IP Library Granted Patent US 12695764
Granted Patent B2
US 12695764 · App. 18/890,952 · Granted Jul 28, 2026

Automated tagging of applications based on regulatory domain

Inventors: Julian James Stephen (Yorktown Heights, NY); Anca Sailer (Scarsdale, NY); Shriti Priya (White Plains, NY); Arjun Natarajan (Old Tappan, NJ)
Assignee: International Business Machines Corporation
H04L63/1416G06F16/285
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12695764
App. No.
18/890,952
Granted
Jul 28, 2026
Kind
B2
Abstract

Automated tagging of applications based on regulatory domain includes obtaining request data associated with a service request. The service request is associated with an application. Based on the request data, classification data associated with the service request is generated. The classification data is indicative of an operation associated with the application, or a service domain associated with the application. Based on the classification data, a regulatory tag is determined for the application. The regulatory tag is determined from a set of defined regulatory tags. A set of controls associated with the service request is determined based on the regulatory tag. The request data is validated against the set of controls and the service request is executed based on the validation of the request data.

Claims (82)

1 . A computer-implemented method, comprising:

obtaining, by a computer, request data associated with a service request, wherein the service request is associated with an application;

generating, by the computer, a first textual script associated with the service request based on the request data;

inputting, by the computer, the first textual script associated with the service request to an artificial intelligence (AI) model to receive a first output;

generating, by the computer, classification data associated with the service request based on the first output, the classification data indicative of at least one of an operation associated with the application or a service domain associated with the application;

determining, by the computer, a regulatory tag for the application based on the classification data, wherein the regulatory tag is determined from a set of defined regulatory tags;

determining, by the computer, a set of controls associated with the service request based on the regulatory tag;

validating, by the computer, the request data of the service request against the set of controls associated with the service request; and

executing, by the computer, the service request based on the validation of the service request.

2 . The computer-implemented method of claim 1 , further comprising generating, by the computer, a notification associated with the service request based on the validation.

3 . The computer-implemented method of claim 1 , further comprising:

generating, by the computer, updated request data associated with the service request upon detection of an invalid service request, wherein

the updated request data is generated based on the request data and the set of controls, and

the updated request data is compliant with the set of controls.

4 . The computer-implemented method of claim 1 , further comprising:

receiving, by the computer, service data associated with each service request of a plurality of service requests, wherein the service data associated with each service request of the plurality of service requests comprises at least one of input format data or endpoint data;

identifying, by the computer, a set of service requests from the plurality of service requests based on the service data of each service request of the plurality of service requests, wherein

the set of service requests is associated with the application, and

the set of service requests comprises the service request;

generating, by the computer, characteristics data for the application based on the service data, wherein the service data is associated with each service request of the set of service requests; and

determining, by the computer, the regulatory tag for the application based on the characteristics data.

5 . The computer-implemented method of claim 4 , further comprising:

determining, by the computer, interface data associated with one or more interface components of the application based on the set of service requests, wherein the set of service requests is associated with the application; and

determining, by the computer, a set of regulatory controls associated with each interface component of the one or more interface components based on the characteristics data and the regulatory tag.

6 . The computer-implemented method of claim 1 , further comprising:

generating, by the computer, a second textual script associated with the service request based on the regulatory tag for the application;

inputting, by the computer, the second textual script associated with the service request to the AI model to receive a second output; and

determining, by the computer, the set of controls associated with the service request based on the second output.

7 . The computer-implemented method of claim 6 , further comprising:

retrieving, by the computer, a plurality of controls associated with a plurality of regulatory domains; and

determining, by the computer, using the AI model, the set of controls associated with the service request from the plurality of controls, wherein the set of controls is associated with the application.

8 . The computer-implemented method of claim 1 , wherein the AI model is a large language model (LLM).

9 . The computer-implemented method of claim 1 , wherein the request data comprises at least one of user input data or service request resource locator data.

10 . A computer system, comprising:

a processor set;

one or more computer-readable storage media; and

program instructions stored on the one or more computer-readable storage media, the program instructions executable by the processor set to cause the processor set to:

obtain request data associated with a service request, wherein the service request is associated with an application;

generate a first textual script associated with the service request based on the request data;

input the first textual script associated with the service request to an artificial intelligence (AI) model to receive a first output;

generate classification data associated with the service request based on the first output, the classification data indicative of at least one of an operation associated with the application or a service domain associated with the application;

determine a regulatory tag for the application based on the classification data, wherein the regulatory tag is determined from a set of defined regulatory tags;

determine a set of controls associated with the service request based on the regulatory tag;

validate the request data of the service request against the set of controls associated with the service request; and

execute the service request based on the validation of the service request.

11 . The computer system of claim 10 , wherein the program instructions further cause the processor set to:

receive service data associated with each service request of a plurality of service requests, wherein the service data associated with each service request of the plurality of service requests comprises at least one of input format data or endpoint data;

identify a set of service requests from the plurality of service requests based on the service data of each service request of the plurality of service requests, wherein

the set of service requests is associated with the application, and

the set of service requests comprises the service request;

generate characteristics data for the application based on the service data, wherein the service data is associated with each service request of the set of service requests; and

determine the regulatory tag for the application based on the characteristics data.

12 . The computer system of claim 11 , wherein the program instructions further cause the processor set to:

determine interface data associated with one or more interface components of the application based on the set of service requests, wherein the set of service requests is associated with the application; and

determine a set of regulatory controls associated with each interface component of the one or more interface components based on the characteristics data and the regulatory tag.

13 . The computer system of claim 10 , wherein the program instructions further cause the processor set to:

generate a second textual script associated with the service request based on the regulatory tag for the application;

input the second textual script associated with the service request to the AI model to receive a second output; and

determine the set of controls associated with the service request based on the second output.

14 . The computer system of claim 13 , wherein the program instructions further cause the processor set to:

retrieve a plurality of controls associated with a plurality of regulatory domains; and

determine, using the AI model, the set of controls associated with the service request from the plurality of controls, wherein the set of controls is associated with the application.

15 . The computer system of claim 10 , wherein the program instructions further cause the processor set to generate updated request data associated with the service request upon detection of an invalid service request, wherein the updated request data is generated based on the request data and the set of controls, and wherein the updated request data is compliant with the set of controls.

16 . A computer program product comprising a computer-readable storage medium having program instructions, which when executed by a system, cause the system to:

obtain request data associated with a service request, wherein the service request is associated with an application;

generate a first textual script associated with the service request based on the request data;

input the first textual script associated with the service request to an artificial intelligence (AI) model to receive a first output;

generate classification data associated with the service request based on the first output, the classification data indicative of at least one of an operation associated with the application or a service domain associated with the application;

determine a regulatory tag for the application based on the classification data, wherein the regulatory tag is determined from a set of defined regulatory tags;

determine a set of controls associated with the service request based on the regulatory tag;

validate the request data of the service request against the set of controls associated with the service request; and

execute the service request based on the validation of the service request.

17 . The computer program product of claim 16 , wherein the program instructions further cause the system to:

receive service data associated with each service request of a plurality of service requests, wherein the service data associated with each service request of the plurality of service requests comprises at least one of input format data or endpoint data;

identify a set of service requests from the plurality of service requests based on the service data of each service request of the plurality of service requests, wherein

the set of service requests is associated with the application, and

the set of service requests comprises the service request;

generate characteristics data for the application based on the service data, wherein the service data is associated with each service request of the set of service requests; and

determine the regulatory tag for the application based on the characteristics data.

18 . The computer program product of claim 17 , wherein the program instructions further cause the system to:

determine interface data associated with one or more interface components of the application based on the set of service requests, wherein the set of service requests is associated with the application; and

determine a set of regulatory controls associated with each interface component of the one or more interface components based on the characteristics data and the regulatory tag.