System and Method for Performing Access Control Enforcement via Packet Inspection
AssigneeU.S. Bank National Association
InventorsSoumitri Naga Kolavennu, Jayant Chawla, Varshini Sriram
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided for access control enforcement through real-time packet inspection and transaction screening. The system employs one or more processors and memory to execute instructions that analyze packet headers and payloads, enforce access control policies, and utilize machine learning-driven agentic systems to predict associations with sanctioned entities. By comparing packet data against sanction lists and employing hierarchical decision-making processes, the system blocks or flags high-risk packets.
Claims20
A method for dynamic access control enforcement via packet inspection, comprising:
- receiving, by a screening server, packets containing a transaction record comprising field-value pairs;
- performing an agentic system selection operation that selects and applies corresponding agentic systems from a plurality of agentic systems to handle particular {field, value} pairs within the transaction record, wherein the selecting is based on predefined criteria including a nature of data fields, one or more security risks associated with values of the data fields, and one or more relevant regulatory or compliance considerations;
- processing the particular {field, value} pairs using the selected corresponding agentic systems;
- compiling results from the selected corresponding agentic systems and generating an access recommendation including an explanation;
- sending a screening result including the access recommendation to an arbitrator system for review;
- receiving, from the arbitrator system, a final determination based on the arbitrator system's evaluation of the access recommendation, wherein the final determination comprises one of confirming, modifying, or rejecting the access recommendation;
- and
- communicating supplemental screening results to a transaction server based on the final determination, wherein the transaction server is configured to pause, stop, or proceed with a transaction based on the supplemental screening results.
A system for dynamic access control enforcement via packet inspection, comprising:
- a transaction server configured to facilitate transactions across a transfer network;
- a screening server comprising one or more screening server processors, one or more screening server interfaces, and screening server memory storing screening server instructions and cascading rules;
- a plurality of agentic systems accessible to the screening server;
- and
- one or more advisory systems configured to operate as an arbitrator system;
- wherein the cascading rules, when executed by the one or more screening server processors, cause the one or more screening server processors to dynamically choose or activate different agents or processes from the plurality of agentic systems to handle specific tasks within a transaction record, and wherein execution of the screening server instructions by the one or more screening server processors causes the screening server to:
- receive packets containing a transaction record comprising field-value pairs;
- select and apply corresponding agentic systems from the plurality of agentic systems to handle particular {field, value} pairs within the transaction record based on predefined criteria including a nature of data fields, one or more security risks associated with values of the data fields, and one or more relevant regulatory or compliance considerations;
- process the particular {field, value} pairs using the selected corresponding agentic systems;
- compile results from the selected corresponding agentic systems and generate an access recommendation including an explanation;
- send a screening result including the access recommendation to the arbitrator system for review;
- receive, from the arbitrator system, a final determination based on the arbitrator system's evaluation of the access recommendation, wherein the final determination comprises one of confirming, modifying, or rejecting the access recommendation;
- and
- communicate supplemental screening results to the transaction server based on the final determination, wherein the transaction server is configured to pause, stop, or proceed with a transaction based on the supplemental screening results.
A non-transitory computer-readable medium storing instructions that, when executed by one or more processors of a screening server, cause the one or more processors to perform operations comprising:
- receiving packets containing a transaction record comprising field-value pairs;
- performing an agentic system selection operation that selects and applies corresponding agentic systems from a plurality of agentic systems to handle particular {field, value} pairs within the transaction record, wherein the selecting is based on predefined criteria including a nature of data fields, one or more security risks associated with values of the data fields, and one or more relevant regulatory or compliance considerations;
- processing the particular {field, value} pairs using the selected corresponding agentic systems;
- compiling results from the selected corresponding agentic systems and generating an access recommendation including an explanation;
- sending a screening result including the access recommendation to an arbitrator system for review;
- receiving, from the arbitrator system, a final determination based on the arbitrator system's evaluation of the access recommendation, wherein the final determination comprises one of confirming, modifying, or rejecting the access recommendation;
- and
- communicating supplemental screening results to a transaction server based on the final determination, wherein the transaction server is configured to pause, stop, or proceed with a transaction based on the supplemental screening results.
Dependencies are inferred from the claim text.