System and method for addressing spear phishing with real-time database implementation
AssigneeJPMorgan Chase Bank, N.A.
InventorIlya SLAVIN
Life of this patent
Estimating the term…
Abstract
The invention relates generally to a system and method that addresses spear phishing attempts. Embodiment of the present invention identifies messages that would have been blocked through a data loss prevention system and/or spam filters and further extracts financial directives (e.g., wire transfer information, account numbers, routing numbers, etc.). The extracted data may be stored and managed in a real-time database and used as a check for other transactions within the group, company and beyond.
Claims20
A system that addresses spear phishing attempts, the system comprising:
- an interface that receives blocked information from a plurality of accounts;
- a real-time database that stores and manages blocked information;
- and
- a computer server that is coupled to the interface and the real-time database and further configured to perform the steps of:
- receiving results of blocked emails or communications from one or more data streaming sources;
- identifying financial directions from the blocked emails or communications;
- extracting account numbers and routing numbers from the financial directions;
- publishing, via a real-time database, the extracted account numbers and routing numbers in real-time as topics onto a shared data bus;
- enhancing the extracted account numbers and routing numbers with payloads and one or more details;
- determining whether an instruction contains data that matches the extracted account numbers and routing numbers stored in the real-time database;
- responsive to determining whether the instruction contains matched data, alerting one or more associated users of a potential attack;
- and
- performing analytics on the extracted account numbers and routing numbers.
A method that addresses spear phishing, the method comprising the steps of:
- receiving, via an interface, results of blocked emails or communications from one or more data streaming sources;
- identifying, via a computer server, financial directions from the blocked emails or communications;
- extracting, via the computer server, account numbers and routing numbers from the financial directions;
- publishing, via a real-time database, the extracted account numbers and routing numbers in real-time as topics onto a shared data bus;
- enhancing, via the computer server, the extracted account numbers and routing numbers with payloads and one or more details;
- determining, via the computer server, whether an instruction contains data that matches the extracted account numbers and routing numbers stored in the real-time database;
- responsive to determining whether the instruction contains matched data, alerting one or more associated users of a potential attack;
- and
- performing, via the computer server, analytics on the extracted account numbers and routing numbers.
Dependencies are inferred from the claim text.