# US 2021/0344702 A1 · Threat analysis for information security > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0344702 A1 - Document ID: US20210344702A1 - Status: Published application - Kind: A1 - Application number: 16/862,927 - Filed: 2020-04-30 - Published: 2021-11-04 - Earliest claimed: 2020-04-30 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Jo-Ann Taylor; Amelia B. Hartman; Simon Neil Riggs - Web page: https://patentgrep.com/patent/US20210344702A1 ## CPC - H04L 63/1433: {Vulnerability analysis} - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/105: {Multiple levels of security} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A device configured to receive a data storage request that identifies a target data storage device for a data element. The device is further configured to determine a security level associated with the target data storage device. The device is further configured to determine a protection level range based on the determined security level and to identify one or more security controls within the protection level range. Each security control comprises a hardware configuration for data storage devices that are associated with mitigating one or more vulnerability types. The device is further configured to output the identified one or more security controls. ## Claims ### Claim 1 An information security device, comprising: a memory operable to store security control information comprising a plurality of security controls, wherein: each security control is associated with a protection level for data security; and each security control comprises a hardware configuration for data storage devices; and a processor operably coupled to the memory, configured to: receive a data storage request comprising context information associated with storing a data element, wherein the context information identifies a target data storage device; determine a security level associated with the target data storage device, wherein the security level is based on security features associated with the target data storage device; determine a protection level range based on the determined security level, wherein the protection level range comprises: a maximum protection level for a security control; and a minimum protection level for a security control; identify one or more security controls within the protection level range; and output the identified one or more security controls. ### Claim 2 (depends on 1) The device of claim 1, wherein the processor is further configured to: receive the data element; receive a user input identifying a selected security control from among the identified one or more security controls; apply the selected security controls to the target data storage device; and store the data element in the target data storage device after applying the selected security controls. ### Claim 3 (depends on 1) The device of claim 1, wherein determining the maximum protection level comprises: determining a physical location of the target data storage device; and selecting a protection level based on the physical location of the target storage device. ### Claim 4 (depends on 3) The device of claim 3, wherein determining the maximum protection level is less than a highest protection level associated with the plurality of security controls. ### Claim 5 (depends on 1) The device of claim 1, wherein determining the security level associated is based at least in part on authentication protocols used by the target data storage device. ### Claim 6 (depends on 1) The device of claim 1, wherein determining the security level associated is based at least in part on a tamper protection level for the target data storage device ### Claim 7 (depends on 1) The device of claim 1, wherein determining the security level associated is based at least in part on encryption protocols used by the target data storage device. ### Claim 8 An information security method, comprising: receiving a data storage request comprising context information associated with storing a data element, wherein the context information identifies a target data storage device; determining a security level associated with the target data storage device, wherein the security level is based on security features associated with the target data storage device; determining a protection level range based on the determined security level, wherein the protection level range comprises: a maximum protection level for a security control; and a minimum protection level for a security control; identifying one or more security controls within the protection level range, wherein: each security control is associated with a protection level for data security; and each security control comprises a hardware configuration for data storage devices; and outputting the identified one or more security controls. ### Claim 9 (depends on 8) The method of claim 8, further comprising: receiving the data element; receiving a user input identifying a selected security control from among the identified one or more security controls; applying the selected security controls to the target data storage device; and storing the data element in the target data storage device after applying the selected security controls. ### Claim 10 (depends on 8) The method of claim 8, wherein determining the maximum protection level comprises: determining a physical location of the target data storage device; and selecting a protection level based on the physical location of the target storage device. ### Claim 11 (depends on 10) The method of claim 10, wherein determining the maximum protection level is less than a highest protection level associated with the plurality of security controls. ### Claim 12 (depends on 8) The method of claim 8, wherein determining the security level associated is based at least in part on authentication protocols used by the target data storage device. ### Claim 13 (depends on 8) The method of claim 8, wherein determining the security level associated is based at least in part on a tamper protection level for the target data storage device ### Claim 14 (depends on 8) The method of claim 8, wherein determining the security level associated is based at least in part on encryption protocols used by the target data storage device. ### Claim 15 A computer program comprising executable instructions stored in a non-transitory computer readable medium that when executed by a processor causes the processor to: receive a data storage request comprising context information associated with storing a data element, wherein the context information identifies a target data storage device; determine a security level associated with the target data storage device, wherein the security level is based on security features associated with the target data storage device; determine a protection level range based on the determined security level, wherein the protection level range comprises: a maximum protection level for a security control; and a minimum protection level for a security control; identify one or more security controls within the protection level range, wherein: each security control is associated with a protection level for data security; and each security control comprises a hardware configuration for data storage devices; and output the identified one or more security controls. ### Claim 16 (depends on 15) The computer program of claim 15, further comprising instructions that when executed by the processor causes the processor to: receive the data element; receive a user input identifying a selected security control from among the identified one or more security controls; apply the selected security controls to the target data storage device; and store the data element in the target data storage device after applying the selected security controls. ### Claim 17 (depends on 15) The computer program of claim 15, wherein determining the maximum protection level comprises: determining a physical location of the target data storage device; and selecting a protection level based on the physical location of the target storage device. ### Claim 18 (depends on 17) The computer program of claim 17, wherein determining the maximum protection level is less than a highest protection level associated with the plurality of security controls. ### Claim 19 (depends on 15) The computer program of claim 15, wherein determining the security level associated is based at least in part on authentication protocols used by the target data storage device. ### Claim 20 (depends on 15) The computer program of claim 15, wherein determining the security level associated is based at least in part on a tamper protection level for the target data storage device