Security model utilizing multi-channel data
AssigneeWells Fargo Bank, N.A.
InventorsShane Cross, Daniel Fricano, Thomas Gilheany, Peter Anatole Makohon, Dale Miller, Charles Steven Edison, Kodzo Wegba, James Bonk
Life of this patent
Estimating the term…
Abstract
Systems, methods and computer-readable storage media are utilized dynamically discovering components of a computer network environment. The processing circuit of a data acquisition engine configured determine a domain name associated with an entity profile, determine an IP range, validate at the domain name, the IP range, and the IP address, collect additional device connectivity data, and provide the additional device connectively data.
Claims20
A method of dynamically discovering new components of a computer network environment, the method comprising:
- determining, by a processing circuit of a data acquisition engine, a domain name associated with an entity profile, the entity profile comprising previously stored device connectivity data for an entity, the device connectivity data comprising the domain name;
- determining, by the processing circuit, internet protocol (IP) address data based on the domain name;
- determining, by the processing circuit, an IP range based on the IP address data, wherein the IP range comprises an IP address and indicates an internet service provider (ISP) of the IP range;
- validating, by the processing circuit, the domain name, the IP range, and the IP address, comprising determining whether the IP address is included in the previously stored device connectivity data;
- collecting, by the processing circuit, additional device connectivity data associated with the IP address;
- and
- providing, by the processing circuit, the additional device connectivity data to a security model.
A system comprising:
- a processing circuit configured to:
- determine a domain name associated with an entity profile, the entity profile comprising previously stored device connectivity data for an entity, the device connectivity data comprising the domain name;
- determine internet protocol (IP) address data based on the domain name;
- determine an IP range based on the IP address data, wherein the IP range comprises an IP address and indicates an internet service provider (ISP) of the IP range;
- validate at least one of the domain name, the IP range, and the IP address, comprising determining whether the IP address is included in the previously stored device connectivity data;
- collect additional device connectivity data associated with the IP address;
- and
- provide the additional device connectivity data to a security model.
One or more non-transitory computer-readable storage media having instructions stored thereon that, when executed by a processing circuit, cause the processing circuit to:
- determine a domain name associated with an entity profile, the entity profile comprising previously stored device connectivity data for an entity, the device connectivity data comprising the domain name;
- determine internet protocol (IP) address data based on the domain name;
- determine an IP range based on the IP address data, wherein the IP range comprises an IP address and indicates an internet service provider (ISP) of the IP range;
- validate at least one of the domain name, the IP range, and the IP address, comprising determining whether the IP address is included in the previously stored device connectivity data;
- collect additional device connectivity data associated with the IP address;
- and
- provide the additional device connectivity data to a security model.
Dependencies are inferred from the claim text.