Granted Patent B2

US 12,639,417 · App. 18/402,177 · Granted May 26, 2026

Inventors: Maharaj Mukherjee (Poughkeepsie, NY); George Anthony Albero (Charlotte, NC)

Assignee: BANK OF AMERICA CORPORATION

G06F21/46

Abstract

Claims (57)

1 . A system for passcode management, the system comprising:

a computing platform including a memory and one or more computing processor devices in communication with the memory; and

a passcode vault stored in the memory and configured to store a plurality of passcodes, each of the plurality of passcodes associated with one chosen from the group consisting of (i) a computing apparatus, (ii) a network, (iii) an application and (iii) a website or web service; and

a passcode management application stored in the memory, executable by at least one of the one or more computing processor devices and configured to:

identify a passcode stored in the passcode vault, and store passcode rules related to a structure of the passcode and an expiration of the passcode, wherein the passcode is from the plurality of passcodes,

based on the passcode rules related to the expiration of the passcode, monitor for an occurrence of a date associated with expiration of the passcode,

in response to the monitoring resulting in the occurrence of the date associated with the expiration of the passcode, automatically change, in accordance with the passcode rules related to the structure of the passcode, the passcode to a first updated passcode,

replace, in the passcode vault, the passcode with the first updated passcode,

in response to entering the first updated passcode into the passcode vault, identify and store passcode rules related to the structure of the passcode and the expiration of the passcode, wherein the passcode rules related to the structure of the passcode include minimum passcode character length, special character requirements and character case requirements and wherein the passcode rules related to the expiration of the passcode include an expiration period,

in response to authorizing access to the passcode vault for a user, execute one or more machine-learning models trained to learn login patterns for the user to identify, based on at least a computing apparatus identifier, a login pattern that defines an ordered sequence of two or more targets chosen from (i) computing devices, (ii) networks, (iii) applications, and (iv) websites or web services, and, prior to the user initiating access to the ordered sequence of targets, automatically access the ordered sequence of targets and apply, from the passcode vault, corresponding passcodes associated with the ordered sequence of targets to provide pre-access authorization for the user at the ordered sequence of targets absent further user input.

2 . The system of claim 1 , wherein the passcode management application is further configured to identify the passcode rules related to the structure of the passcode and the expiration of the passcode by (i) accessing a corresponding computing apparatus or application or (ii) crawling a corresponding website to obtain the passcode rules.

3 . The system of claim 1 , wherein the passcode management application is further configured to monitor for the occurrence of the date associated with expiration of the passcode, wherein the date associated with expiration of the passcode is a first date coinciding with an end of the expiration period or a second date occurring a predetermined number of days prior to the end of the expiration period.

4 . The system of claim 1 , further comprising a security threat monitoring application stored in the memory, executable by at least one of the one or more computing processor devices and configured to:

monitor at least one of computing devices, applications and websites have corresponding passcodes stored in the passcode vault for occurrences of security threats,

in response to the monitoring resulting in an occurrence of a security threat, invoke the passcode management application to automatically change, in accordance with the passcode rules related to the structure of the passcode, an existing passcode to a second updated passcode that is different than the existing passcode, and

replace, in the passcode vault, the existing passcode with the second updated passcode.

5 . The system of claim 1 , further comprising a passcode rules monitoring application stored in the memory, executable by at least one of the one or more computing processor devices and configured to:

monitor at least one of computing devices, applications and websites have corresponding passcodes stored in the passcode vault for changes to the passcode rules,

in response to the monitoring resulting in changes to the passcode rules, replace the currently stored passcode rules with the updated passcode rules that reflect the changes, and

conduct subsequent changes to an existing passcode in accordance with the updated passcode rules.

6 . The system of claim 1 , wherein the passcode management system is further configured to generate an alert, and initiate communication of the alert to a user, prior to or after a change in the passcode that notifies the user that a passcode change will occur or has occurred.

7 . The system of claim 6 , wherein the passcode management system is further configured to generate and initiate communication of the alert after a change in the passcode, wherein the alert includes a hyperlink that provides a passcode holder access to the passcode.

8 . A computer-implemented method for passcode management, the method being executable by one or more computing processor devices and comprising:

for each passcode stored in a passcode vault, identifying and storing passcode rules related to (i) a structure of the passcode and (ii) an expiration of the passcode, wherein the passcode vault stores one or more passcodes, and wherein the passcode is from the one or more passcodes;

based on the passcode rules related to the expiration of the passcode, for each of the one or more passcodes, monitoring for an occurrence of a date associated with expiration of the passcode;

in response to the monitoring resulting in the occurrence of the date associated with the expiration of the passcode, automatically changing, in accordance with the passcode rules related to the structure of the passcode, the passcode to a first updated passcode;

replacing, in the passcode vault, the passcode with the first updated passcode;

in response to entering the first updated passcode into the passcode vault, identifying and storing passcode rules related to the structure of the passcode and the expiration of the passcode, wherein the passcode rules related to the structure of the passcode include minimum passcode character length, special character requirements and character case requirements and wherein the passcode rules related to the expiration of the passcode include an expiration period; and

in response to authorizing access to the passcode vault for a user, executing one or more machine-learning models trained to learn login patterns for the user to identify, based on at least a computing apparatus identifier, a login pattern that defines an ordered sequence of two or more targets chosen from (i) computing devices, (ii) networks, (iii) applications, and (iv) websites or web services, and, prior to the user initiating access to the ordered sequence of targets, automatically access the ordered sequence of targets and apply, from the passcode vault, corresponding passcodes associated with the ordered sequence of targets to provide pre-access authorization for the user at the ordered sequence of targets absent further user input.

9 . The computer-implemented method of claim 8 , wherein identifying the passcode rules further comprises (i) accessing a corresponding computing apparatus or application to obtain the passcode rules or (ii) crawling a corresponding website to obtain the passcode rules.

10 . The computer-implemented method of claim 8 , wherein monitoring for the occurrence of the date associated with expiration of the passcode further comprises monitoring for at least one a first date coinciding with an end of the expiration period or a second date that is a predetermined number of days prior to the end of the expiration period.

11 . The computer-implemented method of claim 8 , further comprising:

monitoring computing devices, applications and websites have corresponding passcodes stored in the passcode vault for occurrences of security threats;

in response to the monitoring resulting in an occurrence of a security threat, automatically changing, in accordance with the passcode rules related to the structure of the passcode, an existing passcode to a second updated passcode that is different than the existing passcode; and

replacing, in the passcode vault, the existing passcode with the second updated passcode.

12 . The computer-implemented method of claim 8 , further comprising:

monitoring computing devices, applications and websites have corresponding passcodes stored in the passcode vault for changes to the passcode rules;

in response to the monitoring resulting in changes to the passcode rules, replacing the currently stored passcode rules with the updated passcode rules that reflect the changes; and

conducting subsequent changes to an existing passcode in accordance with the updated passcode rules.

13 . A computer program product comprising:

a non-transitory computer-readable medium comprising sets of codes for causing one or more computing devices to:

for each passcode stored in a passcode vault, identify and store passcode rules related to (i) a structure of the passcode and (ii) an expiration of the passcode, wherein the passcode vault stores one or more passcodes, and wherein the passcode is from the one or more passcodes;

based on the passcode rules related to the expiration of the passcode, for each of the one or more passcodes, monitor for an occurrence of a date associated with expiration of the passcode;

in response to the monitoring resulting in the occurrence of the date associated with the expiration of the passcode, automatically change, in accordance with the passcode rules related to the structure of the passcode, the passcode to a first updated passcode;

replace, in the passcode vault, the passcode with the first updated passcode;

in response to entering the first updated passcode into the passcode vault, identifying and storing passcode rules related to the structure of the passcode and the expiration of the passcode, wherein the passcode rules related to the structure of the passcode include minimum passcode character length, special character requirements and character case requirements and wherein the passcode rules related to the expiration of the passcode include an expiration period; and

in response to authorizing access to the passcode vault for a user, execute one or more machine-learning models trained to learn login patterns for the user to identify, based on at least a computing apparatus identifier, a login pattern that defines an ordered sequence of two or more targets chosen from (i) computing devices, (ii) networks, (iii) applications, and (iv) websites or web services, and, prior to the user initiating access to the ordered sequence of targets, automatically access the ordered sequence of targets and apply, from the passcode vault, corresponding passcodes associated with the ordered sequence of targets to provide pre-access authorization for the user at the ordered sequence of targets absent further user input.

14 . The computer program product of claim 13 , wherein the set of codes for causing the one or more computing devices to identify the passcode rules further cause the one or more computing devices to (i) access corresponding computing apparatus or application to obtain the passcode rules or (ii) crawl a corresponding website to obtain the passcode rules.

15 . The computer program product of claim 13 , wherein the set of codes for causing the one or more computing devices to monitor for the occurrence of the date associated with expiration of the passcode further causes the one or more computing devices to monitor for at least one a first date coinciding with an end of the expiration period or a second date that is a predetermined number of days prior to the end of the expiration period.

16 . The computer program product of claim 13 , wherein the sets of codes further comprise sets of codes for causing the one or more computing devices to:

monitor computing devices, applications and websites have corresponding passcodes stored in the passcode vault for occurrences of security threat;

in response to the monitoring resulting in an occurrence of a security threat, automatically change, in accordance with the passcode rules related to the structure of the passcode, an existing passcode to a second updated passcode that is different than the existing passcode; and

replace, in the passcode vault, the existing passcode with the second updated passcode.

17 . The computer program product of claim 13 , wherein the sets of codes further comprise sets of codes for causing the one or more computing devices to:

monitor computing devices, applications and websites have corresponding passcodes stored in the passcode vault for changes to the passcode rules;

in response to the monitoring resulting in changes to the passcode rules, replace the currently stored passcode rules with the updated passcode rules that reflect the changes; and

conduct subsequent changes to an existing passcode in accordance with the updated passcode rules.

Assignments (1)

Continuity (1)

References Cited (21)