# US 12,010,003 B1 · Systems and methods for deploying automated diagnostic engines for identification of network controls status

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,010,003 B1
- Document ID: US12010003B1
- Status: Granted
- Kind: B1
- Application number: 18/101,991
- Filed: 2023-01-26
- Granted: 2024-06-11
- Earliest claimed: 2023-01-26
- Assignees: Bank of America Corporation
- Applicants: Bank of America Corporation
- Inventors: Tomas M. Castrejon, III; Christopher Stephen Littrell; Trina Perraut; Kara M. Schlageter
- Web page: https://patentgrep.com/patent/US12010003B1

## CPC

- H04L 43/04: Processing captured monitoring data, e.g. for logfile generation
- G06F 8/60: Software deployment
- H04L 41/0894: Policy-based network configuration management
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Systems, computer program products, and methods are described herein for identifying network control gaps in an automated fashion. The present disclosure is configured to execute instructions to deploy one or more autonomous programs on a network infrastructure; continually monitor feedback data received from the one or more autonomous programs; based on the feedback data received from the one or more autonomous programs, determine that the one or more autonomous programs has circumvented one or more network control policies; analyze the feedback data to determine how the one or more autonomous programs has circumvented the one or more network control policies; and execute instructions to pause access to one or more systems or elevate one or more security requirements in response to determining that the one or more autonomous programs has circumvented one or more network control policies.

## Claims

### Claim 1

A system for identifying network control gaps, the system comprising:
at least one non-transitory storage device; and
at least one processor coupled to the at least one non-transitory storage device, wherein the at least one processor is configured to:
execute instructions to deploy one or more autonomous programs on a network infrastructure, wherein the one or more autonomous programs further comprise a network of chat bots configured to communicate with one or more human users and emulate one or more data misappropriation methods including requesting access to devices and data for which the one or more autonomous programs are not authorized to access;
continually monitor feedback data received from the one or more autonomous programs;
based on the feedback data received from the one or more autonomous programs, determine that the one or more autonomous programs has circumvented one or more network control policies;
analyze the feedback data to determine how the one or more autonomous programs has circumvented the one or more network control policies; and
execute instructions to pause access to one or more systems or elevate one or more security requirements in response to determining that the one or more autonomous programs has circumvented one or more network control policies.

### Claim 2 (depends on 1)

The system of claim 1, wherein the network infrastructure comprises multiple devices and operating systems including servers, mobile device, and smart devices.

### Claim 3 (depends on 1)

The system of claim 1, wherein the one or more network control policies further comprise a user permissions level.

### Claim 4 (depends on 3)

The system of claim 3, wherein circumventing the one or more network control policies further comprises elevating the user permissions level without proper authority.

### Claim 5 (depends on 1)

The system of claim 1, wherein the one or more network control policies further comprise access to a user account.

### Claim 6 (depends on 5)

The system of claim 5, wherein circumventing the one or more network control policies further comprises accessing the user account without proper authentication.

### Claim 7

A computer program product for automatically identifying network control gaps, the computer program product comprising a non-transitory computer-readable medium comprising code causing an apparatus to:
execute instructions to deploy one or more autonomous programs on a network infrastructure, wherein the one or more autonomous programs further comprise a network of chat bots configured to communicate with one or more human users and emulate one or more data misappropriation methods including requesting access to devices and data for which the one or more autonomous programs are not authorized to access;
continually monitor feedback data received from the one or more autonomous programs;
based on the feedback data received from the one or more autonomous programs, determine that the one or more autonomous programs has circumvented one or more network control policies;
analyze the feedback data to determine how the one or more autonomous programs has circumvented the one or more network control policies; and
execute instructions to pause access to one or more systems or elevate one or more security requirements in response to determining that the one or more autonomous programs has circumvented one or more network control policies.

### Claim 8 (depends on 7)

The computer program product of claim 7, wherein the network infrastructure comprises multiple devices and operating systems including servers, mobile device, and smart devices.

### Claim 9 (depends on 7)

The computer program product of claim 7, wherein the one or more network control policies further comprise a user permissions level.

### Claim 10 (depends on 9)

The computer program product of claim 9, wherein circumventing the one or more network control policies further comprises elevating the user permissions level without proper authority.

### Claim 11 (depends on 7)

The computer program product of claim 7, wherein the one or more network control policies further comprise access to a user account.

### Claim 12 (depends on 11)

The computer program product of claim 11, wherein circumventing the one or more network control policies further comprises accessing the user account without proper authentication.

### Claim 13

A method for automatically identifying network control gaps, the method comprising:
deploying one or more autonomous programs on a network infrastructure, wherein the one or more autonomous programs further comprise a network of chat bots configured to communicate with one or more human users and emulate one or more data misappropriation methods including requesting access to devices and data for which the one or more autonomous programs are not authorized to access;
continually monitoring feedback data received from the one or more autonomous programs;
based on the feedback data received from the one or more autonomous programs, determining that the one or more autonomous programs has circumvented one or more network control policies;
analyzing the feedback data to determine how the one or more autonomous programs has circumvented the one or more network control policies; and
executing instructions to pause access to one or more systems or elevate one or more security requirements in response to determining that the one or more autonomous programs has circumvented one or more network control policies.

### Claim 14 (depends on 13)

The method of claim 13, wherein the one or more network control policies further comprise a user permissions level.

### Claim 15 (depends on 14)

The method of claim 14, wherein circumventing the one or more network control policies further comprises elevating the user permissions level without proper authority.

### Claim 16 (depends on 13)

The method of claim 13, wherein the one or more network control policies further comprise access to a user account.

### Claim 17 (depends on 16)

The method of claim 16, wherein circumventing the one or more network control policies further comprises accessing the user account without proper authentication.
