Bank of America Corporation

Robert Justin Brown

Hieu Xuan Hoang

Genaro Signo

Krupali Prafulchandra Desai

Rahul Balar

Christopher Quinn

Ronald David Pfiester

Craig A Froelich

Christopher Lee Danielson

Systems and methods are provided for efficient and automated control of software permissions and access to network resources across a complex enterprise environment. User access is may be governed by software bundles. Such bundles and bundles may or may not include all programs or access to all systems needed by the user. An access request management tool is provided that includes new process flows and artificial intelligence for automated refining of software access across a complex and large network of computer servers. The management tool may eliminate conventional intermediary systems needed when utilizing centralized access request management. The management tool may check which user has access to a software bundle and may assign the bundle to other users. The management tool may revoke or grant access to a software bundle.

Agentless access control system for dynamic calibration of software permissions

Systems, computer program products, and methods are described herein for software compiler integrity verification. The present invention is configured to retrieve, from a source code repository, a source code; process, using a first build machine, the source code into a first object code; process, using a second build machine, the source code into a second object code; initiate an integrity verification engine on the first object code and the second object code; decompile, using the integrity verification engine, the first object code to create a first decompiled object code and the second object code to create a second decompiled object code; compare the first decompiled object code with the second decompiled object code; determine a match between the first decompiled object code and the second decompiled object code; and transmit an approval notification.

System for software compiler integrity verification

Systems and methods are provided for efficient and automated control of software permissions and access to network resources across a complex enterprise environment. An access request management ('ARM') system may formulate a list of functions and associated parameters that may be processed by an agentless distribution system. In response to receiving the set of instructions, the agentless distribution system may generate system-specific executable instructions for performing automated control of one or more of the network resources. The agentless distribution system may formulate system-specific executable instructions for a network resource using commands that, when executed on the network resource, implement automated control in accordance with the parameters defined in the set of instructions provided by the ARM system.

Agentless access control system for profile management

Systems and methods are provided for efficient and automated control of software permissions and access to network resources across a complex enterprise environment. Systems may configure computer servers in response to an employment status change. Changes to employment status may include leave, termination or hiring. System may interface with a human resources data feed and detect changes to employment status. The system may enable, disable and/or delete a user's account on all appropriate computer servers. Systems may disconnect a software profile in response a detected employment change. Systems may create new software profiles in response to a detected employment change.

Agentless control system for lifecycle event management

Systems and methods are provided for efficient and automated control of software permissions and access to network resources across a complex enterprise environment. Systems may include an access reconciliation tool that provides functionality for propagating changes to user access credentials. Credential changes may be initiated on a local computer server. Credential changes may then be pushed from the local server to a distribution system and from the distribution system to an access rights management server. The reconciliation tool may accept a secure file transfer file from the distribution system to update user's current access. The access rights management server may coordinate storage of the credential changes in a centralized database. A password management tool may be provided that synchronizes user account passwords across servers for human and non-human accounts. The password management tool may replace an agent running on each local server with automated scripting for implementing password synchronization.

Agentless network access reconciliation

Systems, methods and computer-readable media for detecting a mobile device and identifying a user of the device are provided. A wireless signature or other unique identifier of a device may be detected. User information for the device may be obtained from a secondary source independent of the mobile device. Once a user is identified, user information may be retrieved and the user identity and user information may be associated with a mobile device. When the mobile device is then detected at a later time (e.g., after the information has been associated with the device), one or more offers may be generated based on the associated information and/or the location of the device at the time it is detected.

Mobile device detection and identification with a distributed tracking and profiling framework

A computer system enables a business to reduce risks from phishing electronic messages. One or more original web links embedded in the electronic message may be replaced with a replacement web link. If the determined risk score for the original webpage is large enough webpage and the user clicks on the embedded web link, a user is directed to an intermediate webpage rather than to the original webpage. The intermediate webpage may provide details about the original webpage so that the user can make an informed choice whether to proceed to the original website. For example, the intermediate webpage may provide pertinent information to a user such as the actual domain of the remote site, the country the site is hosted in, how long the site has been online, and a rendered screen capture of the remote website, and/or a confidence score.

Growing community of inventors

Santa Monica, CA, United States of America

Robert Justin Brown