# US 10,484,507 B2 · System for holistic data transmission throughout an enterprise > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,507 B2 - Document ID: US10484507B2 - Status: Granted - Kind: B2 - Application number: 15/660,309 - Filed: 2017-07-26 - Published: 2018-03-01 - Granted: 2019-11-19 - Earliest claimed: 2015-01-27 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Sorin N. Cismas; Manu Jacob Kurian - Web page: https://patentgrep.com/patent/US10484507B2 ## CPC - H04L 67/75: Indicating network or usage conditions on the user display - G06F 3/04847: Interaction techniques to control parameter settings, e.g. interaction with sliders or dials - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06Q 10/06: Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling - G06Q 20/14: specially adapted for billing systems - H04L 12/1485: {Tariff-related aspects} - H04L 41/18: Delegation of network management function, e.g. customer network management [CNM] - H04L 41/5077: {wherein the managed service relates to simple transport services, i.e. providing only network infrastructure} - H04L 43/06: Generation of reports - H04L 43/0888: Throughput - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 67/06: specially adapted for file transfer, e.g. file transfer protocol [FTP] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract An enterprise-wide centralized system for managing data transfer/movement provided by a technology-agnostic and protocol-agnostic data transfer/movement module. The system comprises a plurality of networked servers, one or more hub servers and a service delivery management framework. The system is structured for controlling the initiation and disablement of data transfers and configuring routing, timing and protocol(s) for data transfers. In addition, the system may be configured to provide (i) centralized control over user entitlements at a highly granular level, such as server-level, route-level or the like, (ii) the ability to track data transmission progress, such as by providing a real-time view of the status of enterprise-wide data transmission (iii) centralized management over data transmission records and set logs and facilitate full tracking data including transmission errors and (iv) centralized control over security and governance of data transmissions, including approval/denial of data transmissions. ## Claims ### Claim 1 A system for a centralized, protocol- and technology-agnostic management of data transmissions within an enterprise, the apparatus comprising: a plurality of networked servers, each server comprising a first computing-platform having a first memory and at least one first processor in communication with the first memory, each server comprising; a modular-based, service delivery application comprising computer-readable instructions stored in each first memory, executable by the first processor and including a data transfer module configured to provide protocol-agnostic data connections between a plurality of servers in the enterprise; one or more hub servers configured to provide protocol-agnostic file transfer between the plurality of servers in the enterprise, each hub server (i) comprising a second computing-platform having a second memory and at least one second processor in communication with the second memory, and each hub server (ii) in communication with the plurality of the networked servers; and a service delivery management framework comprising computer readable instructions for uniform management of a plurality of services across the enterprise stored in the memory, executable by a processor, wherein executing the computer readable instructions is configured to cause the processor to: receive a request from a user to initiate a file transfer between two servers of the plurality of networked servers and/or between two applications of the plurality of networked servers, wherein the user is pre-configured to initiate the file transfer and the user does not have physical access to the two servers or the two applications, wherein the request comprises a route for data transmission, a timing for data transmission and a protocol to be implemented for data transmission; implement a server-level entitlement comprising determining whether the requested file transfer is permissible between the two servers or the two applications, wherein determining whether the requested file transfer is permissible comprises: determining whether the two servers are entitled for a data connection by implementing a server rating system based on a type of data to be transferred and geographic locations of the two servers within the enterprise; initiate a file transfer at a device level and/or an application level, such that the file is transferred from (i) between the two servers, (ii) from a first server of the two servers and a first application of the two applications, and/or (iii) between the two applications; determine, via the service delivery management framework, a first protocol for the file transfer; establish a protocol-agnostic data connection between the two servers and/or between the two applications; and transfer, via the first protocol, the file at the device level and/or the application level such that the file is transferred between the two servers and/or the two applications without using a secondary network device to perform protocol-agnostic file transfer. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the file transfer is initiated by executing a service delivery application associated with a server of the two servers, wherein executing the computer readable instructions is further configured to cause the processor to: initiate the file transfer, via the service delivery application, by authenticating all services delivered by the service delivery application using a single Secure Socket Layer certificate stored on the server, without requiring separate predetermined Secure Socket Layer certificates to authenticate the data transfer between the two servers. ### Claim 3 (depends on 1) The apparatus of claim 1, wherein the server level entitlement is not a user-level entitlement comprising the user having access to the two servers and/or the two applications from which data is communicated or received. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein executing the computer readable instructions is further configured to cause the processor to provide to the user, in real-time, a status of ongoing file transfer. ### Claim 5 (depends on 1) The apparatus of claim 1, wherein executing the computer readable instructions is further configured to cause the processor to provide records of completed data transmissions at a data type-level and a server-level for a purpose of enterprise-wide data transmission auditing. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein executing the computer readable instructions is further configured to cause the processor to: allow the user to manage an enterprise-wide data transmission billing process for data transmissions, and enterprise-wide security and governance of data transmissions. ### Claim 7 (depends on 1) The apparatus of claim 1, wherein executing the computer readable instructions is further configured to cause the processor to provide one or more data transmission alerts based on data transmission events associated with the file transfer. ### Claim 8 (depends on 1) The apparatus of claim 1, wherein executing the computer readable instructions is further configured to cause the processor to receive from the user data transmission alert parameters comprising a form of the alert, a timing of the alert, alert recipients and a context of the alerts. ### Claim 9 (depends on 1) The apparatus of claim 1, wherein executing the computer readable instructions is further configured to cause the processor to provide the user access to archival uniform set logs of data transmission records that include full tracking and data transmission errors. ### Claim 10 (depends on 1) The apparatus of claim 1, wherein executing the computer readable instructions is further configured to cause the processor to: receive a second request from the user to disable the file transfer, wherein the second requires comprises a time for resuming the data transfer; and disable the file transfer based on the second request. ### Claim 11 A computer program product for a centralized, protocol- and technology-agnostic management of data transmissions within an enterprise, wherein the enterprise is associated with a plurality of networked servers comprising a modular-based, service delivery application including a data transfer module configured to provide protocol-agnostic data connections between the plurality of servers in the enterprise, the computer program product comprising: a non-transitory computer-readable medium comprising a set of codes for causing a computer to: receive, via a processor, a request from a user to initiate a file transfer between two servers of the plurality of networked servers and/or between two applications of the plurality of networked servers, wherein the user is pre-configured to initiate the file transfer and the user does not have physical access to the two servers or the two applications, wherein the request comprises a route for data transmission, a timing for data transmission and a protocol to be implemented for data transmission; implement, via the processor, a server-level entitlement comprising determining whether the requested file transfer is permissible between the two servers or the two applications, wherein determining whether the requested file transfer is permissible comprises: determining whether the two servers are entitled for a data connection by implementing a server rating system based on a type of data to be transferred and geographic locations of the two servers within the enterprise; initiate, via the processor, a file transfer at a device level and/or an application level, such that the file is transferred from (i) between the two servers, (ii) from a first server of the two servers and a first application of the two applications, and/or (iii) between the two applications; determine, via the service delivery management framework, a first protocol for the file transfer; establish, via the processor, a protocol-agnostic data connection between the two servers and/or between the two applications; and transfer, via the first protocol, the file at the device level and/or the application level such that the file is transferred between the two servers and/or the two applications without using a secondary network device to perform protocol-agnostic file transfer. ### Claim 12 (depends on 11) The computer program product of claim 11, wherein the file transfer is initiated by executing a service delivery application associated with a server of the two servers, wherein the computer program product further comprises a set of codes for causing the computer to: initiate, via the processor, the file transfer, via the service delivery application, by authenticating all services delivered by the service delivery application using a single Secure Socket Layer certificate stored on the server, without requiring separate predetermined Secure Socket Layer certificates to authenticate the data transfer between the two servers. ### Claim 13 (depends on 11) The computer program product of claim 11, wherein the computer program product further comprises a set of codes for causing the computer to provide to the user, via the processor, in real-time, a status of ongoing file transfer. ### Claim 14 (depends on 11) The computer program product of claim 11, wherein the computer program product further comprises a set of codes for causing the computer to provide, via the processor, one or more data transmission alerts based on data transmission events associated with the file transfer. ### Claim 15 (depends on 11) The computer program product of claim 11, wherein the computer program product further comprises a set of codes for causing the computer to receive, via the processor, from the user data transmission alert parameters comprising a form of the alert, a timing of the alert, alert recipients and a context of the alerts. ### Claim 16 (depends on 11) The computer program product of claim 11, wherein the computer program product further comprises a set of codes for causing the computer to: receive, via the processor, a second request from the user to disable the file transfer, wherein the second requires comprises a time for resuming the data transfer; and disable the file transfer based on the second request. ### Claim 17 A method for a centralized, protocol and technology-agnostic management of data transmissions within an enterprise, wherein the enterprise is associated with a plurality of networked servers comprising a modular-based, service delivery application including a data transfer module configured to provide protocol-agnostic data connections between the plurality of servers in the enterprise, the method comprising: receiving, via a processor, a request from a user to initiate a file transfer between two servers of the plurality of networked servers and/or between two applications of the plurality of networked servers, wherein the user is pre-configured to initiate the file transfer and the user does not have physical access to the two servers or the two applications, wherein the request comprises a route for data transmission, a timing for data transmission and a protocol to be implemented for data transmission; implementing, via the processor, a server-level entitlement comprising determining whether the requested file transfer is permissible between the two servers or the two applications, wherein determining whether the requested file transfer is permissible comprises: determining whether the two servers are entitled for a data connection by implementing a server rating system based on a type of data to be transferred and geographic locations of the two servers within the enterprise; initiating, via the processor, a file transfer at a device level and/or an application level, such that the file is transferred from (i) between the two servers, (ii) from a first server of the two servers and a first application of the two applications, and/or (iii) between the two applications; determining, via the service delivery management framework, a first protocol for the file transfer; establishing, via the processor, a protocol-agnostic data connection between the two servers and/or between the two applications; and transferring, via the first protocol, the file at the device level and/or the application level such that the file is transferred between the two servers and/or the two applications without using a secondary network device to perform protocol-agnostic file transfer. ### Claim 18 (depends on 17) The method of claim 17, wherein the method further comprises providing to the user, via the processor, in real-time, a status of ongoing file transfer. ### Claim 19 (depends on 17) The method of claim 17, wherein the method further comprises receiving, via the processor, from the user, data transmission alert parameters comprising a form of the alert, a timing of the alert, alert recipients and a context of the alert. ### Claim 20 (depends on 17) The method of claim 17, wherein the method further comprises: receiving, via the processor, from a second request from the to disable the file transfer, wherein the second requires comprises a time for resuming the data transfer; and disabling the file transfer based on the second request.