Granted Patent B2

US 12,524,522 · App. 18/631,006 · Granted Jan 13, 2026

Inventors: Kalyan Chakravarthy Pallapolu (Hyderabad, IN); Mohan Sreenivas Gali (Tirupati, IN)

Assignee: Bank of America Corporation

G06F21/53G06F8/433G06F21/602G06F21/604G06F21/6245

Abstract

Claims (85)

1 . A system comprising:

a production environment deployed using one or more cloud instances of a cloud infrastructure, wherein the cloud infrastructure comprises a plurality of computing nodes and wherein each cloud instance comprises at least a portion of computing resources provided by one or more of the computing nodes; and

a processor communicatively coupled to the cloud infrastructure and configured to:

receive a request to generate a sandbox environment in the cloud infrastructure, wherein:

the requested sandbox environment comprises a copy of at least a portion of the production environment; and

the request comprises a request for one or more data modules to be copied from the production environment to the sandbox environment;

access a plurality of smart contracts stored in a blockchain network, wherein each of the smart contracts comprises one or more rules relating to selection of one or more approvers that are authorized to approve access of a user to data relating to one or more data modules included in the production environment;

select one or more smart contracts from the plurality of smart contracts based on complexity metrics associated with the one or more data modules;

determine, based on the selected one or more smart contracts, one or more approvers that are authorized to approve access of the user to the data relating to the one or more data modules to be copied from the production environment to the sandbox environment;

generate an approval workflow for access of the user to the data relating to the one or more data modules in the sandbox environment;

transmit the approval workflow to the determined one or more approvers;

receive an indication of approval from the one or more approvers;

in response to receiving the indication of approval, generate the sandbox environment by copying the one or more data modules from the production environment to the sandbox environment.

2 . The system of claim 1 , wherein the processor is further configured to:

for each data module:

determine whether the data module comprises data designated as sensitive data that is accessible to authorized users only; and

assign a weight to the data module based on an amount of the sensitive data in the data module, wherein the weight assigned to the data module represents at least a portion of the complexity metric associated with the sandbox environment.

3 . The system of claim 2 , wherein:

a selected smart contract from the one or more smart contracts identifies a plurality of approvers for a data module of the requested one or more data modules, wherein each approver is associated with a particular value of the weight assigned to the data module; and

the processor is further configured to select an approver associated with the data module of the requested one or more data modules, wherein the selected approver is associated with the assigned weight of the data module.

4 . The system of claim 2 , wherein the sensitive data comprises one or more of Non-Public Information (NPI), Personal Identification Information (PII) or Production Information.

5 . The system of claim 1 , wherein the processor is further configured to:

for each data module:

determine whether the data module comprises dependencies to other data modules of the production environment; and

assign a weight to the data module based on an amount of dependencies to the other data modules, wherein the weight assigned to the data module represents at least a portion of the complexity metric associated with the sandbox environment.

6 . The system of claim 5 , wherein the processor is further configured to:

when the weight equals or exceeds a threshold, select a smart contract that includes one or more rules for selecting approvers associated with multiple dependent data modules.

7 . The system of claim 1 , wherein the processor is further configured to:

generate a new block of a blockchain associated with the blockchain network, wherein the new block records the generation of the sandbox environment; and

store the new block as part of the blockchain of the blockchain network.

8 . A method for controlling access to data in a sandbox environment, comprising:

receiving a request from a user to generate the sandbox environment in a cloud infrastructure, wherein:

the requested sandbox environment comprises a copy of at least a portion of a production environment;

the production environment is deployed using one or more cloud instances of the cloud infrastructure, wherein the cloud infrastructure comprises a plurality of computing nodes and wherein each cloud instance comprises at least a portion of computing resources provided by one or more of the computing nodes; and

the request comprises a request for one or more data modules to be copied from the production environment to the sandbox environment;

accessing a plurality of smart contracts stored in a blockchain network, wherein each of the smart contracts comprises one or more rules relating to selection of one or more approvers that are authorized to approve access of the user to data relating to one or more data modules included in the production environment;

selecting one or more smart contracts from the plurality of smart contracts based on complexity metrics associated with the one or more data modules;

determining, based on the selected one or more smart contracts, one or more approvers that are authorized to approve access of the user to the data relating to the one or more data modules to be copied from the production environment to the sandbox environment;

generating an approval workflow for access of the user to the data relating to the one or more data modules in the sandbox environment;

transmitting the approval workflow to the determined one or more approvers;

receiving an indication of approval from the one or more approvers;

in response to receiving the indication of approval, generating the sandbox environment by copying the one or more data modules from the production environment to the sandbox environment.

9 . The method of claim 8 , further comprising:

for each data module:

determining whether the data module comprises data designated as sensitive data that is accessible to authorized users only; and

assigning a weight to the data module based on an amount of the sensitive data in the data module, wherein the weight assigned to the data module represents at least a portion of the complexity metric associated with the sandbox environment.

10 . The method of claim 9 , wherein:

a selected smart contract from the one or more smart contracts identifies a plurality of approvers for a data module of the requested one or more data modules, wherein each approver is associated with a particular value of the weight assigned to the data module; and

further comprising selecting an approver associated with the data module of the requested one or more data modules, wherein the selected approver is associated with the assigned weight of the data module.

11 . The method of claim 9 , wherein the sensitive data comprises one or more of Non-Public Information (NPI), Personal Identification Information (PII) or Production Information.

12 . The method of claim 8 , further comprising:

for each data module:

determining whether the data module comprises dependencies to other data modules of the production environment; and

assigning a weight to the data module based on an amount of dependencies to the other data modules, wherein the weight assigned to the data module represents at least a portion of the complexity metric associated with the sandbox environment.

13 . The method of claim 12 , further comprising:

when the weight equals or exceeds a threshold, selecting a smart contract that includes one or more rules for selecting approvers associated with multiple dependent data modules.

14 . The method of claim 8 , further comprising:

generating a new block of a blockchain associated with the blockchain network, wherein the new block records the generation of the sandbox environment; and

storing the new block as part of the blockchain of the blockchain network.

15 . A non-transitory computer-readable medium storing instructions that when executed by a processor cause the processor to:

receive a request from a user to generate a sandbox environment in a cloud infrastructure, wherein:

the requested sandbox environment comprises a copy of at least a portion of a production environment;

the production environment is deployed using one or more cloud instances of the cloud infrastructure, wherein the cloud infrastructure comprises a plurality of computing nodes and wherein each cloud instance comprises at least a portion of computing resources provided by one or more of the computing nodes; and

the request comprises a request for one or more data modules to be copied from the production environment to the sandbox environment;

access a plurality of smart contracts stored in a blockchain network, wherein each of the smart contracts comprises one or more rules relating to selection of one or more approvers that are authorized to approve access of the user to data relating to one or more data modules included in the production environment;

select one or more smart contracts from the plurality of smart contracts based on complexity metrics associated with the one or more data modules;

determine, based on the selected one or more smart contracts, one or more approvers that are authorized to approve access of the user to the data relating to the one or more data modules to be copied from the production environment to the sandbox environment;

generate an approval workflow for access of the user to the data relating to the one or more data modules in the sandbox environment;

transmit the approval workflow to the determined one or more approvers;

receive an indication of approval from the one or more approvers;

in response to receiving the indication of approval, generate the sandbox environment by copying the one or more data modules from the production environment to the sandbox environment.

16 . The non-transitory computer-readable medium of claim 15 , wherein the instructions further cause the processor to:

for each data module:

determine whether the data module comprises data designated as sensitive data that is accessible to authorized users only; and

assign a weight to the data module based on an amount of the sensitive data in the data module, wherein the weight assigned to the data module represents at least a portion of the complexity metric associated with the sandbox environment.

17 . The non-transitory computer-readable medium of claim 16 , wherein:

a selected smart contract from the one or more smart contracts identifies a plurality of approvers for a data module of the requested one or more data modules, wherein each approver is associated with a particular value of the weight assigned to the data module; and

wherein the instructions further cause the processor to select an approver associated with the data module of the requested one or more data modules, wherein the selected approver is associated with the assigned weight of the data module.

18 . The non-transitory computer-readable medium of claim 16 , wherein the sensitive data comprises one or more of Non-Public Information (NPI), Personal Identification Information (PII) or Production Information.

19 . The non-transitory computer-readable medium of claim 15 , wherein the instructions further cause the processor to:

for each data module:

determine whether the data module comprises dependencies to other data modules of the production environment; and

assign a weight to the data module based on an amount of dependencies to the other data modules, wherein the weight assigned to the data module represents at least a portion of the complexity metric associated with the sandbox environment.

20 . The non-transitory computer-readable medium of claim 19 , wherein the processor is further configured to:

when the weight equals or exceeds a threshold, select a smart contract that includes one or more rules for selecting approvers associated with multiple dependent data modules.

Assignments (1)

Continuity (1)

References Cited (31)

Cited By (1)

US 12,705,034