IP Library › Granted Patent US 12,081,647
Granted Patent B2
US 12,081,647 · App. 17/537,738 · Granted Sep 3, 2024

Using automatic homomorphic encryption in a multi-cloud environment to support translytical data computation using an elastic hybrid memory cube

Inventor: Elvis Nyamwange (Little Elm, TX)
Assignee: Bank of America Corporation
H04L9/008H04L9/0825H04L9/088H04L9/30H04L63/02H04L63/062
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,081,647
App. No.
17/537,738
Granted
Sep 3, 2024
Kind
B2
Abstract

Aspects of the disclosure relate to using automatic homomorphic encryption in a multi-cloud environment to support translytical data computation using an elastic hybrid memory cube. A computing platform may receive enterprise data from a data collection engine associated with an enterprise organization. The computing platform may inspect the enterprise data and discard enterprise data that fails to satisfy validation criteria. The computing platform may attach encryption rules to the remaining enterprise data. The computing platform may divide the enterprise data into discrete components and may continuously encrypt each component of the enterprise data using public keys. The computing platform may generate private keys that can be used to access the encrypted enterprise data, and may transmit the private keys to the enterprise organization. The computing platform, upon receipt of a private key from the enterprise organization, may determine whether the private key is authorized to access the encrypted enterprise data.

Claims (73)

1. A method comprising:

at a computing device configured to operate within a multi-cloud environment and including a hybrid memory cube processor, at least one or more additional processors, and memory:

transmitting, by a streaming engine and to a validation engine, enterprise data associated with an enterprise organization;

determining, by the validation engine, whether the enterprise data satisfies validation criteria;

based on the enterprise data satisfying the validation criteria, dividing, by a self-auto homomorphic encryption engine, the enterprise data into discrete components;

encrypting, by the self-auto homomorphic encryption engine, the discrete components of the enterprise data according to a plurality of encryption rules and using a public key of a plurality of public keys, wherein the encryption rules indicate at least one of:

a duration of a period of encryption;

a frequency of the period of encryption; or

a plurality of time intervals for generating the plurality of public keys;

transmitting, by the self-auto homomorphic encryption engine, encrypted enterprise data to a data access engine;

receiving, by the data access engine and from the enterprise organization, a request to access the encrypted enterprise data using a private key of a plurality of private keys; and

transmitting a notification, wherein the notification indicates one of:

approval of the request to access the encrypted enterprise data; or

denial of the request to access the encrypted enterprise data.

2. The method of claim 1 , further comprising transmitting, by a batch collection engine and to the validation engine, a collection of enterprise data, associated with the enterprise organization, collected over a period of time.

3. The method of claim 1 , further comprising transmitting, by an altered data collection engine and to the validation engine, the enterprise data, associated with the enterprise organization, that has been altered by the enterprise organization over a period of time.

4. The method of claim 1 , further comprising:

generating, by a logic engine, the plurality of public keys and the plurality of private keys;

transmitting, to the self-auto homomorphic encryption engine and from the logic engine, the plurality of public keys, wherein each public key is used to encrypt the discrete components of the enterprise data; and

transmitting, to the data access engine and the enterprise organization, and from the logic engine, the plurality of private keys, wherein a most recently created private key of the plurality of private keys is used to access, by the enterprise organization, the encrypted enterprise data.

5. The method of claim 4 , wherein the transmitting the notification indicating approval of the request to access the encrypted enterprise data comprises:

comparing, by the data access engine, the private key to the most recently created private key; and

determining, by the data access engine, that the private key matches the most recently created private key.

6. The method of claim 1 , further comprising maintaining, by a logic engine, a relationship between the discrete components of the enterprise data.

7. A computing platform comprising:

a hybrid memory cube processor;

at least one additional processor;

a communication interface communicatively coupled to the at least one additional processor; and

memory storing computer-readable instructions that, when executed by the hybrid memory cube processor and the at least one additional processor, cause the computing platform to:

transmit, by a streaming engine and to a validation engine, enterprise data associated with an enterprise organization;

determine, by the validation engine, whether the enterprise data satisfies validation criteria;

based on the enterprise data satisfying the validation criteria, divide, by a self-auto homomorphic encryption engine, the enterprise data into discrete components;

encrypt, by the self-auto homomorphic encryption engine, the discrete components of the enterprise data according to a plurality of encryption rules and using a public key of a plurality of public keys, wherein the encryption rules indicate at least one of:

a duration of a period of encryption;

a frequency of the period of encryption; or

a plurality of time intervals for generating the plurality of public keys;

transmit, by the self-auto homomorphic encryption engine, encrypted enterprise data to a data access engine;

receive, by the data access engine and from the enterprise organization, a request to access the encrypted enterprise data using a private key of a plurality of private keys; and

transmit a notification, wherein the notification indicates one of:

approval of the request to access the encrypted enterprise data; or

denial of the request to access the encrypted enterprise data.

8. The computing platform of claim 7 , wherein the instructions, when executed, further cause the computing platform to transmit, by a batch collection engine and to the validation engine, a collection of enterprise data, associated with the enterprise organization, collected over a period of time.

9. The computing platform of claim 7 , wherein the instructions, when executed, further cause the computing platform to transmit, by an altered data collection engine and to the validation engine, the enterprise data, associated with the enterprise organization, that has been altered by the enterprise organization over a period of time.

10. The computing platform of claim 7 , wherein the instructions, when executed, further cause the computing platform to:

generate, by a logic engine, the plurality of public keys and the plurality of private keys;

transmit, to the self-auto homomorphic encryption engine and from the logic engine, the plurality of public keys, wherein each public key is used to encrypt the discrete components of the enterprise data; and

transmit, to the data access engine and the enterprise organization, and from the logic engine, the plurality of private keys, wherein a most recently created private key of the plurality of private keys is used to access, by the enterprise organization, the encrypted enterprise data.

11. The computing platform of claim 10 , wherein the transmitting the notification indicating approval of the request to access the encrypted enterprise data further causes the computing platform to:

compare, by the data access engine, the private key to the most recently created private key; and

determine, by the data access engine, that the private key matches the most recently created private key.

12. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising a hybrid memory cube processor, at least one additional processor, memory, and a communication interface, cause the computing platform to:

transmit, by a streaming engine and to a validation engine, enterprise data associated with an enterprise organization;

determine, by the validation engine, whether the enterprise data satisfies validation criteria;

based on the enterprise data satisfying the validation criteria, divide, by a self-auto homomorphic encryption engine, the enterprise data into discrete components;

encrypt, by the self-auto homomorphic encryption engine, the discrete components of the enterprise data according to a plurality of encryption rules and using a public key of a plurality of public keys, wherein the encryption rules indicate at least one of:

a duration of a period of encryption;

a frequency of the period of encryption; or

a plurality of time intervals for generating the plurality of public keys;

transmit, by the self-auto homomorphic encryption engine, encrypted enterprise data to a data access engine;

receive, by the data access engine and from the enterprise organization, a request to access the encrypted enterprise data using a private key of a plurality of private keys; and

transmit a notification, wherein the notification indicates one of:

approval of the request to access the encrypted enterprise data; or

denial of the request to access the encrypted enterprise data.

13. The one or more non-transitory computer-readable media of claim 12 , wherein the instructions, when executed, further cause the computing platform to transmit, by a batch collection engine and to the validation engine, a collection of enterprise data, associated with the enterprise organization, collected over a period of time.

14. The one or more non-transitory computer-readable media of claim 12 , wherein the instructions, when executed, further cause the computing platform to transmit, by an altered data collection engine and to the validation engine, the enterprise data, associated with the enterprise organization, that has been altered by the enterprise organization over a period of time.

15. The one or more non-transitory computer-readable media of claim 12 , wherein the instructions, when executed, further cause the computing platform to:

generate, by a logic engine, the plurality of public keys and the plurality of private keys;

transmit, to the self-auto homomorphic encryption engine and from the logic engine, the plurality of public keys, wherein each public key is used to encrypt the discrete components of the enterprise data; and

transmit, to the data access engine and the enterprise organization, and from the logic engine, the plurality of private keys, wherein a most recently created private key of the plurality of private keys is used to access, by the enterprise organization, the encrypted enterprise data.

16. The one or more non-transitory computer-readable media of claim 15 , wherein the transmitting the notification indicating approval of the request to access the encrypted enterprise data further causes the computing platform to:

compare, by the data access engine, the private key to the most recently created private key; and

determine, by the data access engine, that the private key matches the most recently created private key.

17. The one or more non-transitory computer-readable media of claim 12 , wherein the instructions, when executed, further cause the computing platform to maintain, by a logic engine, a relationship between the discrete components of the enterprise data.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 30, 2021
From: NYAMWANGE, ELVIS
To: BANK OF AMERICA CORPORATION
Reel/Frame 058240/0333 →
Continuity (1)
Related Publication 20230171083A1 · Jun 1, 2023