Security model utilizing multi-channel data with vulnerability remediation circuitry

Patent metadata

Field	Value
Publication number	US-12452290-B2
Application number	US-202418742234-A
Country	US
Kind code	B2
Filing date	Jun 13, 2024
Priority date	Apr 8, 2020
Publication date	Oct 21, 2025
Grant date	Oct 21, 2025

Abstract

A system includes a data channel configured to provide device connectivity data associated with an entity, a data channel communication network configured to communicate the device connectivity data from the data channel, and a processing circuit communicatively coupled to the data channel via the data channel communication network. The processing circuit is structured to identify a vulnerability associated with a property of the device connectivity data, generate a scanner uniform resource locator (URL) based on the property of the device connectivity data, the scanner URL including a parametrized scanner executable structured to accept as a parameter at least a part of the property of the device connectivity data, and transmit the scanner URL to a computing system.

First claim

What is claimed is:

1. A system comprising:
a data channel structured to provide device connectivity data associated with an entity;
a data channel communication network structured to communicate the device connectivity data from the data channel; and
a processing circuit communicatively coupled to the data channel via the data channel communication network, the processing circuit structured to:
identify a vulnerability associated with a property of the device connectivity data;
generate a scanner uniform resource locator (URL) based on the property of the device connectivity data, the scanner URL comprising a parametrized scanner executable structured to accept as a parameter at least a part of the property of the device connectivity data; and
transmit the scanner URL to a computing system.

2. The system of claim 1 , wherein the processing circuit is further structured to:
receive, from the computing system, a computer-executable instruction to scan the entity, the computer-executable instruction generated based on the scanner URL;
provide, via the data channel, updated device connectivity data related to the computing system;
parse the property from the updated device connectivity data;
based on the property, determine whether the vulnerability exists on the computing system; and
generate a cybersecurity risk score for the computing system.

3. The system of claim 2 , wherein the processing circuit is further structured to:
generate a token with the scanner URL based on the property of the device connectivity data;
transmit the token to the computing system; and
validate an identity of the computing system prior to providing the updated device connectivity data based on the token.

4. The system of claim 1 , wherein the processing circuit is further structured to generate a remediation executable associated with the identified vulnerability prior to generating the scanner URL, and wherein the remediation executable comprises at least one of a patch or a parametrized set of executable instructions structured to remediate the vulnerability.

5. The system of claim 1 , wherein the scanner URL is generated in response to performing operations to determine that a cybersecurity risk score associated with the entity exceeds a predetermined threshold.

6. The system of claim 1 , wherein the scanner URL is generated in response to performing operations to determine that a generated cybersecurity risk score associated with the entity has exceeded a previously generated cybersecurity risk score.

7. The system of claim 1 , wherein the scanner URL is generated in response to performing operations to remediate the vulnerability.

8. A computer-implemented method comprising:
receiving device connectivity data associated with an entity;
identifying a vulnerability associated with a property of the device connectivity data;
generating a scanner uniform resource locator (URL) based on the property of the device connectivity data, the scanner URL comprising a parametrized scanner executable structured to accept as a parameter at least a part of the property of the device connectivity data; and
transmitting the scanner URL to a computing system.

9. The method of claim 8 , further comprising:
receiving, from the computing system, a computer-executable instruction to scan the entity, the computer-executable instruction generated based on the scanner URL;
providing updated device connectivity data related to the computing system;
parsing the property from the updated device connectivity data;
based on the property, determining whether the vulnerability exists on the computing system; and
generating a cybersecurity risk score for the computing system.

10. The method of claim 9 , further comprising:
generating a token with the scanner URL based on the property of the device connectivity data;
transmitting the token to the computing system; and
validating an identity of the computing system prior to providing the updated device connectivity data based on the token.

11. The method of claim 8 , further comprising generating a remediation executable associated with the identified vulnerability prior to generating the scanner URL, wherein the remediation executable comprises at least one of a patch or a parametrized set of executable instructions structured to remediate the vulnerability.

12. The method of claim 8 , wherein the scanner URL is generated in response to performing operations to determine that a cybersecurity risk score associated with the entity exceeds a predetermined threshold.

13. The method of claim 8 , wherein the scanner URL is generated in response to performing operations to determine that a generated cybersecurity risk score associated with the entity has exceeded a previously generated cybersecurity risk score.

14. The method of claim 8 , wherein the scanner URL is generated in response to performing operations to remediate the vulnerability.

15. Non-transitory computer-readable media having instructions stored thereon that, when executed by a processor of a first computing system, cause the first computing system to perform operations comprising:
receiving device connectivity data associated with an entity;
identifying a vulnerability associated with a property of the device connectivity data;
generating a scanner uniform resource locator (URL) based on the property of the device connectivity data, the scanner URL comprising a parametrized scanner executable structured to accept as a parameter at least a part of the property of the device connectivity data; and
transmitting the scanner URL to a second computing system.

16. The media of claim 15 , the operations further comprising:
receiving, from the second computing system, a computer-executable instruction to scan the entity, the computer-executable instruction generated based on the scanner URL;
providing updated device connectivity data related to the second computing system;
parsing the property from the updated device connectivity data;
based on the property, determining whether the vulnerability exists on the second computing system; and
generating a cybersecurity risk score for the second computing system.

17. The media of claim 16 , the operations further comprising:
generating a token with the scanner URL based on the property of the device connectivity data;
transmitting the token to the second computing system; and
validating an identity of the second computing system prior to providing the updated device connectivity data based on the token.

18. The media of claim 15 , the operations further comprising generating a remediation executable associated with the identified vulnerability prior to generating the scanner URL, wherein the remediation executable comprises at least one of a patch or a parametrized set of executable instructions structured to remediate the vulnerability.

19. The media of claim 15 , wherein the scanner URL is generated in response to remediating the vulnerability.

20. The media of claim 15 , wherein the scanner URL is generated in response to determining that a cybersecurity risk score associated with the entity exceeds a predetermined threshold.

Assignees

• Wells Fargo Bank Na

Inventors

• Cross Shane
• Fricano Daniel
• Gilheany Thomas
• Makohon Peter Anatole
• Miller Dale
• Edison Charles Steven
• Wegba Kodzo
• Bonk James

Classifications

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04L43/045

  for graphical visualisation of monitoring data · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title