# US 2018/0324143 A1 · Distributed memory data repository based defense system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0324143 A1 - Document ID: US20180324143A1 - Status: Published application - Kind: A1 - Application number: 15/964,682 - Filed: 2018-04-27 - Published: 2018-11-08 - Earliest claimed: 2017-05-05 - Assignees: Royal Bank of Canada - Applicants: Royal Bank of Canada - Inventors: Stéphane HARVEY - Web page: https://patentgrep.com/patent/US20180324143A1 ## CPC - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - H04W 12/062: Pre-authentication - H04L 67/1001: for accessing one among a plurality of replicated servers - H04L 67/1095: Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes - H04L 69/324: in the data link layer [OSI layer 2], e.g. HDLC - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A distributed memory data repository of connected data centres. The network load balances by routing requests to different data centres for processing. The solution design provides a blue print to implement a distributed memory data repository based defense system across multiple nodes with dynamic fail-over capabilities. The defense system runs independently on a single node, exclusively leveraging memory for data storage and implementing a communication channel to interact with other nodes. ## Claims ### Claim 1 A distributed memory data repository with a network of a plurality of data centres and a repository switch, the repository switch for routing a first data request to a first data centre of the plurality of data centres for verification, the first data centre comprising a node, a processor, a switch and a memory, the switch for routing the first data request to the node, the memory having a data repository, the processor configured to execute machine readable instructions stored in the memory to control the node to verify the first data request using the data repository and, upon verification, execute the first data request. ### Claim 2 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured for load balancing to select the first data centre from the plurality of data centres using load data for the plurality of data centres. ### Claim 3 (depends on 1) The distributed memory data repository of claim 1, wherein the first data request comprising access credentials, wherein the node verifies the first data request by processing the access credentials using stored access credentials at the memory. ### Claim 4 (depends on 3) The distributed memory data repository of claim 3, wherein upon the access credentials not being verified at the first data centre, the repository switch being configured to re-route the first data request to a second data centre of the plurality of data centres for verification using other stored access credentials at the second data centre. ### Claim 5 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured to route a second data request to a second data centre of the plurality of data centres for verification, the second data centre comprising a node, a processor, a switch and a memory, the switch for routing the first data request to the node, the memory having a data repository, the processor configured to execute machine readable instructions stored in the memory to control the node to verify the second data request using the data repository and, upon verification, execute the second data request. ### Claim 6 (depends on 1) The distributed memory data repository of claim 1, wherein, upon verification of the first data request by the first data centre, the repository switch is configured to route data traffic to the first data centre for storage and processing. ### Claim 7 (depends on 6) The distributed memory data repository of claim 6, wherein the first data centre is configured to route the data traffic to a second data centre for storage and processing. ### Claim 8 (depends on 1) The distributed memory data repository of claim 1, wherein the processor of the first data centre is configured to transmit a synchronization request to the repository switch to update the data repository with data stored at the plurality of data centres. ### Claim 9 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured to transmit synchronization requests to the plurality of data centres to update the data repository with data stored at the plurality of data centres. ### Claim 10 (depends on 1) The distributed memory data repository of claim 1 wherein the repository switch is configured with rules for processing network traffic for routing to the first data centre. ### Claim 11 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured to receive updated data and systematically distributed the updated data to the plurality of data centres. ### Claim 12 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured to receive a repository deficiency notification from a requesting data centre, and route the repository deficiency notification to the first data centre to trigger a fail-safe mode for the requesting data centre. ### Claim 13 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured to systematically detect repository deficiencies of any of the plurality of data centres and delegate a defense process to another data centre for a requesting data centre, the defense process to systematically enter a fail-safe allow all mode it response to the detected repository deficiencies. ### Claim 14 (depends on 1) The distributed memory data repository of claim 1, wherein the processor is configured to control the node to implement packet inspection for a fast evolving attack pattern, and share packet inspection notifications across the plurality of data centres for global protection. ### Claim 15 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured to enable an administrator device to enable and disable a defense system rapidly across all nodes. ### Claim 16 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured to implement a monitoring only mode by which all detective and self-capability features are active and a defense blocking mode is not operational. ### Claim 17 (depends on 1) The distributed memory data repository of claim 1, wherein the repository switch is configured to route the first data request to the first data centre using a sequence of data centres. ### Claim 18 (depends on 1) The distributed memory data repository of claim 1, wherein the first data centre is configured to transmit a data restoration request to the repository switch, the repository switch being configured to route the data restoration request to a second data centre, the second data centre being configured to transmit data to the first data centre in response to restore the data repository. ### Claim 19 A process for a distributed memory data repository with a network of a plurality of data centres and a repository switch, the process comprising: load balancing, using the repository switch, to select a first data centre from the plurality of data centres using load data for the plurality of data centres; routing, using the repository switch, a first data request to the first data centre of the plurality of data centres for verification, the first data request comprising access credentials, the first data centre comprising a node, a processor, a switch and a memory having a data repository; routing the first data request to the node using the switch; controlling the node using the processor to verify the first data request by processing the access credentials using stored access credentials at the data repository of the memory; upon verification, executing the first data request using the processor. ### Claim 20 (depends on 19) The process of claim 19 further comprising: upon the access credentials not being verified at the first data centre, re-routing, using the repository switch, the first data request to a second data centre of the plurality of data centres for verification using other stored access credentials at the second data centre. ### Claim 21 A process for a distributed memory data repository with a network of a plurality of data centres and a repository switch, the process comprising: load balancing, using the repository switch, to select a first data centre from the plurality of data centres using load data for the plurality of data centres; routing, using the repository switch, a first data request to the first data centre of the plurality of data centres for verification, the first data centre comprising a node, a processor, a switch and a memory having a data repository; routing the first data request to the node using the switch; controlling the node using the processor to verify the first data request using stored data at the data repository of the memory; upon verification of the first data request by the first data centre, routing data traffic, using the repository switch, to the first data centre for storage and processing.