of the data indicating a state of the data prior to being accessed, and may record the first hash in a second distributed ledger. After granting data access, the computing platform may receive first information indicating actions performed on the data and second information indicating reasons for accessing the data. The computing platform may compute a second hash of the data indicating a state of the data after being accessed, and may record the second hash and the second information in the second distributed ledger. The computing platform may record, in a third distributed ledger, the first information.

Distributed ledgers for enhanced chain of custody certification

A computing device monitors for an event trigger by a secure computing module. Based on identifying an event trigger at the computing device, the secure computing module executes a health check according to a configuration identifying operating anomalies that are indicative of malicious activity at the computing device. The health check includes scanning a filesystem and communications module operation and configuration of the computing device for indications of malicious activity. Based on identified operating anomalies at the computing device, the secure computing module determines response measures to secure the computing device. The secure computing module executes the response measures individually or in combination at the computing device based on a response configuration.

Self-defending mobile device

A device configured to identify a first digital document in a digital document repository, to identify a first graphical code that represents the first digital document, and to send the first graphical code to an approved user device. The device is further configured to obtain a second graphical code that represents a public encryption key for the organization and to extract the public encryption key for an organization from the second graphical code. The device is further configured to obtain a third graphical code from the approved user device. The third graphical code represents a second digital document comprising data and a digital signature that was signed using a private encryption key for the organization. The device is further configured to determine the third graphical code passes validation using the public encryption key for the organization and to store the second digital document in a digital document repository.

Access control for updating documents in a digital document repository

A device configured to obtain a first graphical code that represents a public encryption key for an organization and to extract the public encryption key for the organization from the first graphical code. The device is further configured to obtain a second graphical code that represents a digital document comprising data and a digital signature that was signed using a private encryption key for the organization. The device is further configured to extract the digital document from the second graphical code and to validate the second graphical code using the public encryption key for the organization. The device is further configured to determine the second graphical code passes validation using the public encryption key for the organization and to store the digital document in a digital document repository.

Digital document repository access control using encoded graphical codes

Self-defending computing device

A system for performing authorization of a user in an augmented reality environment comprises an augmented reality user device, an automatic teller machine, and an authentication server. The automatic teller machine has a keypad with unmarked buttons. The augmented reality user device includes a display configured to overlay virtual objects onto a field of view of a user. The augmented reality user device receives a virtual keypad overlay, which assigns values to the unmarked buttons of the keypad. Using the overlay, the augmented reality user device displays the assigned values on the buttons of the keypad. The automatic teller machine detects an input sequence entered on the keypad and sends the input sequence to the authentication server. The authentication server determines an authentication code by combining the input sequence with the virtual keypad overlay, and compares the determined authentication code with an authentication code stored in a database.

Augmented reality dynamic authentication

A system for authorizing an electronic transaction in an augmented reality environment comprises an augmented reality user device and an authentication server. The augmented reality user device includes a display that overlays virtual objects onto a field of view of the user. The user device receives a request to verify information about a payment card used in an electronic transaction. The request includes a virtual authentication object, which is a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter an authentication code. The user device displays the virtual authentication object to the user and detects gestures performed on the virtual authentication object. The user device sends the detected gestures to the authentication server. The authentication server determines the authentication code using the virtual authentication object and the detected gestures, and uses it to authorize the transaction.

Augmented reality dynamic authentication for electronic transactions

Method and apparatus for a system to communicate via perfect forward secrecy. A deterministic hierarchy is used to generate public and private keys, offline, on distinct devices, for use with asymmetrical cryptography over an unsecure medium. Because each private key is not transmitted over the unsecure medium, but must be used to de-encrypt the communications, it is very difficult for man-in-the-middle attacks to de-encrypt the communications. Because each private key is generated according to a deterministic hierarchy, a master entity can recreate the private keys and passively monitor the communications while maintaining perfect forward secrecy.

Method and apparatus for perfect forward secrecy using deterministic hierarchy

A system for performing authorization of a user in a virtual reality environment includes a virtual reality user device. The virtual reality user device includes a display configured to display a virtual environment. The user device receives a virtual authentication object comprising a virtual representation of an object that the user can manipulate to enter an authentication code. The user device detects gestures performed by the user on the displayed virtual authentication object and forms an authentication request, which includes the virtual authentication object, the detected gestures; and an identifier of the user. The user device sends the authentication request to an authentication server. The authentication server determines an authentication code using the virtual authentication object and the detected gestures. The authentication server authenticates the user by comparing the determined authentication code with an authentication code stored in a database and sends an authentication response to the user device.

Growing community of inventors

Flint, United Kingdom

Amanda Jane Adams