# US 12,120,132 B2 · Dynamic quarantine engine integration with a validated network resource component library for network security > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,132 B2 - Document ID: US12120132B2 - Status: Granted - Kind: B2 - Application number: 17/886,846 - Filed: 2022-08-12 - Published: 2024-02-15 - Granted: 2024-10-15 - Earliest claimed: 2022-08-12 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Pierre Jacques Bouchard - Web page: https://patentgrep.com/patent/US12120132B2 ## CPC - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 63/1433: {Vulnerability analysis} - H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Embodiments of the present invention relate to apparatuses, systems, methods and computer program products for a dynamic quarantine engine integration with a validated network resource component library for network security. Specifically, the system typically is structured for real time deconstruction of incoming data and dynamic analysis of deconstructed components, and preventing unsuccessfully validated network resource components in a distributed network. In some aspects, in response to a successful first dynamic deconstructed validation of the first network program resource component, the system constructs a first categorical network program resource component record associated with the first network component at network resource structure database. The system then typically initiates a second dynamic deconstructed validation of the first categorical network program resource component record associated with the first network component. ## Claims ### Claim 1 A system for a dynamic quarantine engine integration with a validated network resource component library for network security, wherein the system is structured for real time deconstruction of incoming data and dynamic analysis of deconstructed components, and preventing unsuccessfully validated network resource components in a distributed network, the system comprising: at least one memory device with computer-readable program code stored thereon; at least one communication device; at least one processing device operatively coupled to the at least one memory device and the at least one communication device, wherein executing the computer-readable code is configured to cause the at least one processing device to: download, via a perimeter network layer of a first distributed network, a first network program resource component from an external source location to a dynamic quarantine validation library engine associated with the first distributed network; initiate, via the dynamic quarantine validation library engine, a first dynamic deconstructed validation of the first network program resource component comprising: splitting the first network program resource component into a plurality of program resource component portions; and validating each of the plurality of program resource component portions based on at least one or more categorical network program resource component records associated with the dynamic validated network resource library; in response to a successful first dynamic deconstructed validation of the first network program resource component, construct a first categorical network program resource component record associated with the first network component at network resource structure database; transmit the first categorical network program resource component record associated with the first network component to the dynamic quarantine validation library engine; initiate, via the dynamic quarantine validation library engine, a second dynamic deconstructed validation of the first categorical network program resource component record associated with the first network component; in response to successful validation of a second dynamic deconstructed validation of the first categorical network program resource component, insert the first categorical network program resource component record associated with the first network program resource component at a dynamic validated network resource library; and transmit the downloaded first network program resource component to a validated component repository. ### Claim 2 (depends on 1) The system of claim 1, wherein executing the computer-readable code is configured to cause the at least one processing device to: detect, via a network proxy component, an incoming file transfer associated with a first network program resource component at a first distributed network initiated by a first user at first network device of the first distributed network; and in response to determining, via the network proxy component, that a file attribute data element associated with the first network program resource component is associated with a predetermined file type, (i) block the incoming file transfer associated with the first network program resource component at the first distributed network, and (ii) automatically redirect a current interface displayed at the first network device to a dynamic validated network resource library interface associated with a dynamic validated network resource library; determine whether the first network program resource component matches the dynamic validated network resource library; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine is in response to determining that the first network program resource component does not match the dynamic validated network resource library. ### Claim 3 (depends on 1) The system of claim 1, wherein executing the computer-readable code is configured to cause the at least one processing device to: receive, at the dynamic validated network resource library, a request for the first network program resource component from the first user via the first network device; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine is in response to determining that the first network device is associated with an internal network layer of the first distributed network; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine comprises authenticating the download based on successful validation of a predetermined device credential associated with the first network device. ### Claim 4 (depends on 1) The system of claim 1, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a version associated with at least one of the plurality of program resource component portions of the first network program resource component is associated with a critical security vulnerability record; and determining an unsuccessful validation of the first network program resource component in response to determining that the version of the at least one of the plurality of program resource component portions of the first network program resource component is associated with the critical security vulnerability record. ### Claim 5 (depends on 1) The system of claim 1, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a first version associated with a first program resource component portion of the plurality of program resource component portions of the first network program resource component is associated with one or more critical security vulnerability records; determining the successful first dynamic deconstructed validation of the first network program resource component at a first time interval, in response to determining that the first version is not associated with the one or more critical security vulnerability records; initiating an update of the one or more critical security vulnerability records; and determining, dynamically, an unsuccessful validation of the first network program resource component at a second time interval succeeding the first time interval, in response to determining that a second version associated with a second program resource component portion of the plurality of program resource component portions of the first network program resource component is associated with the updated one or more critical security vulnerability records. ### Claim 6 (depends on 1) The system of claim 1, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a scan of a version associated with at least one of the plurality of program resource component portions of the first network program resource component is successful; and determining an unsuccessful validation of the first network program resource component in response to determining that the scan of the version of the at least one of the plurality of program resource component portions of the first network program resource component is unsuccessful. ### Claim 7 (depends on 1) The system of claim 1, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a source entity associated with at least one of the plurality of program resource component portions of the first network program resource component is associated with the one or more categorical network program resource component records of the dynamic validated network resource library; and determining an unsuccessful validation of the first network program resource component in response to determining that the source entity of the at least one of the plurality of program resource component portions of the first network program resource component does not match the one or more categorical network program resource component records of the dynamic validated network resource library. ### Claim 8 (depends on 1) The system of claim 1, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a version of at least one of the plurality of program resource component portions of the first network program resource component is associated with a component file; and determining an unsuccessful validation of the first network program resource component in response to determining that the version of the at least one of the plurality of program resource component portions of the first network program resource component does not match the component file. ### Claim 9 A computer program product for a dynamic quarantine engine integration with a validated network resource component library for network security, wherein the computer program product is configured for real time deconstruction of incoming data and dynamic analysis of deconstructed components, and preventing unsuccessfully validated network resource components in a distributed network, the computer program product comprising a non-transitory computer-readable storage medium having computer-executable instructions for causing a computer processor to: download, via a perimeter network layer of a first distributed network, a first network program resource component from an external source location to a dynamic quarantine validation library engine associated with the first distributed network; initiate, via the dynamic quarantine validation library engine, a first dynamic deconstructed validation of the first network program resource component comprising: splitting the first network program resource component into a plurality of program resource component portions; and validating each of the plurality of program resource component portions based on at least one or more categorical network program resource component records associated with the dynamic validated network resource library; in response to a successful first dynamic deconstructed validation of the first network program resource component, construct a first categorical network program resource component record associated with the first network component at network resource structure database; transmit the first categorical network program resource component record associated with the first network component to the dynamic quarantine validation library engine; initiate, via the dynamic quarantine validation library engine, a second dynamic deconstructed validation of the first categorical network program resource component record associated with the first network component; in response to successful validation of a second dynamic deconstructed validation of the first categorical network program resource component, insert the first categorical network program resource component record associated with the first network program resource component at a dynamic validated network resource library; and transmit the downloaded first network program resource component to a validated component repository. ### Claim 10 (depends on 9) The computer program product of claim 9, wherein the non-transitory computer-readable storage medium further comprises computer-executable instructions for causing the computer processor to: detect, via a network proxy component, an incoming file transfer associated with a first network program resource component at a first distributed network initiated by a first user at first network device of the first distributed network; and in response to determining, via the network proxy component, that a file attribute data element associated with the first network program resource component is associated with a predetermined file type, (i) block the incoming file transfer associated with the first network program resource component at the first distributed network, and (ii) automatically redirect a current interface displayed at the first network device to a dynamic validated network resource library interface associated with a dynamic validated network resource library; determine whether the first network program resource component matches the dynamic validated network resource library; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine is in response to determining that the first network program resource component does not match the dynamic validated network resource library. ### Claim 11 (depends on 9) The computer program product of claim 9, wherein the non-transitory computer-readable storage medium further comprises computer-executable instructions for causing the computer processor to: receive, at the dynamic validated network resource library, a request for the first network program resource component from the first user via the first network device; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine is in response to determining that the first network device is associated with an internal network layer of the first distributed network; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine comprises authenticating the download based on successful validation of a predetermined device credential associated with the first network device. ### Claim 12 (depends on 9) The computer program product of claim 9, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a version associated with at least one of the plurality of program resource component portions of the first network program resource component is associated with a critical security vulnerability record; and determining an unsuccessful validation of the first network program resource component in response to determining that the version of the at least one of the plurality of program resource component portions of the first network program resource component is associated with the critical security vulnerability record. ### Claim 13 (depends on 9) The computer program product of claim 9, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a first version associated with a first program resource component portion of the plurality of program resource component portions of the first network program resource component is associated with one or more critical security vulnerability records; determining the successful first dynamic deconstructed validation of the first network program resource component at a first time interval, in response to determining that the first version is not associated with the one or more critical security vulnerability records; initiating an update of the one or more critical security vulnerability records; and determining, dynamically, an unsuccessful validation of the first network program resource component at a second time interval succeeding the first time interval, in response to determining that a second version associated with a second program resource component portion of the plurality of program resource component portions of the first network program resource component is associated with the updated one or more critical security vulnerability records. ### Claim 14 (depends on 9) The computer program product of claim 9, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a scan of a version associated with at least one of the plurality of program resource component portions of the first network program resource component is successful; and determining an unsuccessful validation of the first network program resource component in response to determining that the scan of the version of the at least one of the plurality of program resource component portions of the first network program resource component is unsuccessful. ### Claim 15 A method for a dynamic quarantine engine integration with a validated network resource component library for network security, wherein the method is configured for real time deconstruction of incoming data and dynamic analysis of deconstructed components, and preventing unsuccessfully validated network resource components in a distributed network, the method comprising: downloading, via a perimeter network layer of a first distributed network, a first network program resource component from an external source location to a dynamic quarantine validation library engine associated with the first distributed network; initiating, via the dynamic quarantine validation library engine, a first dynamic deconstructed validation of the first network program resource component comprising: splitting the first network program resource component into a plurality of program resource component portions; and validating each of the plurality of program resource component portions based on at least one or more categorical network program resource component records associated with the dynamic validated network resource library; in response to a successful first dynamic deconstructed validation of the first network program resource component, constructing a first categorical network program resource component record associated with the first network component at network resource structure database; transmitting the first categorical network program resource component record associated with the first network component to the dynamic quarantine validation library engine; initiating, via the dynamic quarantine validation library engine, a second dynamic deconstructed validation of the first categorical network program resource component record associated with the first network component; in response to successful validation of a second dynamic deconstructed validation of the first categorical network program resource component, inserting the first categorical network program resource component record associated with the first network program resource component at a dynamic validated network resource library; and transmitting the downloaded first network program resource component to a validated component repository. ### Claim 16 (depends on 15) The method of claim 15, wherein the method further comprises: detecting, via a network proxy component, an incoming file transfer associated with a first network program resource component at a first distributed network initiated by a first user at first network device of the first distributed network; and in response to determining, via the network proxy component, that a file attribute data element associated with the first network program resource component is associated with a predetermined file type, (i) blocking the incoming file transfer associated with the first network program resource component at the first distributed network, and (ii) automatically redirecting a current interface displayed at the first network device to a dynamic validated network resource library interface associated with a dynamic validated network resource library; determining whether the first network program resource component matches the dynamic validated network resource library; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine is in response to determining that the first network program resource component does not match the dynamic validated network resource library. ### Claim 17 (depends on 15) The method of claim 15, wherein the method further comprises: receiving, at the dynamic validated network resource library, a request for the first network program resource component from the first user via the first network device; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine is in response to determining that the first network device is associated with an internal network layer of the first distributed network; and wherein, the download of the first network program resource component from the external source location to the dynamic quarantine validation library engine comprises authenticating the download based on successful validation of a predetermined device credential associated with the first network device. ### Claim 18 (depends on 15) The method of claim 15, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a version associated with at least one of the plurality of program resource component portions of the first network program resource component is associated with a critical security vulnerability record; and determining an unsuccessful validation of the first network program resource component in response to determining that the version of the at least one of the plurality of program resource component portions of the first network program resource component is associated with the critical security vulnerability record. ### Claim 19 (depends on 15) The method of claim 15, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a first version associated with a first program resource component portion of the plurality of program resource component portions of the first network program resource component is associated with one or more critical security vulnerability records; determining the successful first dynamic deconstructed validation of the first network program resource component at a first time interval, in response to determining that the first version is not associated with the one or more critical security vulnerability records; initiating an update of the one or more critical security vulnerability records; and determining, dynamically, an unsuccessful validation of the first network program resource component at a second time interval succeeding the first time interval, in response to determining that a second version associated with a second program resource component portion of the plurality of program resource component portions of the first network program resource component is associated with the updated one or more critical security vulnerability records. ### Claim 20 (depends on 15) The method of claim 15, wherein the first dynamic deconstructed validation of the first network program resource component further comprises: determining whether a scan of a version associated with at least one of the plurality of program resource component portions of the first network program resource component is successful; and determining an unsuccessful validation of the first network program resource component in response to determining that the scan of the version of the at least one of the plurality of program resource component portions of the first network program resource component is unsuccessful.