Granted Patent B2

US 12,744,758 · App. 18/484,196 · Granted Sep 22, 2026

Inventors: Abhijit Behera (Telangana, IN); Gowri Sundar Suriyanarayanan (Tamilnadu, IN); Maneesh Kumar Sethia (Telangana, IN)

Assignee: Bank of America Corporation

H04L63/0236H04L45/566H04L63/0876

Abstract

Claims (102)

1 . A system for validating origin information of a data item, comprising:

a validation server comprising:

a memory configured to store user information associated with a sender of a data item; and

a first processor, operably coupled to the memory and configured to:

access a data packet that indicates a request to transfer the data item, wherein:

the data packet is appended with at least a first header and a second header;

the first header comprises information about the sender of the data packet; and

the second header comprises a plurality of parameters comprising information about a user device from which the data packet has originated;

receive the user information that is previously provided by the sender of the data item;

compare the user information with the information about the sender of the data packet;

determine that the user information corresponds to the information about the sender of the data packet;

communicate a first request message to a gateway server to determine whether the information about the user device is valid;

the gateway server comprising a second processor configured to:

compare each parameter from the plurality of parameters with a counterpart expected parameter;

determine that more than a threshold number of parameters from the plurality of parameters correspond to counterpart expected parameters;

in response to determining that more than the threshold number of parameters correspond to the counterpart expected parameters, append a third header to the data packet, that indicates that the data packet has originated from an authorized device;

wherein the first processor is further configured to:

receive a first response message from the gateway server, wherein:

the first response message indicates that the information about the user device is valid; and

a receipt of the first response message is in response to:

a comparison between each parameter from the plurality of parameters with the counterpart expected parameter; and

a determination that more than the threshold number of parameters from the plurality of parameters correspond to counterpart expected parameters;

in response to receiving the first response message and determining that the user information corresponds to the information about the sender of the data packet, communicate a second request message to an operation server, wherein:

the second request message comprises the data packet; and

the second request message further comprises instructions that cause the data packet to be transferred.

2 . The system of claim 1 , wherein a determination that the information about the user device is valid is in response to:

comparing the information about the user device with previously provided information about the user device; and

determining that the information about the user device corresponds to the previously provided information about the user device.

3 . The system of claim 2 , wherein the previously provided information about the user device comprises at least one of an internet protocol (IP) address, an identifier, or an identification of an operating system (OS) associated with the user device.

4 . The system of claim 1 , further comprising the operation server communicatively coupled to the first processor and the gateway server, the operation server comprising a third processor configured to:

receive the second request message; and

execute the instructions included in the second request message.

5 . The system of claim 1 , wherein the information about the sender of the data packet included in the first header comprises at least one of an identifier associated with the sender or a timestamp of originating the request.

6 . The system of claim 1 , wherein:

to compare each parameter from the plurality of parameters with the counterpart expected parameter, the second processor is configured to compare location information associated with the user device with a list of expected location information; and

to determine that more than the threshold number of parameters correspond to the counterpart expected parameters, the second processor is configured to determine that the location information is among the list of expected location information.

7 . The system of claim 1 , wherein:

to compare each parameter from the plurality of parameters with the counterpart expected parameter, the second processor is configured to compare an operating system (OS) identifier associated with the user device with a list of expected OS identifiers; and

to determine that more than the threshold number of parameters correspond to the counterpart expected parameters, the second processor is configured to determine that the OS identifier is among the list of expected OS identifiers.

8 . A method for validating origin information of a data item, comprising:

storing user information associated with a sender of a data item;

accessing, by a first processor of a validation server, a data packet that indicates a request to transfer the data item, wherein:

the data packet is appended with at least a first header and a second header;

the first header comprises information about the sender of the data packet; and

the second header comprises a plurality of parameters comprising information about a user device from which the data packet has originated;

receiving, by the first processor, the user information that is previously provided by the sender of the data item;

comparing, by the first processor, the user information with the information about the sender of the data packet;

determining, by the first processor, that the user information corresponds to the information about the sender of the data packet;

communicating, by the first processor, a first request message to a gateway server to determine whether the information about the user device is valid;

comparing, by a second processor of the gateway server, each parameter from the plurality of parameters with a counterpart expected parameter;

determining, by the second processor, that more than a threshold number of parameters from the plurality of parameters correspond to counterpart expected parameters;

in response to determining that more than the threshold number of parameters correspond to the counterpart expected parameters, appending, by the second processor, a third header to the data packet, that indicates that the data packet has originated from an authorized device;

receiving, by the first processor, a first response message from the gateway server, wherein:

the first request message indicates that the information about the user device is valid; and

a receipt of the first response message is in response to:

a comparison between each parameter from the plurality of parameters with a counterpart expected parameter; and

a determination that more than a threshold number of parameters from the plurality of parameters correspond to counterpart expected parameters;

in response to receiving the first response message and determining that the user information corresponds to the information about the sender of the data packet, communicating, by the first processor, a second request message to an operation server, wherein:

the second request message comprises the data packet; and

the second request message further comprises instructions that cause the data packet to be transferred.

9 . The method of claim 8 , wherein a determination that the information about the user device is valid is in response to:

comparing the information about the user device with previously provided information about the user device; and

determining that the information about the user device corresponds to the previously provided information about the user device.

10 . The method of claim 9 , wherein the previously provided information about the user device comprises at least one of an internet protocol (IP) address, an identifier, or an identification of an operating system (OS) associated with the user device.

11 . The method of claim 8 , further comprising:

receiving, by an operation sever, the second request message; and

executing, by the operation server, the instructions included in the second request message.

12 . The method of claim 8 , wherein the information about the sender of the data packet included in the first header comprises at least one of an identifier associated with the sender or a timestamp of originating the request.

13 . The method of claim 8 , wherein the information about the user device included in the second header comprises at least one of an internet protocol (IP) address, an identifier, or an identification of an operating system (OS) associated with the user device.

14 . The method of claim 8 , wherein:

the first request message comprises an application programming interface (API) request; and

the first response message comprises an API response.

15 . A non-transitory computer-readable medium storing instructions that when executed by one or more processors, cause the processor to:

store user information associated with a sender of a data item;

access, by a first processor of a validation server, a data packet that indicates a request to transfer the data item, wherein:

the data packet is appended with at least a first header and a second header;

the first header comprises information about the sender of the data packet; and

the second header comprises a plurality of parameters comprising information about a user device from which the data packet has originated;

receive, by the first processor, the user information that is previously provided by the sender of the data item;

compare, by the first processor, the user information with the information about the sender of the data packet;

determine, by the first processor, that the user information corresponds to the information about the sender of the data packet;

communicate, by the first processor, a first request message to a gateway server to determine whether the information about the user device is valid;

compare, by a second processor of the gateway server, each parameter from the plurality of parameters with a counterpart expected parameter;

determine, by the second processor, that more than a threshold number of parameters from the plurality of parameters correspond to counterpart expected parameters;

in response to determining that more than the threshold number of parameters correspond to the counterpart expected parameters, append, by the second processor, a third header to the data packet, that indicates that the data packet has originated from an authorized device;

receive, by the first processor, a first response message from the gateway server, wherein:

the first request message indicates that the information about the user device is valid; and

a receipt of the first response message is in response to:

a comparison between each parameter from the plurality of parameters with a counterpart expected parameter; and

a determination that more than a threshold number of parameters from the plurality of parameters correspond to counterpart expected parameters;

in response to receiving the first response message and determining that the user information corresponds to the information about the sender of the data packet, communicate, by the first processor, a second request message to an operation server, wherein:

the second request message comprises the data packet; and

the second request message further comprises instructions that cause the data packet to be transferred.

16 . The non-transitory computer-readable medium of claim 15 , wherein a determination that the information about the user device is valid is in response to:

comparing the information about the user device with previously provided information about the user device; and

determining that the information about the user device corresponds to the previously provided information about the user device.

17 . The non-transitory computer-readable medium of claim 16 , wherein the previously provided information about the user device comprises at least one of an internet protocol (IP) address, an identifier, or an identification of an operating system (OS) associated with the user device.

18 . The non-transitory computer-readable medium of claim 15 , wherein the information about the sender of the data packet included in the first header comprises at least one of an identifier associated with the sender or a timestamp of originating the request.

19 . The non-transitory computer-readable medium of claim 15 , wherein the information about the user device included in the second header comprises at least one of an internet protocol (IP) address, an identifier, or an identification of an operating system (OS) associated with the user device.

20 . The non-transitory computer-readable medium of claim 15 , wherein:

the first request message comprises an application programming interface (API) request; and

the first response message comprises an API response.

Assignments (1)

Continuity (1)

References Cited (38)