# US 12,015,604 B2 · System for secured electronic data access through machine-learning based analysis of combined access authorizations

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,015,604 B2
- Document ID: US12015604B2
- Status: Granted
- Kind: B2
- Application number: 17/725,017
- Filed: 2022-04-20
- Published: 2023-10-26
- Granted: 2024-06-18
- Earliest claimed: 2022-04-20
- Assignees: Bank of America Corporation
- Applicants: Bank of America Corporation
- Inventors: Brandon Sloane; James Thomas MacAulay
- Web page: https://patentgrep.com/patent/US12015604B2

## CPC

- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 41/16: using machine learning or artificial intelligence
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A system is provided for secured electronic data access through machine-learning based analysis of combined access authorizations. In particular, the system may maintain an access provisioning database which stores data regarding the data access authorizations that have been granted to one or more third party computing systems or entities. The system may further continuously monitor and aggregate electronic data from one or more electronic data streams and analyze the electronic data to intelligently generate probabilities for future events that create certain combinations of access authorizations that affect the security of the electronic data to which the third party computing systems have authorized access. In this way, the system may provide an effective way to manage access authorizations.

## Claims

### Claim 1

A system for secured electronic data access through machine-learning based analysis of combined access authorizations, the system comprising:
a memory device with computer-readable program code stored thereon;
a communication device; and
a processing device operatively coupled to the memory device and the communication device, wherein the processing device is configured to execute the computer-readable program code to:
continuously monitor one or more data intelligence feeds;
connect to an access authorization database, wherein the access authorization database comprises one or more data records associated with secured data, wherein the one or more data records comprises an indicator of one or more third party systems that are authorized to access the secured data;
detect, based on a first third party system being authorized to access a first subset of the secured data and a second third party system being authorized to access a second subset of the secured data, that a combination of the first subset of the secured data and the second subset of the secured data creates an unauthorized combination of secured data;
compute, based on the one or more data intelligence feeds and the one or more data records within the access authorization database, a probability score and an impact score associated with a future event, wherein the future event comprises the combination of the first subset of the secured data and the second subset of the secured data; and
based on the probability score and the impact score, execute one or more remediation processes on the first subset of the secured data or the second subset of the secured data.

### Claim 2 (depends on 1)

The system according to claim 1, wherein the processing device is further configured to execute the computer-readable program code to present, on a display of a user computing device, an event dashboard, wherein the event dashboard comprises a graphical user interface configured to display the probability score and the impact score.

### Claim 3 (depends on 2)

The system according to claim 2, wherein the graphical user interface is further configured to execute a simulation of one or more potential scenarios based on the occurrence of a second set of future events.

### Claim 4 (depends on 1)

The system according to claim 1, wherein the one or more remediation processes comprises at least one of revocation of authentication credentials, forced encryption of the first subset of secured data or the second subset of secured data, or secure remote wipes of the first third party system or the second third party system.

### Claim 5 (depends on 4)

The system according to claim 4, wherein the one or more remediation processes are selected based on the probability score and the impact score associated with the future event.

### Claim 6 (depends on 1)

The system according to claim 1, wherein the one or more data records within the access authorization database comprise classifications of each subset of secured data.

### Claim 7 (depends on 1)

The system according to claim 1, wherein continuously monitoring the one or more data intelligence feeds comprises analyzing the one or more data intelligence feeds using one or more machine learning algorithms, the one or more machine learning algorithms comprising a natural language processing-based algorithm.

### Claim 8

A computer program product for secured electronic data access through machine-learning based analysis of combined access authorizations, the computer program product comprising at least one non-transitory computer readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising executable portions for:
continuously monitoring one or more data intelligence feeds;
connecting to an access authorization database, wherein the access authorization database comprises one or more data records associated with secured data, wherein the one or more data records comprises an indicator of one or more third party systems that are authorized to access the secured data;
detecting, based on a first third party system being authorized to access a first subset of the secured data and a second third party system being authorized to access a second subset of the secured data, that a combination of the first subset of the secured data and the second subset of the secured data creates an unauthorized combination of secured data;
computing, based on the one or more data intelligence feeds and the one or more data records within the access authorization database, a probability score and an impact score associated with a future event, wherein the future event comprises the combination of the first subset of the secured data and the second subset of the secured data; and
based on the probability score and the impact score, executing one or more remediation processes on the first subset of the secured data or the second subset of the secured data.

### Claim 9 (depends on 8)

The computer program product of claim 8, wherein the computer-readable program code portions further comprise executable portions for presenting, on a display of a user computing device, an event dashboard, wherein the event dashboard comprises a graphical user interface configured to display the probability score and the impact score.

### Claim 10 (depends on 9)

The computer program product of claim 9, wherein the graphical user interface is further configured to execute a simulation of one or more potential scenarios based on the occurrence of a second set of future events.

### Claim 11 (depends on 8)

The computer program product of claim 8, wherein the one or more remediation processes comprises at least one of revocation of authentication credentials, forced encryption of the first subset of secured data or the second subset of secured data, or secure remote wipes of the first third party system or the second third party system.

### Claim 12 (depends on 11)

The computer program product of claim 11, wherein the one or more remediation processes are selected based on the probability score and the impact score associated with the future event.

### Claim 13 (depends on 8)

The computer program product of claim 8, wherein the one or more data records within the access authorization database comprise classifications of each subset of secured data.

### Claim 14

A computer-implemented method for secured electronic data access through machine-learning based analysis of combined access authorizations, the computer-implemented method comprising:
continuously monitoring one or more data intelligence feeds;
connecting to an access authorization database, wherein the access authorization database comprises one or more data records associated with secured data, wherein the one or more data records comprises an indicator of one or more third party systems that are authorized to access the secured data;
detecting, based on a first third party system being authorized to access a first subset of the secured data and a second third party system being authorized to access a second subset of the secured data, that a combination of the first subset of the secured data and the second subset of the secured data creates an unauthorized combination of secured data;
computing, based on the one or more data intelligence feeds and the one or more data records within the access authorization database, a probability score and an impact score associated with a future event, wherein the future event comprises the combination of the first subset of the secured data and the second subset of the secured data; and
based on the probability score and the impact score, executing one or more remediation processes on the first subset of the secured data or the second subset of the secured data.

### Claim 15 (depends on 14)

The computer-implemented method of claim 14, wherein the computer-implemented method further comprises presenting, on a display of a user computing device, an event dashboard, wherein the event dashboard comprises a graphical user interface configured to display the probability score and the impact score.

### Claim 16 (depends on 15)

The computer-implemented method of claim 15, wherein the graphical user interface is further configured to execute a simulation of one or more potential scenarios based on the occurrence of a second set of future events.

### Claim 17 (depends on 14)

The computer-implemented method of claim 14, wherein the one or more remediation processes comprises at least one of revocation of authentication credentials, forced encryption of the first subset of secured data or the second subset of secured data, or secure remote wipes of the first third party system or the second third party system.

### Claim 18 (depends on 17)

The computer-implemented method of claim 17, wherein the one or more remediation processes are selected based on the probability score and the impact score associated with the future event.

### Claim 19 (depends on 14)

The computer-implemented method of claim 14, wherein the one or more data records within the access authorization database comprise classifications of each subset of secured data.

### Claim 20 (depends on 14)

The computer-implemented method of claim 14, wherein continuously monitoring the one or more data intelligence feeds comprises analyzing the one or more data intelligence feeds using one or more machine learning algorithms, the one or more machine learning algorithms comprising a natural language processing-based algorithm.
