IP Library › Granted Patent US 11,263,109
Granted Patent B2
US 11,263,109 · App. 16/850,485 · Granted Mar 1, 2022

Virtual environment system for validating executable data using accelerated time-based process execution

Inventors: George Albero (Charlotte, NC); Emanuel David Guller (Charlotte, NC); Edward Lee Traywick (Bellbrook, OH); Scot Lincoln Daniels (Clover, SC); Rick Wayne Sumrall (Charlotte, NC); Elijah Clark (Charlotte, NC); Konata Stinson (Charlotte, NC); Jake Michael Yara (Mint Hill, NC)
Assignee: BANK OF AMERICA CORPORATION
G06F11/3452G06F8/40G06F11/301G06F11/3075G06F21/51G06F21/602G06F21/6218
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,263,109
App. No.
16/850,485
Granted
Mar 1, 2022
Kind
B2
Abstract

A virtual environment system for validating using accelerated time-based process execution is provided. In particular, the system may generate a virtual environment using a virtual environment device, where the virtual environment is logically and/or physically separated from other devices and/or environments within the network. The system may then open a specified set of executable data within the virtual environment and perform a set of commands or processes with respect to the executable data. The set of commands or processes may be executed on an accelerated-time basis such that processes that would be executed on a longer timeline may be executed at a greater speed (e.g., a shorter timeline). In this way, the system may securely detect the presence of latent defects or issues that may arise from executing the code on a long-term basis.

Claims (63)

1. A system for secure execution of program code within a virtual environment using accelerated time-based process execution, the system comprising:

a memory device with computer-readable program code stored thereon;

a communication device; and

a processing device operatively coupled to the memory device and the communication device, wherein the processing device is configured to execute the computer-readable program code to:

import a set of executable code into a virtual environment instance;

execute, within the virtual environment instance, one or more processes on the set of executable code, wherein the one or more processes are executed on an accelerated time basis;

based on executing the one or more processes, perform validation of the set of executable code;

process the set of executable code using a data transformation algorithm to generate a data transformation output;

store the data transformation output in an authorization database;

receive a request from a user to execute a second set of executable code;

process the second set of executable code using the data transformation algorithm to generate a second data transformation output;

compare the second data transformation output to one or more entries in the authorization database; and

validate the second data transformation output based on comparing the second data transformation output with the one or more entries in the authorization database.

2. The system according to claim 1 , wherein executing the one or more processes on the accelerated time basis comprises:

determining an expected timeframe of an undetected issue within the set of executable code; and

adjust a timeframe of executing the one or more processes based on the expected timeframe of the undetected issue.

3. The system according to claim 2 , wherein the undetected issue is a logic bomb.

4. The system according to claim 1 , wherein the authorization database is an authorized hash database, wherein comparing the second data transformation output to one or more entries in the authorization database comprises:

detecting a match between the second data transformation output and a cryptographic hash value within the one or more entries in the authorization database; and

based on detecting the match, authorizing execution of the second set of executable code on a target computing system.

5. The system according to claim 4 , wherein the computer-readable program code further causes the processing device to display a positive indicator to a user via a user interface, wherein the positive indicator indicates that the second set of executable code is authorized to be executed on the target computing system.

6. The system according to claim 1 , wherein the authorization database is an authorized hash database, wherein comparing the second data transformation output to one or more entries in the authorization database comprises:

determining that the second data transformation output does not match any of the one or more entries in the authorization database; and

automatically blocking execution of the second set of executable code on a target computing system.

7. A computer program product for secure execution of program code within a virtual environment using accelerated time-based process execution, the computer program product comprising at least one non-transitory computer readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising executable code portions for:

importing a set of executable code into a virtual environment instance;

executing, within the virtual environment instance, one or more processes on the set of executable code, wherein the one or more processes are executed on an accelerated time basis;

based on executing the one or more processes, performing validation of the set of executable code;

processing the set of executable code using a data transformation algorithm to generate a data transformation output;

storing the data transformation output in an authorization database;

receiving a request from a user to execute a second set of executable code;

processing the second set of executable code using the data transformation algorithm to generate a second data transformation output;

comparing the second data transformation output to one or more entries in the authorization database; and

validating the second data transformation output based on comparing the second data transformation output with the one or more entries in the authorization database.

8. The computer program product according to claim 7 , wherein executing the one or more processes on the accelerated time basis comprises:

determining an expected timeframe of an undetected issue within the set of executable code; and

adjust a timeframe of executing the one or more processes based on the expected timeframe of the undetected issue.

9. The computer program product according to claim 8 , wherein the undetected issue is a logic bomb.

10. The computer program product according to claim 7 , wherein the authorization database is an authorized hash database, wherein comparing the second data transformation output to one or more entries in the authorization database comprises:

detecting a match between the second data transformation output and a cryptographic hash value within the one or more entries in the authorization database; and

based on detecting the match, authorizing execution of the second set of executable code on a target computing system.

11. The computer program product according to claim 10 , the computer-readable program code portions further comprising an executable code portion for displaying a positive indicator to a user via a user interface, wherein the positive indicator indicates that the second set of executable code is authorized to be executed on the target computing system.

12. A computer-implemented method for secure execution of program code within a virtual environment using accelerated time-based process execution, wherein the computer-implemented method comprises:

importing a set of executable code into a virtual environment instance;

executing, within the virtual environment instance, one or more processes on the set of executable code, wherein the one or more processes are executed on an accelerated time basis;

based on executing the one or more processes, performing validation of the set of executable code;

processing the set of executable code using a data transformation algorithm to generate a data transformation output; and

storing the data transformation output in an authorization databases;

receiving a request from a user to execute a second set of executable code;

processing the second set of executable code using the data transformation algorithm to generate a second data transformation output;

comparing the second data transformation output to one or more entries in the authorization database; and

validating the second data transformation output based on comparing the second data transformation output with the one or more entries in the authorization database.

13. The computer-implemented method according to claim 12 , wherein executing the one or more processes on the accelerated time basis comprises:

determining an expected timeframe of an undetected issue within the set of executable code; and

adjust a timeframe of executing the one or more processes based on the expected timeframe of the undetected issue.

14. The computer-implemented method according to claim 13 , wherein the undetected issue is a logic bomb.

15. The computer-implemented method according to claim 12 , wherein the authorization database is an authorized hash database, wherein comparing the second data transformation output to one or more entries in the authorization database comprises:

detecting a match between the second data transformation output and a cryptographic hash value within the one or more entries in the authorization database; and

based on detecting the match, authorizing execution of the second set of executable code on a target computing system.

16. The computer-implemented method according to claim 15 , the method further comprising displaying a positive indicator to a user via a user interface, wherein the positive indicator indicates that the second set of executable code is authorized to be executed on the target computing system.

17. The computer-implemented method according to claim 12 , wherein the authorization database is an authorized hash database, wherein comparing the second data transformation output to one or more entries in the authorization database comprises:

determining that the second data transformation output does not match any of the one or more entries in the authorization database; and

automatically blocking execution of the second set of executable code on a target computing system.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 16, 2020
From: ALBERO, GEORGE; CLARK, ELIJAH; GULLER, EMANUEL DAVID; SUMRALL, RICK WAYNE; TRAYWICK, EDWARD LEE; YARA, JAKE MICHAEL; DANIELS, SCOT LINCOLN; STINSON, KONATA
To: BANK OF AMERICA CORPORATION
Reel/Frame 052424/0370 →
Continuity (1)
Related Publication 20210326234A1 · Oct 21, 2021