# US 12,113,801 B2 · System and method for maintaining network security in a mesh network by analyzing IP stack layer information in communications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,113,801 B2 - Document ID: US12113801B2 - Status: Granted - Kind: B2 - Application number: 17/539,400 - Filed: 2021-12-01 - Published: 2023-06-01 - Granted: 2024-10-08 - Earliest claimed: 2021-12-01 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Brandon Sloane; Michael Ogrinz; Charles Edward Dudley - Web page: https://patentgrep.com/patent/US12113801B2 ## CPC - H04L 63/105: {Multiple levels of security} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/102: {Entity profiles} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems, methods, and computer program products are provided for monitoring network security in a mesh network. An example method includes receiving trust of service information relating to a user. The trust of service information includes one or more security details associated with at least one of a user device or a user network associated with the user. The method also includes determining a security level of a session involving the user based on the trust of service information relating to the user. The method further includes determining a security protocol for the session based on the determined security level. The security protocol determines at least one of a user access level or an additional security measure. The method still further includes causing an execution of the session based on the security protocol determined. ## Claims ### Claim 1 A system for monitoring network security in a mesh network, the system comprising: at least one non-transitory storage device; and at least one processing device coupled to the at least one non-transitory storage device, wherein the at least one processing device is configured to: receive trust of service information relating to a user, wherein the trust of service information comprises one or more security details associated with at least one of a user device or a user network associated with the user; process the trust of service information using a machine learning model, wherein the machine learning model is configured to generate a security database and update information of the security database, wherein the information of the security database comprises historical trust of service information and data relating to known malfeasant activity; based on the trust of service information relating to the user and the information of the security database, determine, using the machine learning model, a security level of a session involving the user; based on the determined security level, determine a security protocol for the session, wherein the security protocol determines at least one of a user access level or an additional security measure; cause an execution of the session based on the security protocol determined; receive additional trust of service information during execution of the security protocol and update the determined security level during execution; and display the updated determined security level to a user device prior to completion of the session. ### Claim 2 (depends on 1) The system of claim 1, wherein the trust of service information is received from the user device associated with the user. ### Claim 3 (depends on 2) The system of claim 2, wherein the trust of service information comprises at least one of a user device location or a user device network type. ### Claim 4 (depends on 1) The system of claim 1, wherein the security protocol comprises limiting a transaction amount based on the security level. ### Claim 5 (depends on 1) The system of claim 1, wherein the trust of service information is stored within a stack layer of a communication with the user device. ### Claim 6 (depends on 1) The system of claim 1, wherein the additional security measure comprises requesting additional user verification information, and wherein the at least one processing device is further configured to update the security level of the session based on a response to the request for additional user verification information. ### Claim 7 (depends on 1) The system of claim 1, wherein the at least one processing device is further configured to cause a display of the security level to the user device prior to a completion of the session. ### Claim 8 A computer program product for monitoring network security in a mesh network, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising: an executable portion configured to receive trust of service information relating to a user, wherein the trust of service information comprises one or more security details associated with at least one of a user device or a user network associated with the user; an executable portion configured to process the trust of service information using a machine learning model, wherein the machine learning model is configured to generate a security database and update information of the security database, wherein the information of the security database comprises historical trust of service information and data relating to known malfeasant activity; an executable portion configured to determine, using the machine learning model, a security level of a session involving the user based on the trust of service information relating to the user and the information of the security database; an executable portion configured to determine a security protocol for the session based on the determined security level, wherein the security protocol determines at least one of a user access level or an additional security measure; an executable portion configured to cause an execution of the session based on the security protocol determined; an executable portion configured to receive additional trust of service information during execution of the security protocol and update the determined security level during execution; and an executable portion configured to display the updated determined security level to a user device prior to completion of the session. ### Claim 9 (depends on 8) The computer program product of claim 8, wherein the trust of service information is received from the user device associated with the user. ### Claim 10 (depends on 9) The computer program product of claim 9, wherein the trust of service information comprises at least of a user device location or a user device network type. ### Claim 11 (depends on 8) The computer program product of claim 8, wherein the security protocol comprises limiting a transaction amount based on the security level. ### Claim 12 (depends on 8) The computer program product of claim 8, wherein the trust of service information is stored within a stack layer of a communication with the user device. ### Claim 13 (depends on 8) The computer program product of claim 8, wherein the additional security measure comprises requesting additional user verification information, and wherein the computer-readable program code portions further comprise an executable portion configured to update the security level of the session based on a response to the request for additional user verification information. ### Claim 14 (depends on 8) The computer program product of claim 8, wherein the computer-readable program code portions further comprise an executable portion configured to cause a display of the security level to the user device prior to a completion of the session. ### Claim 15 A computer-implemented method for monitoring network security in a mesh network, the method comprising: receiving trust of service information relating to a user, wherein the trust of service information comprises one or more security details associated with at least one of a user device or a user network associated with the user; processing the trust of service information using a machine learning model, wherein the machine learning model is configured to generate a security database and update information of the security database, wherein the information of the security database comprises historical trust of service information and data relating to known malfeasant activity; based on the trust of service information relating to the user and the information of the security database, determining, using the machine learning model, a security level of a session involving the user; based on the determined security level, determining a security protocol for the session, wherein the security protocol determines at least one of a user access level or an additional security measure; causing an execution of the session based on the security protocol determined; receiving additional trust of service information during execution of the security protocol and update the determined security level during execution; and displaying the updated determined security level to a user device prior to completion of the session. ### Claim 16 (depends on 15) The method of claim 15, wherein the trust of service information is received from the user device associated with the user. ### Claim 17 (depends on 16) The method of claim 16, wherein the trust of service information comprises at least one of a user device location or a user device network type. ### Claim 18 (depends on 15) The method of claim 15, wherein the security protocol comprises limiting a transaction amount based on the security level. ### Claim 19 (depends on 15) The method of claim 15, wherein the trust of service information is stored within a stack layer of a communication with the user device. ### Claim 20 (depends on 15) The method of claim 15, wherein the additional security measure comprises requesting additional user verification information, and wherein the method further comprises updating the security level of the session based on a response to the request for additional user verification information.