Optimizing authentication and management of wireless devices in zero trust computing environments

Patent metadata

Field	Value
Publication number	US-11381972-B2
Application number	US-202016799275-A
Country	US
Kind code	B2
Filing date	Feb 24, 2020
Priority date	Feb 24, 2020
Publication date	Jul 5, 2022
Grant date	Jul 5, 2022

Abstract

Aspects of the disclosure relate to optimizing authentication and management of wireless devices in zero trust computing environments. In some embodiments, a computing platform may receive, from a user computing device, a connection request. Subsequently, the computing platform may generate, using an artificial-intelligence engine, a profile for the connection request. Based on the profile for the connection request generated using the artificial-intelligence engine, the computing platform may determine that the connection request is valid. In response to determining that the connection request is valid, the computing platform may establish a connection with the user computing device. Based on establishing the connection with the user computing device, the computing platform may assign an identity to the user computing device. After assigning the identity to the user computing device, the computing platform may monitor behavior of the user computing device based on the identity assigned to the user computing device.

First claim

What is claimed is:

1. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from a first user computing device, a first connection request;
generate, using an artificial-intelligence engine, a first profile for the first connection request;
based on the first profile for the first connection request generated using the artificial-intelligence engine, determine that the first connection request is valid;
in response to determining that the first connection request is valid, establish a first connection with the first user computing device;
based on establishing the first connection with the first user computing device, assign a first identity to the first user computing device; and
after assigning the first identity to the first user computing device, monitor behavior of the first user computing device based on the first identity assigned to the first user computing device.

2. The computing platform of claim 1 , wherein receiving the first connection request from the first user computing device comprises receiving the first connection request from the first user computing device via a fifth-generation (5G) wireless network.

3. The computing platform of claim 1 , wherein generating the first profile for the first connection request using the artificial-intelligence engine comprises:
capturing one or more connection parameters of the first connection request; and
scoring the one or more connection parameters of the first connection request based on a parameter model generated by the artificial-intelligence engine based on a training dataset comprising connection parameter data associated with past connection requests,
wherein scoring the one or more connection parameters of the first connection request based on the parameter model generated by the artificial-intelligence engine produces a first connection request score value.

4. The computing platform of claim 3 , wherein scoring the one or more connection parameters of the first connection request based on the parameter model generated by the artificial-intelligence engine comprises scoring a network address of the first connection request, a device identifier of the first user computing device, a screen size parameter of the first user computing device, or one or more operating parameters of the first user computing device.

5. The computing platform of claim 3 , wherein determining that the first connection request is valid comprises determining that the first connection request is valid based on the first connection request score value exceeding a threshold value computed by the artificial-intelligence engine.

6. The computing platform of claim 1 , wherein establishing the first connection with the first user computing device comprises allowing the first user computing device to access an implicit trust zone associated with at least one enterprise resource.

7. The computing platform of claim 1 , wherein assigning the first identity to the first user computing device comprises calculating an initial trust score based on device properties of the first user computing device and connection properties of the first connection.

8. The computing platform of claim 7 , wherein monitoring the behavior of the first user computing device based on the first identity assigned to the first user computing device comprises monitoring the behavior of the first user computing device based on the initial trust score.

9. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
after establishing the first connection with the first user computing device, update a machine-learning classification model used by the artificial-intelligence engine based on determining that the first connection request is valid.

10. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
identify a first behavior deviation associated with the first user computing device based on monitoring the behavior of the first user computing device;
score the first behavior deviation associated with the first user computing device, wherein scoring the first behavior deviation associated with the first user computing device produces a first deviation score value; and
execute one or more policy enforcement actions based on the first deviation score value.

11. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from a second user computing device, a second connection request;
generate, using the artificial-intelligence engine, a second profile for the second connection request;
based on the second profile for the second connection request generated using the artificial-intelligence engine, determine that the second connection request is invalid; and
in response to determining that the second connection request is invalid, deny the second connection request.

12. The computing platform of claim 11 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
after denying the second connection request, update a machine-learning classification model used by the artificial-intelligence engine based on determining that the second connection request is invalid.

13. A method, comprising:
at a computing platform comprising at least one processor, a communication interface, and memory:
receiving, by the at least one processor, via the communication interface, from a first user computing device, a first connection request;
generating, by the at least one processor, using an artificial-intelligence engine, a first profile for the first connection request;
based on the first profile for the first connection request generated using the artificial-intelligence engine, determining, by the at least one processor, that the first connection request is valid;
in response to determining that the first connection request is valid, establishing, by the at least one processor, a first connection with the first user computing device;
based on establishing the first connection with the first user computing device, assigning, by the at least one processor, a first identity to the first user computing device; and
after assigning the first identity to the first user computing device, monitoring, by the at least one processor, behavior of the first user computing device based on the first identity assigned to the first user computing device.

14. The method of claim 13 , wherein receiving the first connection request from the first user computing device comprises receiving the first connection request from the first user computing device via a fifth-generation (5G) wireless network.

15. The method of claim 13 , wherein generating the first profile for the first connection request using the artificial-intelligence engine comprises:
capturing one or more connection parameters of the first connection request; and
scoring the one or more connection parameters of the first connection request based on a parameter model generated by the artificial

Assignees

• Bank Of America

Inventors

• Kvochko Elena
• Ogrinz Michael
• Checco John C

Classifications

• H04W12/68

  Gesture-dependent or behaviour-dependent · CPC title

• H04L67/303

  Terminal profiles · CPC title

• H04L67/30

  Profiles · CPC title

• G06N20/00

  Machine learning · CPC title

• H04W12/08 Primary

  Access security · CPC title