System for tracking external data transmissions via inventory and registration

• US 10,021,183 B2
• Filed: 05/09/2016
• Issued: 07/10/2018
• Est. Priority Date: 05/09/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Boston, Mitchell T., Roscoe, Paul G., Melin, Renee M., Kurian, Manu Jacob, Vrittamani, Saritha
• Primary Examiner(s): Tiv, Backhean
• Application Number:
  US15/149,705
• Publication Number:
  US 20170324811A1
• Time in Patent Office: 792 Days
• Field of Search: None
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes

Abstract

A platform for tracking external data transmissions through implementation of a data transmission inventory and registration process. The data transmission inventory provides for collection of data transmission logs and data transmission schedules from various sources throughout an enterprise. The information from the data transmission inventory is used to determine whether a pending, ongoing or completed data transmission is currently registered and, if so, whether the registration is currently valid. If a determination is made that no registration exits or the current registration is invalid, a validation/registration process ensues, whereby the data, the internal source and the external target are validated according to requisite requirements of the corresponding transmission. If validated, the data channel is deemed valid and is registered. If the data, internal source or external source are found to be invalid entries in the data transmission log or schedule are tagged/flagged indicating the invalidity and cause of the invalidity.

Claims

1. A system for tracking external data transmissions within an enterprise, the system comprising:

a data transmission registrar configured to receive, in computing device storage, a plurality of data transmission registrations, wherein each registration includes an associated registration number and indicates validation of (i) data to be transmitted, (ii) an internal source from which said data is sent, and (iii) an external target to which said data is sent, wherein validation is defined by meeting predetermined external data transmission requirements;

a data transmission inventory configured to receive, in computing device storage, one or more of data transmission logs and data transmission schedules from a plurality of data transmission sources, wherein the data transmission logs and data transmission schedules identify external data transmissions and include, for each data transmission, identification of data transmitted, an internal source and an external target;

a computing platform including a memory and at least one processor in communication with the memory; and

a data transmission tracking module stored in the memory, executable by the processor and configured to;

access the data transmission inventory to retrieve at least one of one or more data transmission logs or one or more data transmission schedules,

determine, for each of the external data transmissions in the one or data transmissions logs or one or more data transmission schedules, whether the external data transmission is a registered data transmission,

determine, for each registered data transmission, whether the registered data transmission is a valid registered data transmission,

in response to determining that the external data transmission is not (a) a registered data transmission or (b) a valid registered data transmission, validate (i) data in the transmission, (ii) an internal source from which said data is transmitted, and (iii) an external target to which said data is transmitted, and

in response to validating (i) the data in the transmission, (ii) the internal source, and (iii) the external target, generating a corresponding data transmission registration including an associated registration number and storing said data transmission registration in the data transmission registrar.

2. The system of claim 1, wherein the data transmission tracking module is further configured to, in response to failing to validate at least one of (i) the data in the transmission, (ii) the internal source, or (iii) the external target, tag the data transmission to indicate at least one of invalid data, invalid source or invalid target.

3. The system of claim 2, wherein the data transmission tracking module is further configured to generate and communicate an alert that notifies one or more designated entities within the enterprise of the failure to validate at least one of (i) the data in the transmission, (ii) the internal source, or (iii) the external target.

4. The system of claim 1, wherein the data transmission tracking module is further configured to, in response to determining that the data transmission is not a registered data transmission or a valid registered data transmission, generate and communicate an alert that notifies one or more designated entities within the enterprise that the data transmission is not registered or is not validly registered.

5. The system of claim 1, wherein the data transmission tracking module is further configured to validate the data in the transmission, wherein validating the data includes at least one of verifying that the data has not been previously sent to the target, verifying that the data has not been previously received from the source, verifying that the data does not exceed a predetermined data size threshold and verifying that the data meets predetermined classification rules.

6. The system of claim 1, wherein the data transmission tracking module is further configured to validate the internal source, wherein validating the internal source includes at least one of verifying that the internal source has current and required security features, verifying that the internal source is approved for data transmissions, and verifying that the internal source is not Internet-facing.

7. The system of claim 1, wherein the data transmission tracking module is further configured to validate the external target, wherein validating the external target includes at least one of verifying that an Internet Protocol (IP) address associated with the external target is approved for receiving data transmissions, verifying that a recipient or application associated with the IP address is approved for receiving data transmissions and verifying that the recipient or application is an approved recipient or application based on the data-type.

8. The system of claim 1, wherein the data transmission logs indicate external data transmissions including at least one of previously completed external data transmissions and currently ongoing external data transmissions.

9. The system of claim 8, wherein the data transmission tracking module is further configured to, in response to determining that the external data transmission is not (a) a registered data transmission or (b) a valid registered data transmission, suspend transmission of a currently ongoing data transmission until the data transmission is validated.

10. The system of claim 8, wherein the data transmission tracking module is further configured to, in response to determining that the external data transmission is not valid, cancel transmission of a currently ongoing data transmission and generate and communicate an alert that notifies one or more designated entities within the enterprise of invalid data transmission and the cancellation of the transmission.

11. The system of claim 1, further comprising a data transmission permission module stored in the memory, executable by at least one processor and configured to verify that a data transmission is a registered data transmission prior to permitting the transmission of data.

12. The system of claim 11, wherein the data transmission tracking module is further configured to verify that the data transmission has been permitted for data transmission by the data transmission permission module.

16. The method of claim 1, wherein the data transmission tracking module is further configured to, in response to determining that the data transmission is not a registered data transmission or a valid registered data transmission, generating and initiating communication of, by a computing device processor, an alert that notifies one or more designated entities within the enterprise that the data transmission is not registered or is not validly registered.

17. The method of claim 1, wherein validating the (i) data in the data transmission, (ii) internal source, and (iii) external target further comprises validating, by the computing device processor, (i) the data by at least one of verifying that the data has not been previously sent to the target, verifying that the data has not been previously received from the source, verifying that the data does not exceed a predetermined data size threshold and verifying that the data meets predetermined classification rules, (ii) the internal source by at least one of verifying that the internal source has current and required security features, verifying that the internal source is approved for data transmissions, and verifying that the internal source is not Internet-facing, and (iii) the external target by verifying that an Internet Protocol (IP) address associated with the external target is approved for receiving data transmissions, verifying that a recipient or application associated with the IP address is approved for receiving data transmissions and verifying that the recipient or application is an approved recipient or application based on the data-type.

13. A method for tracking external data transmissions in an enterprise, the method comprising:

accessing, by a computing device processor, a data transmission inventory to retrieve at least one of one or more data transmission logs or one or more data transmission schedules stored in the inventory, wherein the data transmission logs and data transmission schedules identify a plurality of external data transmission and include, for each data transmission, identification of data, an internal source and an external data transmission;

determining, by a computing device processors, for each of the external data transmissions in the one or data transmissions logs or the data transmission schedules, whether the external data transmission is a registered data transmission;

determining, by a computing device processor, for each registered data transmission, whether the registered data transmission is a valid registered data transmission;

in response to determining that the external data transmission is not (a) a registered data transmission or (b) a valid registered data transmission, validating, by a computing device processor, (i) data in the transmission, (ii) an internal source from which said data is transmitted, and (iii) an external target to which said data is transmitted; and

in response to validating the (i) data in the data transmission, (ii) internal source, and (iii) external target, generating, by a computing device processor, a corresponding data transmission registration including an associated registration identifier and storing said data transmission registration in a data transmission registrar, wherein the data transmission registrar stores a plurality of data transmission registrations, wherein each registration includes an associated registration identifier and indicates validation of (i) data to be transmitted, (ii) an internal source from which said data is sent, and (iii) an external target to which said data is sent, wherein validation is defined by meeting predetermined external data transmission requirements.

14. The method of claim 13, further comprising, in response to failing to validate at least one of (i) the data in the transmission, (ii) the internal source, or (iii) the external target, tagging the data transmission to indicate at least one of invalid data, invalid source or invalid target.

15. The method of claim 14, further configured to generate and communicate an alert that notifies one or more designated entities within the enterprise of the failure to validate at least one of (i) the data in the transmission, (ii) the internal source, or (iii) the external target.

18. An apparatus for tracking external data transmissions, the apparatus comprising:

a computing platform including a memory and at least one processor in communication with the memory; and

a data transmission tracking module stored in the memory, executable by the processor and configured to;

access a data transmission inventory to retrieve at least one of one or more data transmission logs or one or more data transmission schedules stored in the inventory, wherein the data transmission logs and data transmission schedules identify a plurality of external data transmission and include, for each data transmission, identification of data, an internal source and an external data transmission,

determine, for each of the external data transmissions in the one or data transmissions logs or data transmission schedules, whether the external data transmission is a registered data transmission,

determine, for each registered data transmission, whether the registered data transmission is a valid registered data transmission,

in response to determining that the external data transmission is not (a) a registered data transmission or (b) a valid registered data transmission, validate (i) data in the transmission, (ii) an internal source from which said data is transmitted, and (iii) an external target to which said data is transmitted, and

in response to validating the (i) data in the data transmission, (ii) internal source, and (iii) external target, generate a corresponding data transmission registration including an associated registration identifier and store said data transmission registration in a data transmission registrar, wherein the data transmission registrar stores a plurality of data transmission registrations, wherein each registration includes an associated registration identifier and indicates validation of (i) data to be transmitted, (ii) an internal source from which said data is sent, and (iii) an external target to which said data is sent, wherein validation is defined by meeting predetermined external data transmission requirements.

19. The apparatus of claim 18, wherein the data transmission tracking module is further configured to, in response to failing to validate at least one of (i) the data in the transmission, (ii) the internal source, or (iii) the external target, tag the data transmission to indicate at least one of invalid data, invalid source or invalid target.

20. The apparatus of claim 19, wherein the data transmission tracking module is further configured to generate and communicate an alert that notifies one or more designated entities within the enterprise of the failure to validate at least one of (i) the data in the transmission, (ii) the internal source, or (iii) the external target.