Bank of America Corporation

Kenneth A Kaye

Nikhil Harish Sanil

Katherine Dintenfass

Victoria Lynn Dravneek

Heather Roseann Dolan

Willard H Waldron, Iii

Graham Marshall Wyllie

Colin Murphy

Satyanarayana R Mandapati

Dipika Joshi

William Scott Treadwell

Adam B Richman

Daniel P Shnowske

Brady Prentice Merkel

William Thomas Stranathan

Alice Yali Chang

Anusha Ravulapati

Robert Nicholas D'Aveta

David John Wesley Gruver

Ronald Fong

Aspects of the disclosure relate to monitoring a computing network to determine data exfiltration. A computing platform may use time-series modeling to determine anomalous network activity with respect to outgoing data. Additional aspects of this disclosure relate to analysis of web activities associated with a user to determine compromised user accounts/devices. The computing platform may use domain categorization to determine if web activity associated with a user is anomalous.

Detecting data exfiltration and compromised user accounts in a computing network

A system for suspending a computing device suspected of being infected by a malicious code is configured to receive a signal to initiate a suspension procedure of the computing device. The system captures states of instructions that are being executed by a processor of the computing device, where the instructions comprise the malicious code. The system prioritizes the operation of a kill switch button over the instructions being executed by the processor. The system sends notification signals to servers managing a user account associated with a user currently logged in at the computing device, indicating that the computing device is suspected of having been infected by the malicious code. In response to sending the notification signals to the servers, the user account is suspended. The system terminates network connections of the computing device such that the computing device is disconnected from other devices.

System and method for suspending a computing device suspected of being infected by a malicious code using a kill switch button

An augmented reality system that includes an augmented reality user device. The augmented reality user device includes a display for overlaying virtual objects onto objects in a real scene, a camera, and a global position system sensor. The augmented reality user device includes a processor implementing an object recognition engine, a virtual assessment engine, and a virtual overlay engine. The object recognition engine identifies tangible products from an image. The virtual assessment engine authenticates the user, identifies a user identifier for the user, and identifies a vendor based on the geographic location of the user. The virtual assessment engine captures an image and performs object recognition on the image to identify products in a cart. The virtual assessment engine sends a token to a remote server, receives available offers for the user from the server, and presents the available offers as virtual objects overlaid with the products in the cart.

Virtual assessments using augmented reality user devices

An augmented reality system that includes an augmented reality user device. The augmented reality user device includes a display for overlaying virtual objects onto objects in a real scene and a camera. The augmented reality user device includes a processor implementing a virtual assessment engine and a virtual overlay engine. The virtual assessment engine authenticates the user and identifies a user identifier for the user. The virtual assessment engine captures an image and performs object recognition on the image to identify products in a cart. The virtual assessment engine sends a token to a remote server, receives new account offers for the user from the server, and presents the offers as virtual objects overlaid with the products in the cart.

Object recognition and analysis using augmented reality user devices

An augmented reality system that includes an augmented reality user device. The augmented reality user device includes a display for overlaying virtual objects onto objects in a real scene, a camera, and a global position system sensor. The augmented reality user device includes a processor implementing an object recognition engine, a virtual assessment engine, and a virtual overlay engine. The object recognition engine identifies a business from an image. The virtual assessment engine authenticates the user and identifies a user identifier for the user. The virtual assessment engine captures an image, performs object recognition on the image to identify the business, and generates a location identifier identifying the business. The virtual assessment engine sends a token with the user identifier and the location identifier to a remote server, receives geolocation notifications for the user from the server, and presents the geolocation notifications as virtual objects overlaid with a real scene.

Geolocation notifications using augmented reality user devices

An augmented reality system that includes an augmented reality user device. The augmented reality user device includes a display for overlaying virtual objects onto objects in a real scene, a camera, and a global position system sensor. The augmented reality user device includes a processor implementing an object recognition engine, a virtual assessment engine, and a virtual overlay engine. The object recognition engine identifies tangible products from an image. The virtual assessment engine authenticates the user, identifies a user identifier for the user, and identifies a vendor based on the geographic location of the user. The virtual assessment engine captures an image and performs object recognition on the image to identify products in a cart. The virtual assessment engine sends a token to a remote server, receives new account offers for the user from the server, and presents the offers as virtual objects overlaid with the products in the cart.

Systems, methods, apparatuses, and computer-readable media configured to receive a search query and identify one or more messages matching at least a portion of the search query are provided. The identified one or more messages may be displayed, in some examples, and user input may be received identified at least one message of the identified one or more messages for further processing, such as quarantine. In some examples, the at least one message may be transmitted to an account search server which may search a plurality of user accounts, such as email accounts. The account search server may identify one or more occurrences of the at least one message in one or more accounts of the plurality of accounts and may remove the occurrence of the at least one message from the account and transfer the at least one message to a quarantine location.

Message quarantine

Described herein are apparatuses, methods, and computer program products for quarantining an out of compliance client device from other client devices on a network. Quarantining the out of compliance client device prevents the out of compliance device from corrupting other client devices on the network. For example, in operation, embodiments of the present invention involve: (1) receiving identification and location information for an out of compliance client device; (2) running a tool that utilizes the identification and location information to access the out of compliance device; (3) using the tool to modify the out of compliance device such that the out of compliance client device broadcasts a request for configuration information to which a network server is programmed to respond with configuration information associated with an isolated network; and (4) using the tool to cause the out of compliance client device to logout of the network. When the device logs back into the network, the network server responds by directing the device to the isolated network.

Quarantine tool

Described herein are apparatuses, methods, and computer program products for changing an out of compliance client device into a client device that is in compliance utilizing a compliance tool. In some embodiments of the invention the compliance tool identifies the location of the out of compliance client device, determines why the client device is out of compliance, brings the client device into compliance, and modifies the client device to allow it to access the network. In other embodiments of the invention the compliance tool is a compliance agent, wherein at a least a part of the compliance agent is uploaded on the client device. The compliance agent periodically checks the client device to determine if the client device has been brought into compliance, and when it is brought into compliance the compliance agent modifies the client device to allow it to access the network, and is then uninstalled from the client device.

Growing community of inventors

Indianapolis, IN, United States of America

Kenneth A Kaye