IP Library Granted Patent US 10,812,486
Granted Patent B2
US 10,812,486 · App. 16/210,542 · Granted Oct 20, 2020

Utilizing smart data tags to track and control secure enterprise data

Inventors: Kevin A. Delson (Woodland Hills, CA); Crystal M. Sundaramoorthy (Charlotte, NC); Manu Kurian (Dallas, TX); Gopikrishna Nemalikanti (Frisco, TX); Jayachandra Varma (Irving, TX); Gilbert M. Gatchalian (Union, NJ)
Assignee: Bank of America Corporation
H04L63/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,812,486
App. No.
16/210,542
Granted
Oct 20, 2020
Kind
B2
Abstract

Aspects of the disclosure relate to utilizing smart data tags to track and control secure enterprise data. A computing platform may receive, from an enterprise user computing device, enterprise data. Subsequently, the computing platform may determine one or more tags to be applied to the enterprise data. Then, the computing platform may generate a smart data object based on the enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the enterprise data received from the enterprise user computing device. Next, the computing platform may send, to an enterprise data storage platform, the smart data object, and sending the smart data object to the enterprise data storage platform may cause the enterprise data storage platform to store the smart data object in a repository comprising a plurality of smart data objects maintained by the enterprise data storage platform.

Claims (56)

1. A computing platform, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, from an enterprise user computing device, first enterprise data;

determine one or more tags to be applied to the first enterprise data received from the enterprise user computing device;

generate a first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device

wherein generating the first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprises generating the first smart data object based on an object template defining a locator portion for storing unencrypted tag information and a payload portion for storing encrypted enterprise information; and

send, via the communication interface, to an enterprise data storage platform, the first smart data object, wherein sending the first smart data object to the enterprise data storage platform causes the enterprise data storage platform to store the first smart data object in a repository comprising a plurality of smart data objects maintained by the enterprise data storage platform.

2. The computing platform of claim 1 , wherein determining the one or more tags to be applied to the first enterprise data received from the enterprise user computing device comprises identifying at least one tag to be applied to the first enterprise data received from the enterprise user computing device based on user-defined specifications received from the enterprise user computing device.

3. The computing platform of claim 1 , wherein determining the one or more tags to be applied to the first enterprise data received from the enterprise user computing device comprises identifying at least one tag to be applied to the first enterprise data received from the enterprise user computing device based on contents of the first enterprise data received from the enterprise user computing device and one or more machine-learned tagging templates maintained by the computing platform.

4. The computing platform of claim 1 , wherein the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprise at least one tag identifying a first computer system that created the first enterprise data and at least one tag identifying a second computer system that is authorized to access the first enterprise data.

5. The computing platform of claim 1 , wherein the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprise at least one tag identifying a first network zone in which the first enterprise data was created and at least a second network zone in which the first enterprise data is authorized to be accessed.

6. The computing platform of claim 1 , wherein generating the first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprises populating the locator portion of the first smart data object with the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device.

7. The computing platform of claim 1 , wherein generating the first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprises:

encrypting the first enterprise data received from the enterprise user computing device to produce encrypted enterprise data; and

populating the payload portion of the first smart data object with the encrypted enterprise data.

8. The computing platform of claim 1 , wherein generating the first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprises generating a sequence of linked objects associated with the first enterprise data received from the enterprise user computing device.

9. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

update a first data movement pattern corresponding to the first smart data object based on sending the first smart data object to the enterprise data storage platform.

10. The computing platform of claim 9 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, from the enterprise data storage platform, a first movement notification indicating that the first smart data object is being transferred to enterprise computing infrastructure based on an access request; and

update the first data movement pattern corresponding to the first smart data object based on receiving the first movement notification indicating that the first smart data object is being transferred to the enterprise computing infrastructure based on the access request.

11. The computing platform of claim 10 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

detect an unauthorized movement event involving the first smart data object based on the first data movement pattern corresponding to the first smart data object.

12. The computing platform of claim 11 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

in response to detecting the unauthorized movement event involving the first smart data object, generate one or more alert messages comprising alert information associated with the unauthorized movement event involving the first smart data object; and

send, via the communication interface, to the enterprise user computing device, at least one alert message of the one or more alert messages.

13. The computing platform of claim 11 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

in response to detecting the unauthorized movement event involving the first smart data object, halt a transfer of the first smart data object.

14. The computing platform of claim 10 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, from the enterprise data storage platform, a second movement notification indicating that a second smart data object is being transferred from a first network location to a second network location based on a second access request, wherein the second smart data object is different from the first smart data object; and

update a second data movement pattern corresponding to the second smart data object based on receiving the second movement notification indicating that the second smart data object is being transferred from the first network location to the second network location based on the second access request.

15. The computing platform of claim 14 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

evaluate one or more tags associated with the second smart data object; and

determine that the one or more tags associated with the second smart data object are related to one or more tags associated with the first smart data object.

16. The computing platform of claim 15 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

detect an unauthorized movement event involving the second smart data object based on the first data movement pattern corresponding to the first smart data object.

17. The computing platform of claim 16 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

in response to detecting the unauthorized movement event involving the second smart data object, generate one or more alert messages comprising alert information associated with the unauthorized movement event involving the second smart data object;

send, via the communication interface, to the enterprise user computing device, at least one alert message of the one or more alert messages; and

halt a transfer of the second smart data object.

18. A method, comprising:

at a computing platform comprising at least one processor, a communication interface, and memory:

receiving, by the at least one processor, via the communication interface, from an enterprise user computing device, first enterprise data;

determining, by the at least one processor, one or more tags to be applied to the first enterprise data received from the enterprise user computing device;

generating, by the at least one processor, a first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device,

wherein generating the first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprises generating the first smart data object based on an object template defining a locator portion for storing unencrypted tag information and a payload portion for storing encrypted enterprise information; and

sending, by the at least one processor, via the communication interface, to an enterprise data storage platform, the first smart data object, wherein sending the first smart data object to the enterprise data storage platform causes the enterprise data storage platform to store the first smart data object in a repository comprising a plurality of smart data objects maintained by the enterprise data storage platform.

19. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

receive, via the communication interface, from an enterprise user computing device, first enterprise data;

determine one or more tags to be applied to the first enterprise data received from the enterprise user computing device;

generate a first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device,

wherein generating the first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprises generating the first smart data object based on an object template defining a locator portion for storing unencrypted tag information and a payload portion for storing encrypted enterprise information; and

send, via the communication interface, to an enterprise data storage platform, the first smart data object, wherein sending the first smart data object to the enterprise data storage platform causes the enterprise data storage platform to store the first smart data object in a repository comprising a plurality of smart data objects maintained by the enterprise data storage platform.

20. The method of claim 18 , wherein generating the first smart data object based on the first enterprise data received from the enterprise user computing device and the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device comprises populating the locator portion of the first smart data object with the one or more tags determined to be applied to the first enterprise data received from the enterprise user computing device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 5, 2018
From: DELSON, KEVIN A.; SUNDARAMOORTHY, CRYSTAL M.; KURIAN, MANU; NEMALIKANTI, GOPIKRISHNA; VARMA, JAYACHANDRA; GATCHALIAN, GILBERT M.
To: BANK OF AMERICA CORPORATION
Reel/Frame 047681/0564 →
Continuity (1)
Related Publication 20200186527A1 · Jun 11, 2020
Cited By (2)
US 12,425,321 US 12,556,519