Exterior Data Deployment Hash Generation and Confirmation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for efficient and effective monitoring of transmission vulnerabilities in information security to ensure secure data exchange between entities and external systems, as existing technologies fail to adequately address security issues during data transmission.

Innovation Solution

A system that evaluates the security of information prior to transmission by applying vulnerability processing and generating a hash, which is embedded in the data to allow secure transmission outside the entity network, enabling tracking and analytics in case of a breach.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If vulnerability processing and hash embedding are applied to all communications before external transmission, then information security and breach tracking capability are improved, but device complexity and processing time increase

Engineering Contradiction:
Improveinformation securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs vulnerability processing and hash embedding in advance before communication transmission. The vulnerability assessment engine evaluates communications before they leave the entity network, and the hash is embedded into approved communications prior to transmission. This preliminary action ensures security measures are already in place before data exposure risks occur.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The vulnerability assessment engine acts as an intermediary between the communication system and external networks. It intercepts communications, performs security evaluation, and either approves or blocks transmission. The hash embedding mechanism also serves as an intermediary that adds tracking capability without altering the core communication content.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If vulnerability processing is applied to evaluate security of communications, then information security is improved, but communication deployment time and productivity are reduced

Engineering Contradiction:
Improvesecurity evaluation accuracyVSAvoidcommunication deployment speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The vulnerability assessment engine performs selective evaluation based on communication characteristics and risk levels. Not all communications require the same level of scrutiny - the system applies assessment depth proportional to the potential risk, avoiding unnecessary processing for low-risk communications while maintaining thorough evaluation for high-risk transmissions.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system dynamically adjusts vulnerability assessment parameters based on communication type, user role, and destination. Evaluation standards are modified according to the specific context, allowing faster processing for routine communications and more stringent checks for sensitive data transmissions. This parameter adaptation optimizes the balance between security and efficiency.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS10826929B2Exterior data deployment system using hash generation and confirmation triggering
Publication Date: 2020.11.03 BANK OF AMERICA CORP
  • US10826929B2 patent drawing
  • US10826929B2 patent drawing
  • US10826929B2 patent drawing

AI summary

Embodiments of the invention are directed to systems, methods, and computer program products for vulnerability assessment and hash generation for exterior data deployment. In this way, the system utilizes a vulnerability assessment to generate a permit to send approval for dissemination of data, files, or the like outside of the entity via an electronic communication. The vulnerability assessment determines a permit to send status for the communication. The system may then generate a hash for the communication and embed the hash within the data of the communication. Upon sending, the entity will only permit communications with a known hash embedded therein from being transmitted outside of the internal entity network.