Monitoring devices at enterprise locations using machine-learning models to protect enterprise-managed information and resources

Patent metadata

Field	Value
Publication number	US-11790638-B2
Application number	US-202217674920-A
Country	US
Kind code	B2
Filing date	Feb 18, 2022
Priority date	Jan 29, 2020
Publication date	Oct 17, 2023
Grant date	Oct 17, 2023

Abstract

Aspects of the disclosure relate to monitoring devices at enterprise locations using machine-learning models to protect enterprise-managed information and resources. In some embodiments, a computing platform may receive, from one or more data source computer systems, passive monitoring data. Based on applying a machine-learning classification model to the passive monitoring data received from the one or more data source computer systems, the computing platform may determine to trigger a data capture process at an enterprise center. In response to determining to trigger the data capture process, the computing platform may initiate an active monitoring process to capture event data at the enterprise center. Thereafter, the computing platform may generate one or more alert messages based on the event data captured at the enterprise center. Then, the computing platform may send the one or more alert messages to one or more enterprise computer systems.

First claim

What is claimed is:

1. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from one or more data source computer systems, passive monitoring data;
apply a machine-learning classification model to the passive monitoring data received from the one or more data source computer systems, wherein applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems comprises applying the machine-learning classification model to device identification data received from a first enterprise center monitoring system deployed at a first enterprise center and wherein applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems comprises applying the machine-learning classification model to facial recognition data received from the first enterprise center monitoring system deployed at the first enterprise center;
based on applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems, determine to trigger a data capture process at a first enterprise center;
in response to determining to trigger the data capture process at the first enterprise center, initiate an active monitoring process to capture event data at the first enterprise center;
generate one or more alert messages based on the event data captured at the first enterprise center; and
send, via the communication interface, to one or more enterprise computer systems, the one or more alert messages generated based on the event data captured at the first enterprise center.

2. The computing platform of claim 1 , wherein applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems further comprises applying the machine-learning classification model to internal data received from the first enterprise center monitoring system deployed at the first enterprise center and a second enterprise center monitoring system deployed at a second enterprise center different from the first enterprise center, wherein the first enterprise center is operated by a first enterprise organization, and wherein the second enterprise center is also operated by the first enterprise organization.

3. The computing platform of claim 2 , wherein applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems comprises applying the machine-learning classification model to external data received from a third enterprise center monitoring system deployed at a third enterprise center different from the first enterprise center and the second enterprise center, and wherein the third enterprise center is operated by a second enterprise organization different from the first enterprise organization.

4. The computing platform of claim 1 , wherein initiating the active monitoring process to capture the event data at the first enterprise center comprises capturing one or more publicly-transmitted device signatures, capturing publicly-transmitted device properties, and capturing event type information.

5. The computing platform of claim 1 , wherein initiating the active monitoring process to capture the event data at the first enterprise center comprises capturing image data of a device user in possession of at least one device.

6. The computing platform of claim 1 , wherein initiating the active monitoring process to capture the event data at the first enterprise center comprises capturing user-added information from at least one associate computing device.

7. The computing platform of claim 1 , wherein sending the one or more alert messages generated based on the event data captured at the first enterprise center comprises sending the one or more alert messages generated based on the event data captured at the first enterprise center to the one or more enterprise computer systems in real-time as the event data is being captured at the first enterprise center.

8. The computing platform of claim 1 , wherein sending the one or more alert messages generated based on the event data captured at the first enterprise center comprises sending the one or more alert messages generated based on the event data captured at the first enterprise center to at least one external enterprise computer system associated with a second enterprise organization different from a first enterprise organization that operates the first enterprise center.

9. A method, comprising:
at a computing platform comprising at least one processor, a communication interface, and memory:
receiving, by the at least one processor, via the communication interface, from one or more data source computer systems, passive monitoring data;
applying, by the at least one processor, a machine-learning classification model to the passive monitoring data received from the one or more data source computer systems, wherein applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems comprises applying the machine-learning classification model to device identification data received from a first enterprise center monitoring system deployed at a first enterprise center and wherein applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems comprises applying the machine-learning classification model to facial recognition data received from the first enterprise center monitoring system deployed at the first enterprise center;
based on applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems, determining, by the at least one processor, to trigger a data capture process at a first enterprise center;
in response to determining to trigger the data capture process at the first enterprise center, initiating, by the at least one processor, an active monitoring process to capture event data at the first enterprise center;
generating, by the at least one processor, one or more alert messages based on the event data captured at the first enterprise center; and
sending, by the at least one processor, via the communication interface, to one or more enterprise computer systems, the one or more alert messages generated based on the event data captured at the first enterprise center.

10. The method of claim 9 , wherein initiating the active monitoring process to capture the event data at the first enterprise center comprises capturing one or more publicly-transmitted device signatures, capturing publicly-transmitted device properties, and capturing event type information.

11. The method of claim 9 , wherein initiating the active monitoring process to capture the event data at the first enterprise center comprises capturing image data of a device user in possession of at least one device.

12. The method of claim 9 , wherein initiating the active monitoring process to capture the event data at the first enterprise center comprises capturing user-added information from at least one associate computing device.

13. The method of claim 9 , wherein sending the one or more alert messages generated based on the event data captured at the first enterprise center co

Assignees

• Bank Of America

Inventors

• Shannon Stephen T
• Alexander James
• Smith Brian J

Classifications

• G06V10/774 Primary

  Generating sets of training patterns; Bootstrap methods, e.g. bagging or boosting · CPC title

• G06F18/217

  Validation; Performance evaluation; Active pattern learning techniques · CPC title

• G06N20/00

  Machine learning · CPC title

• G06V10/7784

  based on feedback from supervisors · CPC title

• G06V40/172

  Classification, e.g. identification · CPC title