Facilitating network security analysis using virtual reality display devices

• US 10,481,862 B2
• Filed: 12/02/2016
• Issued: 11/19/2019
• Est. Priority Date: 12/02/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Ogrinz, Michael, Goebel, Darryl C., Jacobson, William P.
• Primary Examiner(s): Doan, Huan V
• Application Number:
  US15/367,896
• Publication Number:
  US 20180159851A1
• Time in Patent Office: 1,082 Days
• CPC Class Codes: G06F 3/167 Audio in a user interface, e.g. using voice commands for navigating, audio feedback
• CPC Class Codes: G06V 20/635 Overlay text, e.g. embedded captions in a TV program
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

A virtual reality system including a virtual reality user device with a display that presents a virtual reality environment to a user, an electronic transfer engine, and a virtual overlay engine. The virtual reality user devices receives network component data and security data for a network components. The virtual reality user devices generates overlays the security data onto the network component data to generate a virtual overlay.

Claims

1. A virtual reality system comprising:

one or more databases comprising;

network component data for a plurality of network components, the network component data comprising;

network interconnections of the plurality of network components;

a location of each of the plurality of network components;

one or more data types associated with each of the plurality of network components; and

security data for each of the plurality of network components, the security data comprising;

software patch update information indicate a most recent software patch update for a network component;

demilitarized zone information indicating whether the network component is in a demilitarized zone;

firewall information indicating a status of a firewall and a firewall type; and

antivirus information indicating a status of antivirus software and an antivirus software type; and

a virtual reality user device for a user comprising;

a display configured to present a virtual reality environment to the user;

one or more processors operably coupled to the display;

an electronic transfer engine configured to receive the network component data and the security data; and

a virtual overlay engine configured to;

identify a first network component of a plurality of network components;

present the first network component in the virtual reality environment, the presentation indicating the network interconnections of the first network component; and

overlay the security data for the first network component onto the first network component in the virtual reality environment.

2. The system of claim 1, further comprising:

a memory configured to store;

verification data used to authenticate one or more users; and

user tokens uniquely identifying each of the one or more users;

wherein the electronic transfer engine further is configured to;

receive a user input identifying the user;

compare the user input to the verification data to authenticate the user;

identify a user token for the user in response to authenticating the user;

send the user token to a remote database, wherein the user token requests the network component data and the security data; and

receive the network component data and the security data in response to sending the user token.

3. The system of claim 1, wherein:

the network component data further comprises data indicating a name and content of a plurality of data files in each of the plurality of network components; and

the virtual overlay engine is further configured to present a first data file within the first network component in the virtual reality environment.

4. The system of claim 3, further comprising:

the virtual overlay engine further configured to present a virtual trashcan in the virtual reality environment;

a gesture recognition engine configured to receive a gesture from the user indicating to place the first data file in the virtual trashcan; and

the electronic transfer engine is further configured to communicate a command to delete a digital file associated with the first data file.

5. The system of claim 2, wherein:

the user input is a biometric signal; and

the virtual reality user device comprises a biometric engine configured to compare the biometric signal to the verification data to authenticate the user.

6. The system of claim 5, wherein the biometric signal is one of a retinal scan signal and a fingerprint scan signal.

7. The system of claim 1, wherein:

the virtual reality user device comprises a voice recognition engine configured to identify voice commands performed by the user; and

identifying the first network component identifying a voice command performed by the user to indicate the first network component.

8. A virtual reality overlaying method comprising:

receiving network component data for a plurality of network components, the network component data comprising;

network interconnections of the plurality of network components;

a location of each of the plurality of network components; and

one or more data types associated with each of the plurality of network components;

receiving security data for each of the plurality of network components, the security data comprising;

software patch update information indicating a most recent software patch update for a network component;

demilitarized zone information indicating whether the network component is in a demilitarized zone;

firewall information indicating a status of a firewall and a Firewall type; and

antivirus information indicating a status of antivirus software and an antivirus software type;

identifying a first network component of a plurality of network components;

presenting the first network component in a virtual reality environment to a user, the presentation indicating the network interconnections of the first network component; and

overlaying the security data for the first network component onto the first network component in the virtual reality environment.

9. The method of claim 8, further comprising:

receiving a user input identifying the user;

comparing the user input to verification data to authenticate the user;

identifying a user token for the user in response to authenticating the user;

sending the user token to a remote database, wherein the user token requests the network component data and the security data; and

receiving the network component data and the security data in response to sending the user token.

10. The method of claim 8, wherein the network component data further comprises data indicating a name and content of a plurality of data files in each of the plurality of network components and the method further comprising presenting a first data file within the first network component in the virtual reality environment.

11. The method of claim 10, further comprising:

presenting a virtual trashcan in the virtual reality environment;

receiving a gesture from the user indicating to place the first data file in the virtual trashcan; and

communicating a command to delete a digital file associated with the first data file.

12. The method of claim 9, wherein the user input is a biometric signal and further comprising comparing the biometric signal to the verification data to authenticate the user.

13. The method of claim 12, wherein the biometric signal is one of a retinal scan signal and a fingerprint scan signal.

14. The method of claim 8, further comprising:

identifying voice commands performed by the user; and

identifying the first network component identifying a voice command performed by the user to indicate the first network component.

15. A virtual reality user device for a user comprising:

a display configured to present a virtual reality environment to the user;

one or more processors operably coupled to the display;

an electronic transfer engine configured to receive data comprising;

network component data for a plurality of network components comprising;

network interconnections of each of the plurality of network components;

a location of each of the plurality of network components;

one or more data types associated with each of the plurality of network components; and

security data for each of the plurality of network components comprising;

software patch update information indicate a most recent software patch update for a network component;

demilitarized zone information indicating whether the network component is in a demilitarized zone;

firewall information indicating a status of a firewall and a firewall type; and

antivirus information indicating a status of antivirus software and an antivirus software type; and

a virtual overlay engine configured to;

identify a first network component of a plurality of network components;

present the first network component in the virtual reality environment, the presentation indicating the network interconnections of the first network component; and

overlay the security data for the first network component onto the first network component in the virtual reality environment.

16. The apparatus of claim 15, further comprising:

a memory configured to store;

verification data used to authenticate one or more users; and

user tokens uniquely identifying each of the one or more users; and

wherein the electronic transfer engine further is configured to;

receive a user input identifying the user;

compare the user input to the verification data to authenticate the user;

identify a user token for the user in response to authenticating the user;

send the user token to a remote database, wherein the user token requests the network component data and the security data;

receive the network component data and the security data in response to sending the user token.

17. The apparatus of claim 15, wherein:

the network component data further comprises data file data indicating a name and content of a plurality of data files in each of the plurality of network components; and

the virtual overlay engine is further configured to present a first data file within the first network component in the virtual reality environment.

18. The apparatus of claim 17, further comprising:

the virtual overlay engine further configured to present a virtual trashcan in the virtual reality environment;

a gesture recognition engine configured to receive a gesture from the user indicating to place the first data file in the virtual trashcan; and

the electronic transfer engine is further configured to communicate a command to delete a digital file associated with the first data file.

19. The apparatus of claim 16, wherein:

the user input is a biometric signal; and

the virtual reality user device comprises a biometric engine configured to compare the biometric signal to the verification data to authenticate the user.

20. The apparatus of claim 15, wherein:

the virtual reality user device comprises a voice recognition engine configured to identify voice commands performed by the user; and

identifying the first network component identifying a voice command performed by the user to indicate the first network component.