US 2022/0019681 A1Published application

Cognitive security tokens for restricting data access

AssigneeBank of America Corporation

InventorVijay Kumar Yarabolu

Life of this patent

Estimating the term…

Loading patent…

Abstract

Secure access to data within a communications platform is provided on a need-to-know basis. Inputs provided at the communication platform are intercepted and cognitively analyzed to determine context of the interaction and related data requirements. In response, data access rules are generated and/or retrieved and applied at an access gateway. As data requests as received from the called party from within the communications platform, the data access rules are applied to the request to determine if a match exists and, if so, data access rules-based access is provided to the data. In response to determining the context of the interaction, a context access token is generated and communicated to a virtual database assembler, which assembles a virtual database that only contains data responsive to the context of the interaction.

Claims20

Dependent claims

A system for providing data access security to data stored within a data repository, the system comprising:

a monitoring and cognitive analysis engine including a first memory and one or more first processing devices in communication with the first memory, wherein the first memory stores first instructions that are executable by the one or more first processing devices and configured to;
and
monitor inputs provided at a communication platform,
cognitively analyze the inputs to determine data requirements associated with the inputs,
create or retrieve data access rules based on the data requirements, and
initiate communication of the data access rules to an access gateway;
and
the access gateway including a second memory and one or more second processing devices in communication with the second memory, wherein the second memory stores second instructions that are executable by the one or more second processing devices and configured to:
receive the data access rules from the cognitive analysis engine,
in response to receiving a data request initiated at the communication platform for retrieving data from the data repository, determine whether the data request matches the access rules, and
in response to determining that the data request matches the access rules, provide rule-based access to data associated with the data request from within the data repository.

8 more elements

A computer program product comprising non-transitory computer-readable code that includes:

a first set of codes for causing a computer processing device to monitor inputs provided at a communication platform;
a second set of codes for causing a computer processing device to cognitively analyze the inputs to determine data requirements associated with the inputs;
a third set of codes for causing a computer processing device to create or retrieve data access rules based on the data requirements;
a fourth set of codes for causing a computer processing device to, in response to receiving a data request initiated at the communication platform for retrieving data from a data repository, determine whether the data request matches the access rules;
and
a fifth set of codes for causing a computer processing device to, in response to determining that the data request matches the access rules, provide rule-based access to data associated with the data request from within the data repository.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/931,899Filed 17 Jul 2020
Published: 20 Jan 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

G06F 21/33
User authentication: using certificates
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 16/1734
Details of further file system functions: details of monitoring file system events, e.g. by the use of hooks, filter drivers, logs
G06F 16/188
File system types: virtual file systems