30379 results about "Computer security" patented technology

An example operation may include one or more of storing a database of payment card data, conversing with a user via a chatbot within a chat window of a software application, wherein the conversing comprises receiving a query from the user about a payment card during a chat session between the user and the chatbot, executing a large language model (LLM) on the query about the payment card and the database of payment card data to generate a chatbot response, and displaying the generated chatbot response via the chatbot within the chat window of the software application during the chat session.

An example operation may include one or more of monitoring communications that occur with user devices over a shared computer network, detecting a security threat from the monitored communications, generating a software program to simulate the security threat over the shared computer network based on execution of a generative artificial intelligence (GenAI) model on a description of the security threat and a repository of source code, installing the source code for simulating the security threat on a system associated with the computer network, and executing the source code for simulating the security threat via the system.

Techniques are described for analyzing privilege escalation risks within the accounts, roles, and policies that comprise an organization's cloud provider environment. Privilege escalation refers broadly to scenarios in which a principal (e.g., a person or application) is able to gain access to resources or actions in a cloud provider environment that exceed a level intended for that principal. In the context of cloud provider environments, for example, such privilege escalation risks can result from the misconfiguration of policies and permissions attached to identities (e.g., users, groups of users, or roles) within an organization's environment. A multi-layer reasoning framework is used to build an ontology model of an organization's identities and relations among the identities, including defined access relationships, permission mutation relationships, and credential mutation relationships. The framework is further used to query the ontology model to identify particular identities associated with one or more specific types of privilege escalation risks.

Described herein are systems and methods for identifying security vulnerabilities. The systems and methods herein can utilize security vulnerability information to identify potential security threats and can utilize this information to generate an attack using a machine learning model, such as a large language model. Generated attacks can be carried out to assess impact of a security vulnerability. An output can be provided that represents the assessed impact. In some implementations, the systems and methods herein generate patches or other mitigations for security vulnerabilities, which can be tested and deployed to address security vulnerabilities.

An example operation may include one or more of receiving an identifier of a product from a digital wallet on a user device, identifying one or more payment cards stored within the digital wallet on the user device, determining benefits that will be obtained by using each of the one or more payment cards to purchase the product via execution of an LLM on the identifier of the product and a corpus of credit card documents, and displaying a chat message within a chat window on the user device with a description of the determined benefits that will be obtained.

An example operation may include one or more of storing a data store of credit card documentation, conversing with a user via a chatbot within a chat window of a software application, wherein the conversing comprises receiving natural language inputs with requests for information about a payment card, identifying a benefit obtained by the user based on the conversation, executing a large language model (LLM) on the identified benefit and the data store of the credit card documentation to generate a letter of confirmation, and generating an electronic message with the letter of confirmation attached, and transmitting the electronic message to a user device.

An example operation may include one or more of storing a database of payment card data, receiving an identifier of a product from a digital wallet on a user device, identifying one or more payment cards stored within the digital wallet on the user device, determining the benefits that will be obtained by using each of the one or more payment cards to purchase the product via execution of an LLM on the identifier of the product and the database of payment card data; and displaying a chat message within a chat window on the user device with a description of the determined benefits that will be obtained.

Machine vision devices may be configured to automatically connect to a remote management server (e.g., a “cloud”-based management server), and may offload and / or communicate images and analyses to the remote management server via wired or wireless communications. The machine vision devices may further communicate with the management server, user computing devices, and / or human machine interface devices, e.g., to provide remote access to the machine vision device, provide real-time information from the machine vision device, receive configurations / updates, provide interactive graphical user interfaces, and / or the like.

Techniques for updating certificate bundles may include receiving, at an entity associated with a virtual cloud network, a certificate bundle that includes an updated set of certificate authority (CA) certificates. The techniques may include applying a validation process to an entity certificate based on the certificate bundle, with the entity certificate having been issued to the entity prior to the entity receiving the certificate bundle. The validation process may include validating, by the entity, a certificate chain that includes the entity certificate and a CA certificate included in the updated set of CA certificates. The techniques may include, responsive to validating the certificate chain, installing the certificate bundle in a storage medium associated with the entity, and utilizing, by the entity, the certificate bundle to authenticate at least one additional entity associated with the virtual cloud network.

The present disclosure includes computer-implemented methods of guardrails for securely using large language models (LLMs). The method comprises monitoring user data flow using an application programming interface (API) and receiving an administrative policy from an administration communication interface. The method involves dynamically applying a plurality of LLM input inspectors to LLM input data. The application of the plurality of LLM input inspectors is based on the administration policy. The dynamic application of the plurality of LLM input inspectors is in sequence for latency optimization. The plurality of LLM input inspectors serve as LLM input guardrails for a plurality of secure deployed large language models (LLMs). The plurality of LLM input inspectors are configured by the administrative policy and validate the LLM input data to validated LLM input data based on the administration policy. Additionally, the method comprises dynamically applying a plurality of LLM output inspectors to LLM output data.

Systems, methods, and computer-readable media for modeling cyber resilience data using cyber resilience identities and associated metadata are disclosed. A system can include one or more processing circuits configured to receive or identify cyber resilience data, encrypt a portion of the cyber resilience data, and generate a metadata object including metadata of cyber resilience data. The processing circuits can generate a cyber resilience identity including at least a link with the metadata object, a unique identifier (UID), and a performance event dataset. The processing circuits can encapsulate the cyber resilience identity within a control structure restricting one or more updates and redemptions of the metadata object, determine at least one access data structure being compatible with the control structure, and broadcast, using the control structure, the cyber resilience identity to a ledger or distributed ledger.

Systems and methods disclosed herein include a mobile solution to enable users to perform financial transaction over a network using a mobile device. These techniques allow users to maintain a single personal account identifier or number (“PAN”) on the user's mobile device and to utilize it to access a plurality of linked financial accounts and sub-accounts. Any one of the accounts can be selected by a user on the mobile device to remotely deposit funds to that account based on an image of a financial payment instrument. The image can be obtained using image capture technology on the user's mobile device. Users can perform a financial transaction using the verified images over a network in order to conduct a remote financial transaction such as applying a deposit, a payment, or cash load to a designated account which is linked to the user's mobile account in real-time or near real-time.

A system and method for securing inter-process communications (IPCs) between generative AI and external tool servers, including intercepting IPCs having a requested operation, performing a security analysis on the IPCs for security threats, performing a permission validation for permissions for the requested operation of each IPC, and either approving or blocking the requested operation of each IPC based on the security analysis and the permission validation.

A method, apparatus, and computer-readable medium of a migration platform for analyzing a legacy database based on applying a large language model to the legacy database and legacy application code to extract legacy database values and legacy application values, determining destination database values corresponding to a destination database based on the legacy database values and the legacy application values, generating migration code for migrating the legacy database to the destination database based on code generation templates, user preferences, and code generation procedures configured to create one or more files and one or more directories based on the code generation templates, validating the migration code based on generating mock data, storing the mock data in the legacy database, and applying the migration code to the mock data to migrate the mock data to the destination database, and executing the validated migration code to perform a migration of the legacy database.

The present application provides a vulnerability remediation code identification method, comprising: acquiring commit information of open-source software, the commit information comprising a committed code snippet and text information associated with the code snippet; inputting the commit information into a first language model and performing identification to obtain function change information and test case information; inputting the function change information into a vulnerability remediation identification model to obtain a vulnerability remediation code snippet for a target vulnerability, and inputting the test case information into a vulnerability test case identification model to obtain a test case code snippet for the target vulnerability; and inputting the vulnerability remediation code snippet for the target vulnerability and the test case code snippet for the target vulnerability into a second language model and performing integration and identification to obtain an identification result. On the basis of notable characteristics in a test case for a vulnerability, the identification rate of vulnerability remediation code can be effectively increased. In this way, a user can discover potential vulnerabilities in advance, thus reducing security risks.

The system enables one to securely recycle an electronic device in a publicly accessible location. In particular, the embodiment described may be used by a mobile phone owner to submit his / her mobile phone for recycling via an electronic kiosk and receive compensation in some form. The compensation might be dispersed via cash, voucher, credit or debit card, or other magnetic or electronic transaction methods.

Disclosed here are various embodiments to evaluate a device and present a price quote to the user by detecting a presence of a device in proximity to a wireless charger. The system can utilize a wireless charger to obtain information about the device while charging the device. The information can include the make of the device. The system can guide the user to navigate the device to provide additional information such as model, memory capacity, unique identifier, and carrier associated with the device. Based on the unique identifier, the system can determine whether device has been stolen. If the device has not been stolen, the system can determine a price based on information obtained from the device and can facilitate presenting the price to the user. If the user accepts the price, the system can facilitate purchase of the device.

Systems and methods for providing zero trust access to source applications, implemented in a cloud-based system. The method includes steps of, intercepting client application information; identifying if the application is a known application based on an application catalog, and collecting known information of the application from the application catalog; sending the application information to an enforcement node of a cloud-based system in a first packet; and sending only an application Identification (ID) in subsequent packets, wherein the application ID is used for policy enforcement.

Systems, methods, and computer-readable storage media for compliance verification and validation of cyber resilience in a distributed entity or third-party network (DETPN). Some methods can include generating or identifying, by one or more processing circuits, one or more compliance parameters for a plurality of entities or third-parties on the DETPN. Some methods can include determining, by the one or more processing circuits, at least one compliance level. Some methods can include receiving or identifying, by the one or more processing circuits, environmental data of the DETPN. Some methods can include determining, by the one or more processing circuits at a second timing phase, an updated at least one compliance level for at least one of the plurality of entities or third-parties based at least on the environmental data. In some implementations, some methods can include generating and storing, by the one or more processing circuits, one or more tokens.

A method and system for linking a physical artifact to a non-fungible token (NFT) with a digital certificate and / or a digital certificate of authenticity (COA) are disclosed herein. The method and system use multiple attestations along with digital ledger technology to provide a digital certificate of authenticity for an object such as a work of art, collectible, or a non-fungible token (NFT) when the NFT is minted. An extended physical backed token (EPBT) is also generated for the physical artifact.

Provided herein are systems and methods for detecting a phishing attack. The method comprises: processing an original message to determine whether the original message is suspicious or benign, upon determining the original message is suspicious, generating multiple copies of the original message for detecting a phishing attack, where the multiple copies are varied from the original message in least one of tones, formats, and writing styles, and the multiple copies are generated to be similar to a training dataset that is utilized to train a phishing attack detection engine; and processing the multiple copies and the original message by the phishing attack detection engine to determine whether the original message is malicious or benign. One or more copies from the multiple copies that are not identified as malicious are utilized to further train the phishing attack detection engine automatically.

Systems, methods, and / or computer readable storage media for protecting data. A system can include one or more processing circuits configured to receive or identify at least one token including cyber resilience data of at least one entity and corresponding with at least one posture or compliance parameter of at least one third party The one or more processing circuits can perform a zero-knowledge proof (ZKP) on the cyber resilience data, determine at least one posture or compliance parameter of the at least one third party is satisfied based on the cyber resilience data, and / or generate at least one ZKP including at least one cryptographic commitment obfuscating the cyber resilience data. The one or more processing circuits can provide, to at least one third party computing system of the at least one third party, the at least one ZKP or indication of performance of the at least one ZKP.

Systems and methods for directing and enforcing zero trust control on requests to destination services. In various embodiments, steps include receiving a request from a user to access a destination service; directing the request to a control layer; enforcing one or more controls, via the control layer, on the request based on a configuration provided by an owner of the destination service; and providing access to the destination service to the user based on the one or more controls.

Techniques for verifying authenticity of a cosmetic product using a distributed ledger include generating a transaction including identification information for a cosmetic product indicating a manufacturer of the cosmetic product. The transaction is augmented with a cryptographic signature from the manufacturer to prove the identity of the manufacturer. Additionally, the transaction is transmitted to at least one other participant in a distributed ledger network of participants maintaining the distributed ledger. A unique identifier is embedded on the cosmetic product or on packaging for the cosmetic product that references the identification information for a cosmetic product in the distributed ledger.

In embodiments, systems and methods for configuring and deploying artificial intelligence driven transacting agents that are permitted to autonomously execute transactions on behalf of the individual or organization and configuring the transacting agent based on the agent configuration instructions and a set of predefined system prompts. The method further includes granting the transacting agent access to a digital wallet associated with the individual or organization and deploying the transacting agent to a public network, such that the transacting agent executes transactions on behalf of the individual or organization via one or more digital marketplaces using the digital wallet to which the transacting agent was granted access. In some embodiments, the transacting agent is granted access to the digital wallet using a consent token. In some embodiments, the method also includes hyper-personalizing and / or fine-tuning the agent.

Systems and methods for controlling rights related to digital knowledge are disclosed. A sample system may include an input system to receive digital knowledge from a user, a tokenization system to tokenize the digital knowledge and a ledger management system to create, manage, and store things on a distributed ledger and provide provable access to the digital knowledge. A smart contract system may create a smart contract including triggering action is and respond with a defined smart contract action on an occurrence of the triggering event. The smart contract system may also process commitments to the smart contract.

An illustrative method includes accessing, by a data platform, an alert generation policy associated with an entity that deploys containers in a cloud environment, the alert generation policy modifiable by the entity and specifying criteria for providing alerts associated with one or more vulnerabilities associated with the containers; detecting, by the data platform based on a scan of a container included in the containers, a vulnerability associated with the container; determining, by the data platform, an attribute of the vulnerability; and generating, by the data platform when the attribute meets the criteria specified in the alert generation policy, an alert associated with the vulnerability.

Various embodiments are disclosed for a services policy communication system and method. In some embodiments, a communications device stores a set of device credentials for activating the communications device for a service on a network; and sends an access request to the network, the access request including the set of device credentials.