Exposure Mitigation via Unified Solution Data Modeling

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional systems lack the capability to identify all existing relationships within an entity, making it difficult to mitigate intentional and unintentional exposures, as they cannot effectively link asset systems, users, and applications, and are challenging to install, configure, and manage.

Innovation Solution

A system that generates solution data models by leveraging existing data from authentication, human resources, and asset management systems to create comprehensive relationships between asset systems, users, and applications, allowing for the identification and mitigation of exposures by restricting access and monitoring communications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional systems are used to manage asset systems and users, then system simplicity is maintained, but the capability to identify all existing relationships and mitigate exposures is insufficient

Engineering Contradiction:
Improveexposure mitigation capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple data sources (authentication systems, asset management systems, human resources systems) into a unified solution data model that comprehensively maps relationships between users, assets, and applications. This merging enables complete exposure identification while managing complexity through integrated architecture.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The solution data model serves multiple functions: it identifies relationships between users and assets, detects exposures, enables mitigation actions, and provides a comprehensive view of the enterprise environment. This multi-functionality improves exposure mitigation capability without requiring separate specialized systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If comprehensive relationship identification is implemented, then exposure mitigation effectiveness is improved, but information completeness requirements increase system complexity

Engineering Contradiction:
Improveexposure identification accuracyVSAvoidrelationship information completeness
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The system proactively builds comprehensive solution data models that pre-identify all relationships between users, assets, and applications before exposures occur. By establishing complete relationship mappings in advance, the system ensures no relationship information is lost when exposures need to be detected and mitigated.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If solution data models are generated from multiple systems, then relationship identification capability is enhanced, but data integration complexity increases

Engineering Contradiction:
Improverelationship mapping capabilityVSAvoiddata integration complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces solution data models as intermediary structures that connect and integrate data from authentication systems, asset management systems, and human resources systems. These models serve as a universal language that maps relationships across different data sources, enhancing adaptability while managing integration complexity through standardized intermediate representations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS10977283B2System for mitigating intentional and unintentional exposure using solution data modelling
Publication Date: 2021.04.13 BANK OF AMERICA CORP
  • US10977283B2 patent drawing
  • US10977283B2 patent drawing
  • US10977283B2 patent drawing

AI summary

Embodiments of the present invention provide a system for mitigating intentional and unintentional exposures using solution data modelling. The system is typically configured for generating solution data models comprising a plurality of asset systems and a plurality of users, wherein each of the plurality of asset systems is associated with at least one user of the plurality of users and wherein at least a first of the plurality of asset systems is associated with at least a second of the plurality of asset systems, storing the solution data models in a model database, identifying an exposure associated with a user, accessing a solution data model associated with the user from the model database, identifying one or more relationships associated with the user from the solution data model, and implementing mitigation steps to mitigate the exposure associated with the user based on the one or more relationships.