Granted Patent B2

US 12,395,505 · App. 18/615,983 · Granted Aug 19, 2025

Inventor: Jonathan J. Thompson (Carmel, IN)

Assignee: AS0001, Inc.

H04L63/1416H04L63/1425H04L63/1433H04L63/1441H04L63/20

Abstract

Claims (54)

1. A data protection system for protecting data, the data protection system comprising:

one or more processing circuits comprising memory and processors configured to:

receive a portion of entity data from a user device via an application programming interface (API), wherein the portion of the entity data is received based on a drag and drop file tokenization feature;

tokenize and extract content of the portion of the entity data into a plurality of tokens;

generate a unique identifier for each of the plurality of tokens;

store a mapping between the unique identifier and each of the plurality of tokens; and

populate, from each of the plurality of tokens, a plurality of fields of a data object associated with a security posture based on the extracted content of the portion of the entity data stored in each of the plurality of tokens.

2. The data protection system of claim 1 , wherein the extracted content is sensitive information, and wherein the plurality of fields correspond to a third party application.

3. The data protection system of claim 1 , wherein the drag and drop file tokenization feature is activated on the user device based on a gesture.

4. The data protection system of claim 1 , wherein the one or more processing circuits are further configured to:

verify accuracy of the populated plurality of fields.

5. The data protection system of claim 1 , wherein the one or more processing circuits are further configured to:

determine the security posture based on the entity data; and

tokenize and broadcast the security posture to a distributed ledger.

6. The data protection system of claim 5 , wherein the one or more processing circuits are further configured to:

determine, utilizing one or more protection parameters, at least one cybersecurity protection plan corresponding to a new cybersecurity attribute to protect an entity;

provide the at least one cybersecurity protection plan to an entity computing system of the entity; and

model the security posture and a plurality of security objectives to generate a set of cybersecurity attributes of the entity.

7. The data protection system of claim 6 , wherein determining the security posture further comprises:

determining a plurality of data types based on analyzing data storage systems of the entity;

determining at least one cybersecurity threat based on the entity data; and

identifying entity assets based on accessing at least one of a plurality of data channels communicatively coupled to at least one of the entity assets;

wherein the security posture corresponds to an assessment of an overall cybersecurity risk profile of the entity.

8. The data protection system of claim 7 , wherein the security posture comprises a current entity state and a current entity index, wherein the current entity state corresponds to current cybersecurity conditions of the entity, and wherein the current entity index corresponds to references or pointers to the entity assets of the entity.

9. A method for protecting data, comprising:

receiving, by one or more processing circuits, a portion of entity data from a user device via an application programming interface (API), wherein the portion of the entity data is received based on a drag and drop file tokenization feature;

tokenizing and extracting, by the one or more processing circuits, content of the portion of the entity data into a plurality of tokens;

generating, by the one or more processing circuits, a unique identifier for each of the plurality of tokens;

storing, by the one or more processing circuits, a mapping between the unique identifier and each of the plurality of tokens; and

populating, by the one or more processing circuits from each of the plurality of tokens, a plurality of fields of a data object associated with a security posture based on the extracted content of the portion of the entity data stored in each of the plurality of tokens.

10. The method of claim 9 , wherein the extracted content is sensitive information, and wherein the plurality of fields correspond to a third party application.

11. The method of claim 9 , wherein the drag and drop file tokenization feature is activated on the user device based on a gesture.

12. The method of claim 9 , further comprising:

verifying, by the one or more processing circuits, accuracy of the populated plurality of fields.

13. The method of claim 9 , further comprising:

determining, by the one or more processing circuits, the security posture based on the entity data; and

tokenizing and broadcasting, by the one or more processing circuits, the security posture to a distributed ledger.

14. The method of claim 13 , further comprising:

determining, by the one or more processing circuits utilizing one or more protection parameters, at least one cybersecurity protection plan corresponding to a new cybersecurity attribute to protect an entity;

providing, by the one or more processing circuits, the at least one cybersecurity protection plan to an entity computing system of the entity; and

modeling, by the one or more processing circuits, the security posture and a plurality of security objectives to generate a set of cybersecurity attributes of the entity.

15. The method of claim 14 , wherein determining the security posture further comprises:

determining, by the one or more processing circuits, a plurality of data types based on analyzing data storage systems of the entity;

determining, by the one or more processing circuits, at least one cybersecurity threat based on the entity data; and

identifying, by the one or more processing circuits, entity assets based on accessing at least one of a plurality of data channels communicatively coupled to at least one of the entity assets;

wherein the security posture corresponds to an assessment of an overall cybersecurity risk profile of the entity.

16. The method of claim 15 , wherein the security posture comprises a current entity state and a current entity index, wherein the current entity state corresponds to current cybersecurity conditions of the entity, and wherein the current entity index corresponds to references or pointers to the entity assets of the entity.

17. A non-transitory computer readable medium (CRM) comprising one or more instructions stored thereon and executable by one or more processors to:

receive a portion of entity data from a user device via an application programming interface (API), wherein the portion of the entity data is received based on a drag and drop file tokenization feature;

tokenize and extract content of the portion of the entity data into a plurality of tokens;

generate a unique identifier for each of the plurality of tokens;

store a mapping between the unique identifier and each of the plurality of tokens; and

populate, from each of the plurality of tokens, a plurality of fields of a data object associated with a security posture based on the extracted content of the portion of the entity data stored in each of the plurality of tokens.

18. The non-transitory CRM of claim 17 , wherein the extracted content is sensitive information, and wherein the plurality of fields correspond to a third party application, and wherein the drag and drop file tokenization feature is activated on the user device based on a gesture.

Assignments (1)

Continuity (4)

References Cited (172)