Bank of America Corporation

Brian Diederich

Brandon Sloane

John H Kling

Rachel Yun Kim Bierner

Mark Earl Brubaker

John Brian Costello

Cora Yan Quon

Levi Weldon Mcvay

Ronald James Kuhlmeier

Michael Thomas Malarkey

Tracie Buffington Wescott

Systems, computer program products, and methods are described herein for secure access control using dynamic resource replication. The present invention is configured to electronically receive, from a computing device of a user, a request to generate a resource access path to access a resource; determine one or more resource requirements associated with the resource; determine an authentication level associated with the user; initiate a resource replication engine on the one or more resource requirements and the authentication level associated with the user; determine, using the resource replication engine, that the one or more requirements and the authentication level associated with the user meets one or more conditions for a replication process; and generate, using the resource replication engine, the resource access path and a plurality of replicate resource access paths.

Secure access control framework using dynamic resource replication

A system for authorizing secured access using cryptographic hash value validations is provided. In particular, the system may receive requests from users and/or computing systems to obtain secured access a particular resource or to execute a certain process. In response, the system may require that the user and/or computing system complete additional required steps (e.g., a computation) before being granted access to the resources or processes. In this way, the system may prevent unauthorized or unintended access to the system's resources or processes.

System for authorizing secured access using cryptographic hash value validations

A system provides analysis of computer application vulnerabilities via multidimensional correlation and prioritization. The system may begin by generating a data repository of each application within a computing environment. Once the data repository is generated, the system may assess the dependencies, relationships, and vulnerabilities of the applications and processes used within the system. The system may perform assessments across multiple dimensions and/or metrics (e.g., impacts on users, devices, networks, applications, and/or data). Based on performing said assessments, the system may calculate relatedness and/or dependency scores across the dimensions or metrics, where the scores may be used to generate a prioritization scheme for making changes to application code or applying updates.

System and method for analyzing and remediating computer application vulnerabilities via multidimensional correlation and prioritization

Systems, computer program products, and methods are described herein for regulating exposure based secured access is presented. The present invention is configured to receive, from a user computing device, a request to access a network device to execute one or more actions, wherein the user computing device is associated with a payment token; receive information associated with the one or more actions, wherein the information comprises an exposure level; initiate an authorization module associated with the distributed network environment; determine, using the authorization module, a token amount to execute the one or more actions; automatically retrieve, from the user computing device, the token amount from the payment token; authorize the user computing device to access the network device to execute the one or more actions; and access and update a blockchain distributed ledger based on information associated with the request and subsequent authorization to access the network device.

Exposure based secure access system

An access control system may include one or more computer processors; a memory, wherein the memory comprises an entitlement database of a resource access manager; a network communication device; and an access control module stored in the memory, executable by the one or more computer processors. The access control module may be configured to: perform the steps of: receiving a request to add one or more entitlement data records to a distributed electronic ledger; validating the one or more entitlement data records; appending the one or more entitlement data records to the distributed electronic ledger; and verifying a first entitlement data record stored in the entitlement database by comparing the first entitlement data record with a first corresponding entitlement data record stored in the distributed electronic ledger, wherein the first entitlement data record and first corresponding entitlement data record are both associated with a first user.

System for using a distributed ledger to manage user entitlements to computing resources

Embodiments of the present invention provide a system for indicator regression and modeling for implementing system changes to improve control effectiveness. The system is typically configured for presenting, prompting for and receiving a selection from a list of controls from a user, via a control effectiveness application user interface on a user device. The system is also for receiving two or more consideration indicators from the user device, via the control effectiveness application user interface forming a consideration set; applying a regression algorithm on the consideration set of indicators; reducing a number of the subset of the consideration set of indicators based on a threshold correlation or a threshold number; finalizing the final equation with the number of the subset, each having a corresponding coefficient; and, in response to finalizing the final equation, automatically performing an action configured to improve effectiveness of the control based on the final equation.

Indicator regression and modeling for implementing system changes to improve control effectiveness

A system is configured to allocate storage space on existing devices within the entity's networked system to create cloud storage space. In particular, unallocated space on computing devices, typically user devices, within an entity's network is utilized as a cloud data repository. Cloud data is indexed, divided into chunks, encrypted, and stored on numerous disparate endpoint devices connected to the network. Copies of cloud chunk data may be duplicated across multiple endpoint devices to allow for data redundancy, thereby ensuring cloud data uptime according to the availability needs of the entity. Cloud data may further be allocated to different devices based on regional data restrictions. In this way, the system provides an efficient and secure way to generate an internal cloud data storage repository within an entity's networked system.

System for generating distributed cloud data storage on disparate devices

The present disclosure is directed to a novel system for a multidimensional (or 'N-dimensional') services framework. The framework may be used to evaluate the efficiency and effectiveness of various services along multiple dimensions which may be specified by the system or be added to the framework in the future. By evaluating the various possibilities and opportunities to modify the services as the services reach varying levels of maturity, the services may be compared with one another to establish the relational impacts among the services tracked by the system. Through the use of the N-dimensional framework, an entity may be better able to prioritize resources allocated toward the enhancement of certain evaluated services.

System for optimizing resource prioritization based on services efficiency

A system for identifying anomalies in an information system is typically configured for: collecting information regarding a hierarchy of capabilities, a hierarchy of resources, capability instances, and resource instances of the information system; storing, in a graph database, nodes corresponding to the hierarchy of capabilities, hierarchy of resources, capability instances, and resource instances; collecting information regarding relationships among the hierarchy of capabilities, hierarchy of resources, capability instances, and resource instances; defining, in the graph database, edges corresponding to the relationships among the hierarchy of capabilities, hierarchy of resources, capability instances, and resource instances; collecting event and/or state data for the information system; comparing the event and/or state data to the graph database and determining that an event and/or state is anomalous; and, in response to determining that the event and/or state is anomalous, taking an information security action.

Growing community of inventors

Simi Valley, CA, United States of America

Brian Diederich