# US 10,481,862 B2 · Facilitating network security analysis using virtual reality display devices

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,481,862 B2
- Document ID: US10481862B2
- Status: Granted
- Kind: B2
- Application number: 15/367,896
- Filed: 2016-12-02
- Published: 2018-06-07
- Granted: 2019-11-19
- Earliest claimed: 2016-12-02
- Assignees: Bank of America Corporation
- Applicants: Bank of America Corporation
- Inventors: Michael Ogrinz; Darryl C. Goebel; William P. Jacobson
- Web page: https://patentgrep.com/patent/US10481862B2

## CPC

- H04L 63/1433: {Vulnerability analysis}
- G06F 3/167: {Audio in a user interface, e.g. using voice commands for navigating, audio feedback}
- G06V 20/635: {Overlay text, e.g. embedded captions in a TV programme}
- H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING

## Abstract

A virtual reality system including a virtual reality user device with a display that presents a virtual reality environment to a user, an electronic transfer engine, and a virtual overlay engine. The virtual reality user devices receives network component data and security data for a network components. The virtual reality user devices generates overlays the security data onto the network component data to generate a virtual overlay.

## Claims

### Claim 1

A virtual reality system comprising:
one or more databases comprising:
network component data for a plurality of network components, the network component data comprising:
network interconnections of the plurality of network components;
a location of each of the plurality of network components;
one or more data types associated with each of the plurality of network components; and
security data for each of the plurality of network components, the security data comprising:
software patch update information indicate a most recent software patch update for a network component;
demilitarized zone information indicating whether the network component is in a demilitarized zone;
firewall information indicating a status of a firewall and a firewall type; and
antivirus information indicating a status of antivirus software and an antivirus software type; and
a virtual reality user device for a user comprising:
a display configured to present a virtual reality environment to the user;
one or more processors operably coupled to the display;
an electronic transfer engine configured to receive the network component data and the security data; and
a virtual overlay engine configured to:
identify a first network component of a plurality of network components;
present the first network component in the virtual reality environment, the presentation indicating the network interconnections of the first network component; and
overlay the security data for the first network component onto the first network component in the virtual reality environment.

### Claim 2 (depends on 1)

The system of claim 1, further comprising:
a memory configured to store:
verification data used to authenticate one or more users; and
user tokens uniquely identifying each of the one or more users;
wherein the electronic transfer engine further is configured to:
receive a user input identifying the user;
compare the user input to the verification data to authenticate the user;
identify a user token for the user in response to authenticating the user;
send the user token to a remote database, wherein the user token requests the network component data and the security data; and
receive the network component data and the security data in response to sending the user token.

### Claim 3 (depends on 1)

The system of claim 1, wherein:
the network component data further comprises data indicating a name and content of a plurality of data files in each of the plurality of network components; and
the virtual overlay engine is further configured to present a first data file within the first network component in the virtual reality environment.

### Claim 4 (depends on 3)

The system of claim 3, further comprising:
the virtual overlay engine further configured to present a virtual trashcan in the virtual reality environment;
a gesture recognition engine configured to receive a gesture from the user indicating to place the first data file in the virtual trashcan; and
the electronic transfer engine is further configured to communicate a command to delete a digital file associated with the first data file.

### Claim 5 (depends on 2)

The system of claim 2, wherein:
the user input is a biometric signal; and
the virtual reality user device comprises a biometric engine configured to compare the biometric signal to the verification data to authenticate the user.

### Claim 6 (depends on 5)

The system of claim 5, wherein the biometric signal is one of a retinal scan signal and a fingerprint scan signal.

### Claim 7 (depends on 1)

The system of claim 1, wherein:
the virtual reality user device comprises a voice recognition engine configured to identify voice commands performed by the user; and
identifying the first network component identifying a voice command performed by the user to indicate the first network component.

### Claim 8

A virtual reality overlaying method comprising:
receiving network component data for a plurality of network components, the network component data comprising:
network interconnections of the plurality of network components;
a location of each of the plurality of network components; and
one or more data types associated with each of the plurality of network components;
receiving security data for each of the plurality of network components, the security data comprising:
software patch update information indicating a most recent software patch update for a network component;
demilitarized zone information indicating whether the network component is in a demilitarized zone;
firewall information indicating a status of a firewall and a Firewall type; and
antivirus information indicating a status of antivirus software and an antivirus software type;
identifying a first network component of a plurality of network components;
presenting the first network component in a virtual reality environment to a user, the presentation indicating the network interconnections of the first network component; and
overlaying the security data for the first network component onto the first network component in the virtual reality environment.

### Claim 9 (depends on 8)

The method of claim 8, further comprising:
receiving a user input identifying the user;
comparing the user input to verification data to authenticate the user;
identifying a user token for the user in response to authenticating the user;
sending the user token to a remote database, wherein the user token requests the network component data and the security data; and
receiving the network component data and the security data in response to sending the user token.

### Claim 10 (depends on 8)

The method of claim 8, wherein the network component data further comprises data indicating a name and content of a plurality of data files in each of the plurality of network components and the method further comprising presenting a first data file within the first network component in the virtual reality environment.

### Claim 11 (depends on 10)

The method of claim 10, further comprising:
presenting a virtual trashcan in the virtual reality environment;
receiving a gesture from the user indicating to place the first data file in the virtual trashcan; and
communicating a command to delete a digital file associated with the first data file.

### Claim 12 (depends on 9)

The method of claim 9, wherein the user input is a biometric signal and further comprising comparing the biometric signal to the verification data to authenticate the user.

### Claim 13 (depends on 12)

The method of claim 12, wherein the biometric signal is one of a retinal scan signal and a fingerprint scan signal.

### Claim 14 (depends on 8)

The method of claim 8, further comprising:
identifying voice commands performed by the user; and
identifying the first network component identifying a voice command performed by the user to indicate the first network component.

### Claim 15

A virtual reality user device for a user comprising:
a display configured to present a virtual reality environment to the user;
one or more processors operably coupled to the display;
an electronic transfer engine configured to receive data comprising:
network component data for a plurality of network components comprising:
network interconnections of each of the plurality of network components;
a location of each of the plurality of network components;
one or more data types associated with each of the plurality of network components; and
security data for each of the plurality of network components comprising:
software patch update information indicate a most recent software patch update for a network component;
demilitarized zone information indicating whether the network component is in a demilitarized zone;
firewall information indicating a status of a firewall and a firewall type; and
antivirus information indicating a status of antivirus software and an antivirus software type; and
a virtual overlay engine configured to:
identify a first network component of a plurality of network components;
present the first network component in the virtual reality environment, the presentation indicating the network interconnections of the first network component; and
overlay the security data for the first network component onto the first network component in the virtual reality environment.

### Claim 16 (depends on 15)

The apparatus of claim 15, further comprising:
a memory configured to store:
verification data used to authenticate one or more users; and
user tokens uniquely identifying each of the one or more users; and
wherein the electronic transfer engine further is configured to:
receive a user input identifying the user;
compare the user input to the verification data to authenticate the user;
identify a user token for the user in response to authenticating the user;
send the user token to a remote database, wherein the user token requests the network component data and the security data;
receive the network component data and the security data in response to sending the user token.

### Claim 17 (depends on 15)

The apparatus of claim 15, wherein:
the network component data further comprises data file data indicating a name and content of a plurality of data files in each of the plurality of network components; and
the virtual overlay engine is further configured to present a first data file within the first network component in the virtual reality environment.

### Claim 18 (depends on 17)

The apparatus of claim 17, further comprising:
the virtual overlay engine further configured to present a virtual trashcan in the virtual reality environment;
a gesture recognition engine configured to receive a gesture from the user indicating to place the first data file in the virtual trashcan; and
the electronic transfer engine is further configured to communicate a command to delete a digital file associated with the first data file.

### Claim 19 (depends on 16)

The apparatus of claim 16, wherein:
the user input is a biometric signal; and
the virtual reality user device comprises a biometric engine configured to compare the biometric signal to the verification data to authenticate the user.

### Claim 20 (depends on 15)

The apparatus of claim 15, wherein:
the virtual reality user device comprises a voice recognition engine configured to identify voice commands performed by the user; and
identifying the first network component identifying a voice command performed by the user to indicate the first network component.