# US 2023/0055463 A1 · Assessment plug-in system for providing binary digitally signed results > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0055463 A1 - Document ID: US20230055463A1 - Status: Published application - Kind: A1 - Application number: 17/406,227 - Filed: 2021-08-19 - Published: 2023-02-23 - Earliest claimed: 2021-08-19 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Jeffrey Glasco, Jr.; Benjamin Daniel Hardman; Robert Brice - Web page: https://patentgrep.com/patent/US20230055463A1 ## CPC - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - H04L 67/53: using third party service providers - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L 9/3247: {involving digital signatures} - H04L 63/126: {the source of the received data} - H04L 63/1433: {Vulnerability analysis} - G06F 2221/034: Test or assess a computer or a system - G06F 2221/2101: Auditing as a secondary aspect - G06F 2221/2115: Third party - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for determining third party network compliance with a host entity network is provided. The method may include generating a scanning file that includes host entity network compliance standards and transferring the scanning file to an intermediary entity network. The method may further include generating an executable file that may run a plug-in scanning file to scan hardware and software resident at the third-party network for compliance. The method may further include transferring the executable file from the intermediary entity network to the third party network. The method may further include executing the executable file, generating a log file upon the completion of the running of the plug-in scanning file and digitally signing the log file. The method may further include deciphering the log file at the intermediary entity network, generating a readable report based on the deciphering and transferring the readable report to the host entity network. ## Claims ### Claim 1 A method for determining third party network compliance with a host entity network, the method comprising: gathering host entity network compliance standards, the host entity network compliance standards comprising: security assessment standards; data movement controls; hardware requirements; software requirements; and configuration settings; generating a scanning file that includes the host entity network compliance standards; transferring the scanning file to an intermediary entity network; generating an executable file that, when executed, runs a plug-in scanning file, the plug-in scanning file for being run at a third-party network, the plug-in scanning file, when run, being configured to scan hardware and software resident at the third-party network for compliance with the host entity network compliance standards; transferring the executable file from the intermediary entity network to a third party network; executing the executable file, the executing including running the plug-in scanning file, the plug-in scanning file for testing the hardware and software resident at the third party network for compliance with the host entity network compliance standards; generating a log file upon a completion of the running of the plug-in scanning file; digitally signing the log file, wherein the digitally signing converts the log file to an immutable log file; and in response to the signing, transmitting the executable file and the immutable log file to the intermediary entity network; and deciphering the immutable log file at the intermediary entity network; based on the deciphering, generating a readable report; and transferring the readable report to the host entity network. ### Claim 2 (depends on 1) The method of claim 1 wherein each of the host entity network compliance standards comprises associated controls. ### Claim 3 (depends on 1) The method of claim 1 wherein the immutable log file is a binary log file. ### Claim 4 (depends on 1) The method of claim 1 wherein the intermediary entity network shields a third party network from accessing data at the host entity network. ### Claim 5 (depends on 1) The method of claim 1 wherein the intermediary entity network shields the host entity network from accessing data at the third party network. ### Claim 6 (depends on 1) The method of claim 1 further comprising transferring the readable report to the third party network. ### Claim 7 (depends on 1) The method of claim 1 wherein the immutable log file does not include identifying data associated with the third party network. ### Claim 8 (depends on 1) The method of claim 1 wherein following the transferring of the readable report to the host entity network, the method comprises displaying the readable report on a user interface (“UP”) of a host entity network platform. ### Claim 9 (depends on 1) The method of claim 1 wherein, when in response to the deciphering of the immutable log file a failure is identified associated with a configuration setting within the third party network, the method includes updating the configuration setting, via the intermediary entity network, the updating comprising adjusting the configuration setting to match a setting compliance standard set by the host entity network. ### Claim 10 A method for determining third party network compliance with a host entity network, the method comprising: gathering host entity network compliance standards, the host entity network compliance standards comprising: security assessment standards; data movement controls; hardware requirements; software requirements; and configuration settings; generating a scanning file that includes the host entity network compliance standards; generating an executable file that, when executed, runs a plug-in scanning file, the plug-in scanning file for being run at a third party network, the plug-in scanning file, when run, being configured to scan hardware and software resident at the third party network for compliance with the host entity network compliance standards; transferring the executable file to the third party network; executing the executable file, the execution including running the plug-in scanning file, the plug-in scanning file for testing the hardware and software resident at the third party network for compliance with the host entity network compliance standards; generating a log file upon a completion of the running of the plug-in scanning file; digitally signing the log file, wherein the digitally signing converts the log file to an immutable log file; transmitting the executable file and the immutable log file to the host entity network; deciphering the immutable log file at the host entity network; and based on the deciphering, generating a readable report. ### Claim 11 (depends on 10) The method of claim 10 wherein each of the host entity network compliance standards comprises associated controls. ### Claim 12 (depends on 10) The method of claim 10 wherein the readable report comprises a pass or fail for each of the associated controls within each of the host entity network compliance standards. ### Claim 13 (depends on 10) The method of claim 10 further comprising transferring the readable report to the third party network. ### Claim 14 (depends on 10) The method of claim 10 wherein the immutable log file does not include identifying data associated with the third party network. ### Claim 15 A system for determining third party network compliance with a host entity network, the system comprising: the host entity network configured to: construct a scanning file that includes host entity network compliance standards stored on the host entity network, the host entity network compliance standards comprising: security assessment standards; data movement controls; hardware requirements; software requirements; and configuration settings; and transmit the scanning file to an intermediary entity network; the intermediary entity network configured to: receive the scanning file from the host entity network; generate an executable file that, when executed, runs a plug-in scanning file, the plug-in scanning file for being run at a third-party network, the plug-in scanning file, when run, being configured to scan hardware and software resident at the third-party network for compliance with the host entity network compliance standards; and transmit the executable file to the third party network; the third-party network configured to: receive the executable file; execute the executable file, the executing including running the plug-in scanning file, the plug-in scanning file for testing the hardware and software resident at the third party network for compliance with the host entity network compliance standards; and generate a log file upon a completion of the running of the plug-in scanning file; digitally signing the log file, wherein the digitally signing converts the log file to an immutable log file; and in response to the signing, transmitting the executable file and the immutable log file to the intermediary entity network; and the intermediary entity network further configured to: receive the executable file and the immutable log file; decipher the immutable log file; based on the deciphering, generate a readable report; and transmit the readable report to the host entity network. ### Claim 16 (depends on 15) The system of claim 15 wherein each of the host entity network compliance standards comprises associated controls. ### Claim 17 (depends on 15) The system of claim 15 wherein the intermediary entity network shields a third party network from accessing data at the host entity network. ### Claim 18 (depends on 15) The system of claim 15 wherein the intermediary entity network shields the host entity network from accessing data at the third party network. ### Claim 19 (depends on 15) The system of claim 15 further comprising transferring the readable report to the third party network. ### Claim 20 (depends on 15) The system of claim 15 wherein the immutable log file does not include identifying data associated with the third party network.