Multi-factor Digital Transmission Screening for Anomaly Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems face challenges in rapidly and accurately detecting anomalous digital transmissions from enterprise systems to prevent data exfiltration, particularly in large enterprises with millions of outbound communications, where manual review is impractical and existing technologies fail to maintain seamless delivery of non-anomalous emails.

Innovation Solution

Implementing a multi-factor digital transmission screening system using intra-transmission and contextual analytical models, including machine learning and NLP, to programmatically identify anomalous transmissions before external transmission, diverting them for further analysis while allowing non-anomalous communications to proceed uninterrupted.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual review is used to detect anomalous digital transmissions, then detection accuracy is improved, but productivity deteriorates due to the impracticality of reviewing millions of outbound communications

Engineering Contradiction:
Improvedetection accuracyVSAvoidthroughput
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The patent replaces manual review (mechanical human operation) with an automated machine learning-based detection system. The system uses trained models to analyze digital transmissions, extracting features and generating anomaly scores automatically, thereby maintaining high detection accuracy while achieving the throughput necessary to handle millions of communications.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The detection system performs self-service by automatically analyzing transmissions without human intervention. The machine learning models independently evaluate features, compare against learned patterns, and generate detection results, enabling the system to maintain both accuracy and productivity without requiring manual review of each transmission.

Inventive Principle:
Principle #25Self-service

2Reliability

If existing technology is used to screen digital transmissions, then data exfiltration prevention is improved, but seamless delivery of non-anomalous emails deteriorates due to disruptions in normal communication flows

Engineering Contradiction:
Improvedata exfiltration preventionVSAvoidseamless delivery
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system applies local quality by treating anomalous and non-anomalous transmissions differently. Non-anomalous transmissions pass through with minimal intervention, maintaining seamless delivery, while only potentially anomalous transmissions undergo detailed analysis and may be diverted for further review, thus preserving normal communication flows while preventing data exfiltration.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system applies partial action by not screening every transmission with the full analytical process. Instead, it uses initial filtering and anomaly scoring to identify only those transmissions requiring detailed review, applying the more resource-intensive analysis selectively to maintain both security and seamless delivery for the majority of communications.

Inventive Principle:
Principle #16Partial or excessive action

3Measurement precision

If multi-factor analytical models are applied to identify anomalous transmissions, then detection accuracy is improved, but computational resources worsen

Engineering Contradiction:
Improvedetection accuracyVSAvoidcomputational resources
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The detection process is segmented into multiple stages: initial feature extraction, anomaly scoring using trained models, threshold-based filtering, and selective detailed analysis. This segmentation allows the system to apply computational resources efficiently, performing lightweight operations on all transmissions and reserving resource-intensive analysis only for potentially anomalous cases, thereby maintaining high accuracy while managing computational load.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system performs preliminary action by pre-training machine learning models offline and pre-computing feature extraction pipelines. During runtime, these pre-prepared models and features enable rapid anomaly scoring without requiring heavy computational resources for each transmission, thus achieving high detection accuracy with reduced real-time computational demands.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20250291906A1Multi-factor digital transmission screening
Publication Date: 2025.09.18 US BANK NATIONAL ASSOCIATION
  • US20250291906A1 patent drawing
  • US20250291906A1 patent drawing
  • US20250291906A1 patent drawing

AI summary

Various embodiments are directed to apparatuses, methods, computer program products, and systems related to multi-factor digital transmission screening. In some embodiments, an outbound digital transmission originating from a monitored enterprise management system may be detected. One or more data elements associated with the outbound digital transmission may be applied to one or more anomalous transmission prediction models to generate a prediction associated with the outbound digital transmission. The one or more anomalous transmission prediction models may comprise at least a contextual analytical model configured to generate the prediction associated with the outbound digital transmission based at least in part on historical digital transmission activity data based on a plurality of past digital transmissions originating from the monitored enterprise management system. Responsive to the prediction corresponding to an anomalous transmission prediction, performance of one or more data exfiltration mitigation actions to mitigate risk of data theft may be initiated.