Bank of America Corporation

Christopher Daniel Birch

Susan R Hart

Cody Dean Searl

Kelly Renee-Drop Keiter

Lisa Matthews

Donald Joseph Cardinal

Travis John Hicks

Shane Edward Asher

Guy Vernon Pearson, Jr

Todd Anthony Smialek

Shannon Sabina Willis

Corey Scott Gillespie

Sophie Morgan Danielpour

Stephen Jack Williams

Shannon Sabina Rolinger

Son Huynh

Tyler Keith Prothro

Amado Jose Martinez Suarez

George Albero

Tomas Mata Castrejon, Iii

James J Siekman

Jeffrey Wayne Texada

David Nardoni

Jennie Kathleen Egbert

Keaton Drake

James R Crocker

Stephen C Brown

The present invention encompasses systems, computer program products, and methods for machine interpretation of security data. It identifies various data sources providing metrics and parameters, which include system logs, network traffic data, user activity records, and application logs. The system retrieves these metrics and parameters through an application programming interface and transforms them from unstructured to structured data. This structured data is then featured and stored. A dynamic consolidated matrix, known as the Constraint Specification Matrix (CSM), is generated from these features. A machine learning model is trained to discern correlations and patterns within the CSM's features. Lastly, the system transmits instructions to present these correlations and patterns via a user interface on a user device, allowing for user-friendly visualization and interpretation of the analyzed security data.

Systems and methods for machine interpretation of security data via dynamic constraint specification matrix

Systems, computer program products, and methods are described herein for active detection and mitigation of unauthorized activity within a technology infrastructure. The present invention is configured to continuously monitor one or more incoming messages in one or more computing devices; detect one or more assessment vectors embedded in the one or more incoming messages; initiate an isolated virtual environment; redirect the one or more incoming messages associated with the one or more assessment vectors from the one or more computing devices to the isolated virtual environment; trigger an access routine to emulate, within the isolated virtual environment, an action of accessing the one or more incoming messages; determine, based on at least the access routine, whether the one or more incoming messages is associated with malware; and display a notification to the user indicating whether the one or more incoming messages is associated with malware.

System for active detection and mitigation of unauthorized activity within a technology infrastructure

Embodiments of the present invention provide a system for identifying and redirecting incoming unauthorized data access requests. The system is configured for continuously monitoring one or more incoming data access requests from one or more sources, identifying that a data access request of the one or more incoming data access requests is an unauthorized request, redirecting the data access request to a controlled environment, performing one or more actions in the controlled environment to capture one or more interactions associated with the data access request within the controlled environment, and automatically generating one or more controls to secure a real-time environment based on the one or more interactions captured within the controlled environment.

System and method for identifying and redirecting incoming unauthorized data access requests

Embodiments of the present invention provide a system for implementing authentication control protocols via components of entity device. In particular, the system may be configured to determine initiation of a resource interaction by a user at an entity device, control one or more components of the entity device to cause the entity device to capture a real-time image of the user, compare the real-time image captured via the entity device with an updated enhanced user image stored in a data file of the user, in response to comparing the real-time image with the updated enhanced user image, determine if the real-time image matches the updated enhanced user image, and implement one or more authentication control protocols based on determining if the real-time image matches the updated enhanced user image.

System and method for implementing authentication control protocols via components of an entity device

Embodiments of the invention are directed to systems, methods, and computer program products for utilizing machine learning to predict future deceitful domain names and determine preferred security responses. As such, the system allows for use of a machine learning engine to collect new domain name registration information from a plurality of sources and predict future name registrations associated with said sources. A single user may register deceitful domain names through a plurality of domain name registration systems. By collecting data from multiple servers, the system may identify data trends and generate predictions of future domain names independently of any individual server. Thus, the system may benefit a number of entities, by providing real-time data analysis that would not be obtainable by any one entity operating alone. Additionally, the system may provide a single managing entity with real-time suggestions that may decrease the likelihood of a security incident involving a particular domain name.

System and method for network address anomaly detection using machine learning

Voice communication network defense security which allows for managing and/or preventing voice calls based on which telecommunication carrier provided the calling number. By managing calls based on telecommunication carrier as opposed to the calling number, the present invention seeks to prevent intrusion by wrongdoers who may otherwise be in possession with an unlimited supply of calling numbers. Further, by implementing the security measures at the voice communication network perimeter, voice calls can be managed and/or prevented/block in real-time while the call is in a pre-answer state. As a result, the present invention provides the capability to prevent/block wrongdoers from accessing the intra-voice communication network or, at a minimum ensures that potential wrongdoers are properly vetted through an investigative process.

Voice communication network defense system

Aspects of the disclosure relate to identifying and processing suspicious emails. In some embodiments, a computing device may receive an email associated with an email domain. Subsequently, the computing device may determine a registration date of the email domain. The computing device may then compare the determined registration date to a first threshold date. Thereafter, responsive to determining that the determined registration date is before the first threshold date, the computing device may transmit the email to a recipient address identified in the email. Responsive to determining that the determined registration date is at or after the first threshold date, the computing device may execute a security risk assessment model. The computing device may then determine, based on the security risk assessment model, a security risk level of the email domain. The computing device may filter, based on the security risk level of the email domain, the email.

Multi-computer system for detecting and controlling malicious email

Embodiments of the present invention provide a system for providing selective security regulations associated with network communications to users. The system is configured for extracting user data associated with a user, identifying one or more characteristics based on the extracted user data, generating a custom security package for the user based on the one or more characteristics, displaying one or more options associated with the custom security package on a user device of the user, prompting the user to select at least one option from the one or more options, receiving the at least one option from the user, and deploying a functionality associated with the at least one option from the custom security package.

Selective security regulation for network communication

Timed-based credential access to computer networks, applications and/or data files. A multi-factor authentication process in which time is an intrinsic part of the authentication/log-in process. Time periods are defined that coincide with a user's expected periods of use, such as standard work hours, and the user's credentials are only valid during the defined time period. This means that the user can only gain access to the computer network and/or the secure application(s) or data file(s) during those defined time periods. As a result, nefarious actors, in wrongful possession of a user's credentials, that attempt to access the computer network, application and/or data file outside of the defined period of time will be prevented from doing so.

System for time-based credential access

Embodiments of the present invention provide systems and methods for evaluating and weighting resource usage activity data. The system may establish a communicable link to a user device via a user application to receive resource activity data and historical data from one or more users or systems via multiple communication channels. The system may evaluate the historical data and determine evaluation criteria based on perceived chance of loss associated with particular metadata characteristics, and use the evaluation criteria as weighted metrics for determining an overall evaluation score for the user based on indication from resource activity data that the user has conducted resource transfers with entities or channels identified in the historical data.

System for evaluation and weighting of resource usage activity

Embodiments of the present invention provide systems and methods for generation and maintenance of verified data records. The system may receive a data submission from a user device over one or more communication channels and convert the data submission into a normalized text format for processing and analysis. The data submission may then be analyzed using one or more trained machined learning models in order to identify factual statements and modifiers within the data submission, and generate a confidence score of verified factual information based on corroboration with one or more additional data sources. Additionally, identified modifiers may be analyzed to determine positive or negative sentiment.

System for generation and maintenance of verified data records

Embodiments of the invention are directed to a system that performs virtual private network authentication with a read only sandbox integration for virtual private network security. In this way, the invention matches an internet protocol address to a user portrait of user internet protocol addresses to confirm that the connecting device is the authentic user for accessing the virtual private network. If there is a discrepancy between the user portrait and the internet protocol address of the connecting device, the system launches a read only sandbox for connecting device interaction. The read only sandbox allows for bilateral communication with the connecting device where the system has full access to the connection device at a file level to interrogate file level data for confirmation.

System for virtual private network authentication sensitivity with read only sandbox integration

Verification of the identities of parties participating in network-based communication, such as telephone communication, including SMS/text communication, email communication and the like is provided. Communication identifiers (IDs) (e.g., telephone numbers, email addresses or the like) are verified as being associated with one or more communication parties and, in response, a verified communication (ID) database is established. The verified communication ID database is relied upon when a user/communication is selecting a communication ID as an address for an impending communication or receiving a communication for determining whether the communication ID is verifiably associated with a known communication party. If the communication ID is determined to be verifiably associated with a known communication party, a visual or audible output may be provided on the user's device or within the communication that indicates that the communication ID is verifiably associated with the known communication party.

Systems for verifying identities of parties participating in distributed network communication

A system for secure data transfer is provided. The system is configured to: generate a database of verified interaction providers comprising verified provider information; determine that a user device has accessed a data transfer location associated with an interaction provider; install a proxy server over the data transfer location, wherein data transfer traffic between the user device and the interaction provider is routed through and monitored by the proxy server; determine, via the proxy server, that the user device has requested an interaction at the data transfer location, the interaction comprising a data transfer; determine that the interaction provider associated with the data transfer location is in the database of verified interaction providers; and in response to determining that the interaction provider is in the database, complete the data transfer through the proxy server.

Growing community of inventors

Dayton, OH, United States of America

Christopher Daniel Birch