Systems and methods for data security model modification and anomaly detection

Patent metadata

Field	Value
Publication number	US-12572632-B2
Application number	US-202318376130-A
Country	US
Kind code	B2
Filing date	Oct 3, 2023
Priority date	Oct 3, 2023
Publication date	Mar 10, 2026
Grant date	Mar 10, 2026

Abstract

Systems, methods, and computer program products are provided herein for data security model modification and anomaly detection. An example method includes receiving a model input associated with one or more data entries of a data security model and accessing the data security model. The data security model includes a plurality of data objects including one or more data entries where each data object defines an associated model level indicative of the hierarchical position of the data object within the data security model and one or more links between the data objects that define data object interdependency parameters. The example method further includes determining one or more data objects of the data security model implicated by the model input and modifying one or more data entries of the one or more implicated data objects of the data security model in response to the model input.

First claim

What is claimed is:

1 . A system for data security model modification and anomaly detection, the system comprising:
at least one non-transitory storage device; and at least one processor coupled to the at least one non-transitory storage device, wherein the at least one processor is configured to:
receive a model input associated with one or more data entries of a data security model that define one or more functionalities;
access the data security model, wherein the data security model comprises:
a plurality of data objects comprising one or more data entries, wherein each data object defines an associated model level indicative of the hierarchical position of the data object within the data security model; and
one or more links between the data objects associated with data object interdependency parameters defining the order and structure of the data objects in the data security model;

determine one or more data objects of the data security model implicated by the model input;
determine one or more data objects linked to the data objects that are applicable to the model input;
determine one or more controls defined by the one or more linked data objects, wherein the one or more controls comprise one or more access permissions required to access to the one or more functionalities; and
modify one or more data entries of the one or more implicated data objects of the data security model in response to the model input.

2 . The system of claim 1 , wherein the processor is further configured to:
determine a first data object of the data security model implicated by the model input; and modify one or more data entries of the first data object in response to the model input.

3 . The system of claim 2 , wherein the processor is further configured to:
determine a second data object of the data security model based upon a first set of data object interdependency parameters of a first link between the first data object and the second data object; and modify one or more data entries of the second data object.

4 . The system of claim 1 , wherein the processor is further configured to modify the one or more functionalities associated with the implicated data object.

5 . The system of claim 4 , wherein the processor is further configured to:
determine that the modification of the one or more functionalities associated with the implicated data object modifies an access level of an application associated with the implicated data object; determine a user account credential attempting to access the implicated data object; and revoke access by the user account credential to the implicated data object in an instance in which an access level associated with the user account credential fails to satisfy the modified access level of the application.

6 . The system of claim 1 , wherein the model input comprises one or more data entries that are absent from the data security model, wherein the processor is further configured to:
generate a new data object that comprises the one or more data entries of the model input; define an associated model level indicative of the hierarchical position of the new data object within the data security model; and generate one or more links between the data objects of the data security model and the new data object defining data object interdependency parameters for the new data object.

7 . The system of claim 1 , wherein the model input comprises one or more data entries that are absent from the data security model, wherein the processor is further configured to:
determine one or more data objects of the data security model implicated by the absent data entries of the model input; and modify one or more data entries of the one or more implicated data objects of the data security model to include the absent data entries.

8 . The system of claim 1 , wherein the model input is associated with a first data format and the data entries of the data object forming the data security model are associated with a second data format that is different from the first data format, wherein the processor is further configured to translate the first data format to the second data format.

9 . The system of claim 1 , wherein the one or more linked data objects of the data security model are associated with the one or more functionalities, and the one or more determined data objects of the data security model are not associated with the one or more functionalities.

10 . A computer program product for data security model modification and anomaly detection, the computer program product comprising a non-transitory computer-readable medium comprising code that, when executed, causes an apparatus to:
receive a model input associated with one or more data entries of a data security model that define one or more functionalities; access the data security model, wherein the data security model comprises:
a plurality of data objects comprising one or more data entries, wherein each data object defines an associated model level indicative of the hierarchical position of the data object within the data security model; and
one or more links between the data objects associated with data object interdependency parameters defining the order and structure of the data objects in the data security model;
determine one or more data objects of the data security model implicated by the model input; determine one or more data objects linked to the data objects that are applicable to the model input; determine one or more controls defined by the one or more linked data objects, wherein the one or more controls comprise one or more access permissions required to access to the one or more functionalities; and modify one or more data entries of the one or more implicated data objects of the data security model in response to the model input.

11 . The computer program product of claim 10 , wherein the apparatus is further configured to:
determine a first data object of the data security model implicated by the model input; and modify one or more data entries of the first data object in response to the model input.

12 . The computer program product of claim 11 , wherein the apparatus is further configured to:
determine a second data object of the data security model based upon a first set of data object interdependency parameters of a first link between the first data object and the second data object; and modify one or more data entries of the second data object.

13 . The computer program product of claim 10 , wherein the apparatus is further configured to modify the one or more functionalities associated with the implicated data object.

14 . The computer program product of claim 13 , wherein the apparatus is further configured to:
determine that the modification of the one or more functionalities associated with the implicated data object modifies an access level of an application associated with the implicated data object; determine a user account credential attempting to access the implicated data object; and revoke access by the user account credential to the implicated data object in an instance in which an access level associated with the user account credential fails to satisfy the modified access level of the application.

15 . The computer program product of claim 10 , wherein the model input comprises one or more data entries that are absent from the data security model, wherein the apparatus is further configured to:
generate a new data object that comprises the one or more data entries of the model input; define an associated model level indicative of the hie

Assignees

• Bank Of America

Inventors

• Kling John Howard
• Dudley Charles Edward
• Yeung Jason T

Classifications

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• G06F21/30 Primary

  Authentication, i.e. establishing the identity or authorisation of security principals · CPC title