IP Library › Granted Patent US 11,372,982
Granted Patent B2
US 11,372,982 · App. 16/919,918 · Granted Jun 28, 2022

Centralized network environment for processing validated executable data based on authorized hash outputs

Inventors: George Albero (Charlotte, NC); Jake Michael Yara (Mint Hill, NC); Edward Lee Traywick (Bellbrook, OH); Konata Stinson (Charlotte, NC); Emanuel David Guller (Charlotte, NC); Scot Lincoln Daniels (Clover, SC); Rick Wayne Sumrall (Charlotte, NC); Carrie Elaine Gates (Livermore, CA)
Assignee: BANK OF AMERICA CORPORATION
G06F21/577G06F21/54G06F21/564G06F21/568G06F21/602G06F21/6218
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,372,982
App. No.
16/919,918
Granted
Jun 28, 2022
Kind
B2
Abstract

A centralized network environment is provided for processing validated executable data based on authorized hash outputs. In particular, the system may generate cryptographic hash outputs of code or software that has been evaluated (e.g., within a virtual environment). The system may then store the hash outputs within a hash database which may be accessible by multiple entity networks, where multiple entities may upload hash output values to and/or retrieve hash output values from the hash database. Based on the data within the hash database, each entity may efficiently identify code that may be safe or unsafe to execute on certain computing systems within its network environment. The system may further comprise an artificial intelligence-powered component which may be configured to detect patterns within code that has been identified by the system as unsafe and provide notifications containing systems likely to be affected and recommended countermeasures.

Claims (75)

1. A system for a centralized network environment for processing validated executable data based on authorized hash outputs, the system comprising:

a memory device with computer-readable program code stored thereon;

a communication device; and

a processing device operatively coupled to the memory device and the communication device, wherein the processing device is configured to execute the computer-readable program code to:

receive, from a first entity computing system, a first hash output value of a first set of executable code, wherein the first set of executable code contains unauthorized code;

generate a first environment hash value based on one or more core variables associated with the first entity computing system, wherein the one or more core variables comprises at least one of operating system version or processor architecture;

store the first hash output value within an authorization database;

store the first environment hash value within the authorization database;

detect an attempt to execute a second set of executable code within a second entity computing system;

generate a second hash output value of the second set of executable code;

generate a second environment hash value of the one or more core variables associated with the first entity computing system;

compare the second hash output value with one or more hash values within the authorization database;

compare the second environment hash value with the first environment hash value within the authorization database; and

based on comparing the second hash output value with the one or more hash values and comparing the second environment hash value with the first environment hash value, perform validation of the second set of executable code.

2. The system according to claim 1 , wherein performing validation of the second set of executable code comprises:

detecting a match between the second hash output value and the one or more hash values within the authorization database; and

based on detecting the match, automatically blocking the second set of executable code from being executed on the second entity computing system.

3. The system according to claim 1 , wherein performing validation of the second set of executable code comprises:

detecting that the second hash output value does not match any of the one or more hash values within the authorization database; and

initiating a process to evaluate the second set of executable code for malware.

4. The system according to claim 1 , wherein performing validation of the second set of executable code comprises:

detecting that the second hash output value does not match any of the one or more hash values within the authorization database; and

allowing the second set of executable code to be executed on the second entity computing system.

5. The system according to claim 1 , wherein computer-readable program code further causes the processing device to:

detecting that the first set of executable code contains malware; and

transmitting a notification to the second entity computing system, wherein the notification comprises the first hash output value.

6. The system according to claim 1 , wherein the unauthorized code is malware.

7. A computer program product for a centralized network environment for processing validated executable data based on authorized hash outputs, the computer program product comprising at least one non-transitory computer readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising executable code portions for:

receiving, from a first entity computing system, a first hash output value of a first set of executable code, wherein the first set of executable code contains unauthorized code;

generating a first environment hash value based on one or more core variables associated with the first entity computing system, wherein the one or more core variables comprises at least one of operating system version or processor architecture;

storing the first hash output value within an authorization database;

storing the first environment hash value within the authorization database;

detecting an attempt to execute a second set of executable code within a second entity computing system;

generating a second hash output value of the second set of executable code;

generating a second environment hash value of the one or more core variables associated with the first entity computing system;

comparing the second hash output value with one or more hash values within the authorization database;

comparing the second environment hash value with the first environment hash value within the authorization database; and

based on comparing the second hash output value with the one or more hash values and comparing the second environment hash value with the first environment hash value, performing validation of the second set of executable code.

8. The computer program product according to claim 7 , wherein performing validation of the second set of executable code comprises:

detecting a match between the second hash output value and the one or more hash values within the authorization database; and

based on detecting the match, automatically blocking the second set of executable code from being executed on the second entity computing system.

9. The computer program product according to claim 7 , wherein performing validation of the second set of executable code comprises:

detecting that the second hash output value does not match any of the one or more hash values within the authorization database; and

initiating a process to evaluate the second set of executable code for malware.

10. The computer program product according to claim 7 , wherein performing validation of the second set of executable code comprises:

detecting that the second hash output value does not match any of the one or more hash values within the authorization database; and

allowing the second set of executable code to be executed on the second entity computing system.

11. The computer program product according to claim 7 , the computer-readable program code portions further comprising executable code portions for:

detecting that the first set of executable code contains malware; and

transmitting a notification to the second entity computing system, wherein the notification comprises the first hash output value.

12. The computer program product according to claim 7 , wherein the unauthorized code is malware.

13. A computer-implemented method for a centralized network environment for processing validated executable data based on authorized hash outputs, wherein the computer-implemented method comprises:

receiving, from a first entity computing system, a first hash output value of a first set of executable code, wherein the first set of executable code contains unauthorized code;

generating a first environment hash value based on one or more core variables associated with the first entity computing system, wherein the one or more core variables comprises at least one of operating system version or processor architecture;

storing the first hash output value within an authorization database;

storing the first environment hash value within the authorization database;

detecting an attempt to execute a second set of executable code within a second entity computing system;

generating a second hash output value of the second set of executable code;

generating a second environment hash value of the one or more core variables associated with the first entity computing system;

comparing the second hash output value with one or more hash values within the authorization database;

comparing the second environment hash value with the first environment hash value within the authorization database; and

based on comparing the second hash output value with the one or more hash values and comparing the second environment hash value with the first environment hash value, performing validation of the second set of executable code.

14. The computer-implemented method according to claim 13 , wherein performing validation of the second set of executable code comprises:

detecting a match between the second hash output value and the one or more hash values within the authorization database; and

based on detecting the match, automatically blocking the second set of executable code from being executed on the second entity computing system.

15. The computer-implemented method according to claim 13 , wherein performing validation of the second set of executable code comprises:

detecting that the second hash output value does not match any of the one or more hash values within the authorization database; and

initiating a process to evaluate the second set of executable code for malware.

16. The computer-implemented method according to claim 13 , wherein performing validation of the second set of executable code comprises:

detecting that the second hash output value does not match any of the one or more hash values within the authorization database; and

allowing the second set of executable code to be executed on the second entity computing system.

17. The computer-implemented method according to claim 13 , wherein the computer-implemented method comprises:

detecting that the first set of executable code contains malware; and

transmitting a notification to the second entity computing system, wherein the notification comprises the first hash output value.

18. The computer-implemented method according to claim 13 , wherein the unauthorized code is malware.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 6, 2020
From: DANIELS, SCOT LINCOLN
To: BANK OF AMERICA CORPORATION
Reel/Frame 053125/0377 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 2, 2020
From: ALBERO, GEORGE; YARA, JAKE MICHAEL; STINSON, KONATA; GATES, CARRIE ELAINE; SUMRALL, RICK WAYNE; TRAYWICK, EDWARD LEE; GULLER, EMANUEL DAVID
To: BANK OF AMERICA CORPORATION
Reel/Frame 053121/0269 →
Continuity (1)
Related Publication 20220004644A1 · Jan 6, 2022
Cited By (1)
US 12,717,971