Bank of America Corporation

Sorin N Cismas

Manu Jacob Kurian

Paul Roscoe

Kalpesh V Patel

Ray A Edwards

Dan L Dilday

Anne Donne

Jawad Ayesh

Jayachandra Varma

Gopikrishna Nemalikanti

James P Scopis

Balaji Subramanian

Jason T Findley

Jay Varma

Vibhuti Damania

Himabindu Keesara

Nathan Allen Eaton, Jr

Jeffrey McGonnell

Mahesh Kumar Bhashetty

Thomas J Durkin

David Anthony Orr

Katherine McDonald

David H Weaver

Brian F Adams

Sharon P Midkiff

Sean Jamison

Diane Bomba

Michelle Kaiser

Marc Sandlhauser

Tom Van Beek

A method for extracting, correlating, consolidating and presenting metadata from transmissions is provided. The method may include receiving a TCP/IP transmission. The transmission may include a header and a body. The method may include extracting an originating IP address from a location of the transmission. The location may be in the header or in the body. The IP address may be extracted in binary form. The method may include determining an accuracy and validity metric of the transmission using an artificial intelligence module. The method may include converting the extracted IP address from binary form into hexadecimal form. The method may include embedding the hexadecimal form of the IP address into one or more unused options of the header. The method may include processing the transmission. The processing may be completed upon determination that the transmission is a valid transmission.

Network forensic system for performing transmission metadata tracking and analysis

An apparatus for smart integrated cyclic data transport is provided. The apparatus may preserve the consistency and integrity of a file during the transfer of the file from a source system to a target system. The apparatus includes an orchestration subsystem. The orchestration subsystem includes an analyzer/generator module. The analyzer/generator module executes an algorithm on the file at the source location. An output is generated from the executed algorithm. The apparatus includes a consistency module. The consistency module pre-checks the output at the source location for pretransfer validation and creates a copy of the output. The copy may preserve the consistency and the integrity of the file. The apparatus includes a data transfer subsystem which transfers the file and the output from the source system to the target system. The apparatus may also include a validation subsystem for validating the integrity and consistency of the file.

Smart integrated cyclic data transport

Aspects of the disclosure relate to ensuring information security in data transfers by utilizing decoy data. A computing platform may receive, from a data source computing device, a source data collection for a secure physical-storage-media data transfer and may identify one or more transmission parameters associated with the secure physical-storage-media data transfer. Subsequently, the computing platform may generate decoy data and may produce a secure dataset for the secure physical-storage-media data transfer by combining the decoy data with the source data collection received from the data source computing device. Then, the computing platform may encrypt the secure dataset based on the one or more transmission parameters to produce an encrypted dataset for the secure physical-storage-media data transfer. After encrypting the secure dataset based on the one or more transmission parameters to produce the encrypted dataset, the computing platform may store the encrypted dataset on one or more physical media.

Ensuring information security in data transfers by utilizing decoy data

A computing system for redacting and/or tokenizing non-public information of electronic documents stored in a database may include a data redaction computing device and/or a data tokenization computing device, a first database storing a plurality of electronic documents, and a second database storing computer executable instructions for analyzing information associated with the plurality of electronic documents stored in the first database. The computer executable instructions may cause the data redaction/tokenization computing device to identify non-public information in one or more of the plurality of electronic documents and/or at least one of a document type, a source of the electronic document, and a destination to which the electronic document is to be communicated. Based on this analysis, the data redaction/tokenization computing device may modify the electronic document to redact and/or tokenize the non-public information based on the computer executable instructions retrieved from the second database.

Reversible redaction and tokenization computing system

An enterprise-wide centralized system for managing data transfer/movement provided by a technology-agnostic and protocol-agnostic data transfer/movement module. The system comprises a plurality of networked servers, one or more hub servers and a service delivery management framework. The system is structured for controlling the initiation and disablement of data transfers and configuring routing, timing and protocol(s) for data transfers. In addition, the system may be configured to provide (i) centralized control over user entitlements at a highly granular level, such as server-level, route-level or the like, (ii) the ability to track data transmission progress, such as by providing a real-time view of the status of enterprise-wide data transmission (iii) centralized management over data transmission records and set logs and facilitate full tracking data including transmission errors and (iv) centralized control over security and governance of data transmissions, including approval/denial of data transmissions.

System for holistic data transmission throughout an enterprise

Systems are provided for using a message spinning engine to create and/or manage messaging queues in a distributed network using virtualized servers. An abstraction layer formed by virtualized servers may enable the message spinning engine to seamlessly transition messaging queues while minimizing the likelihood of exceeding the parameters of existing service level agreements. The message spinning engine may include a service mapping module to maintain mappings between source business applications and virtualized servers, a product bridge to implement message encapsulation for communication between different messaging queue products, and a messaging queue monitoring console to analyze performance and capacity of physical services and messaging services and accordingly adjust levels of service for source business applications.

Messaging queue spinning engine

Embodiments of the invention are directed to a system, method, or computer program product for providing elastic authentication based on a continuum of elastic authentication credentials. In particular, the invention provides a secure platform for authorization of a user activity at least partly based on validation of the continuum of elastic authentication credentials comprising cumulative tiered elastic authentication tokens captured during an extended time period prior to initiation of a user activity. The invention provides a novel method for capturing multiple elastic authentication tokens, for example, arbitrarily during an extended time period preceding a user activity, and validating the cumulative elastic authentication tokens at a time during or after initiation of the user activity. Another aspect of the invention is directed to mitigating interception of authentication credentials by employing the elastic authentication tokens captured/received using multiple communication channels over various time periods preceding the user activity.

Elastic authentication system

Aspects of the disclosure relate to ensuring information security in data transfers by dividing and encrypting data blocks. A computing platform may receive, from a data source computing device, a source data collection for a secure physical-storage-media data transfer and may identify one or more transmission parameters associated with the secure physical-storage-media data transfer. Subsequently, the computing platform may divide the source data collection into two or more data blocks and may separately encrypt the two or more data blocks based on the one or more transmission parameters to produce two or more encrypted data blocks for the secure physical-storage-media data transfer. Then, the computing platform may store the two or more encrypted data blocks on two or more physical media, and each encrypted data block of the two or more encrypted data blocks may be stored on a different physical medium of the two or more physical media.

Ensuring information security in data transfers by dividing and encrypting data blocks

A technology/operating system-agnostic and protocol-agnostic service delivery system that includes a unified means data movement/transfer. By unifying the delivery of such services the need to deploy numerous different technology/OS-specific and/or protocol-specific applications/services conventionally used to provide such services is obviated. The unified nature of the system, not only provides for comprehensive delivery of services, such as data movement amongst all the servers in the enterprise's network but also provides for unified management of the services delivered, such as governance control over the services, unified tracking of services delivered, unified provisioning of updates/revisions to modules, and auditing processes for services delivered.

Modular system for holistic data transmission across an enterprise

A multi-tier platform provides security at a perimeter of a computer system, where an intermediate layer interacts between a web layer and an application layer. A data request that is associated with a data set is received at the web layer and passed to the intermediate layer. The intermediate layer determines the authoritative source for the data set and whether the data set has a static or dynamic value. If the value is static, the intermediate layer accesses the value stored at the intermediate layer. However, if the value is dynamic, the intermediate layer queries the source registered to the data set, obtains the value from the authoritative source, and returns the dynamic value via the web layer, where the registered source may be internal or external to the computer system. Consequently, the intermediate layer may function as an aggregate layer that supports both database and messaging services.

Multi-tiered protection platform

Apparatus and methods for pre-provisioning a generic connection to the bank to allow clients to transmit electronic test files. The test files may include one or more transaction requests submitted for processing by the client. Methods may evaluate infrastructure for processing the requested transactions. Methods may include determining a feasibility of the establishing the infrastructure. A phantom acknowledgement may be transmitted to the client before establishing the infrastructure to process the requested transactions.

Pre-provisioning electronic banking files

A computing system for redacting and/or tokenizing non-public information of electronic documents obtained from monitored communications includes a data redaction computing device and/or a data tokenization computing device, a communications network, and a database storing computer executable instructions for analyzing information associated with a plurality of electronic documents stored communicated via the computing network. The computer executable instructions may cause the data redaction/tokenization computing device to identify non-public information in one or more of the plurality of electronic documents and/or at least one of a document type, a source of the electronic document, and a destination to which the electronic document is to be communicated. Based on this analysis, the data redaction/tokenization computing device may modify the electronic document to redact and/or tokenize the non-public information based on the computer executable instructions retrieved from the second database.

Growing community of inventors

Addison, TX, United States of America

Sorin N Cismas