SYSTEM FOR PROVIDING LEVELS OF SECURITY ACCESS TO A PROCESS DATA NETWORK

• US 20170244721A1
• Filed: 02/22/2016
• Published: 08/24/2017
• Est. Priority Date: 02/22/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Kurian, Manu Jacob, Castinado, Joseph Benjamin
• Granted Patent: US 10,178,105 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Embodiments enable a system to determine, authorize, and adjust access, writing, retrieval, and validation rights of users and entities associated with one or more distributed block chain networks. The system is capable of receiving an authorization request from a user to conduct an action associated with the block chain distributed network, determine a security level associated with the user, and either authorize or screen the user from conducting the action based on the determined security level. The system may adjust the security level of the user by requesting and receiving additional authorization credentials from the user. Furthermore, the system may adjust the security level of one or more users based on security or functionality needs of the block chain distributed network.

Claims

1. A system operatively connected with a block chain distributed network and for using the block chain distributed network for ensuring information security, the system comprising:

a memory device; and

a processing device operatively coupled to the memory device, wherein the processing device is configured to execute computer-readable program code to;

receive an authorization request from a user to conduct an action associated with a block chain distributed network;

determine a security level associated with the user;

authorize the user to conduct the action when the action is allowed under the determined security level associated with the user; and

do not authorize the user to conduct the action when the action is not allowed under the determined security level of the user.

2. The system of claim 1, wherein the processing device is further configured to execute computer-readable program code to:

screen the user from information and actions associated with the block chain distributed network that are not allowed under the determined security level associated with the user.

3. The system of claim 1, wherein the security level associated with the user comprises full read and write privileges for data associated with the block chain distributed network.

4. The system of claim 1, wherein the security level associated with the user comprises a right to validate one or more nodes of the block chain distributed network.

5. The system of claim 1, wherein the security level associated with the user comprises a right to retrieve at least a portion of data associated with the block chain distributed network.

6. The system of claim 1, wherein the security level associated with the user is different from a security level associated with one or more other users.

7. The system of claim 1, wherein the processing device is further configured to execute computer-readable program code to:

prompt the user to provide additional authorization credentials based on the determined security level associated with the user;

receive the additional authorization credentials from the user;

determine that the additional authorization credentials are valid; and

authorize the user to conduct the action in response to the determination that the additional authorization credentials are valid.

8. The system of claim 1, wherein the processing device is further configured to execute computer-readable program code to:

prompt the user to provide an access amount based on the determined security level associated with the user;

receive the access amount from the user; and

authorize the user to conduct the action in response to receiving the access amount from the user.

9. The system of claim 1, wherein the processing device is further configured to execute computer-readable program code to:

authorize the user to conduct the action for a predetermined period of time when the action is allowed under the determined security level associated with the user.

10. The system of claim 9, wherein the processing device is further configured to execute computer-readable program code to:

authorize the user to conduct the action a predetermined number of times within a predetermined period of time when the action is allowed under the determined security level associated with the user.

11. A computer program product for execution on a system operatively connected with a block chain distributed network and for using the block chain distributed network for facilitating a rights management protocol to ensure information security, the computer program product comprising at least one non-transitory computer readable medium comprising computer readable instructions, the instructions comprising instructions for:

receiving an authorization request from a user to conduct an action associated with a block chain distributed network;

determining a security level associated with the user;

authorizing the user to conduct the action when the action is allowed under the determined security level associated with the user; and

not authorizing the user to conduct the action when the action is not allowed under the determined security level of the user.

12. The computer program product of claim 11, wherein the computer readable instructions further comprise instructions for:

screening the user from information and actions associated with the block chain distributed network that are not allowed under the determined security level associated with the user.

13. The computer program product of claim 11, wherein the security level associated with the user comprises at least one of:

full read and write privileges for data associated with the block chain distributed network;

a right to validate one or more nodes of the block chain distributed network; and

a right to retrieve at least a portion of data associated with the block chain distributed network.

14. The computer program product of claim 11, wherein the security level associated with the user is different from a security level associated with one or more other users.

15. The computer program product of claim 11, wherein the computer readable instructions further comprise instructions for:

prompting the user to provide additional authorization credentials based on the determined security level associated with the user;

receiving the additional authorization credentials from the user;

determining that the additional authorization credentials are valid; and

authorizing the user to conduct the action in response to the determination that the additional authorization credentials are valid.

16. The computer program product of claim 11, wherein the computer readable instructions further comprise instructions for:

prompting the user to provide an access amount based on the determined security level associated with the user;

receiving the access amount from the user; and

authorizing the user to conduct the action in response to receiving the access amount from the user.

17. The computer program product of claim 11, wherein the computer readable instructions further comprise instructions for:

authorizing the user to conduct the action for a predetermined period of time when the action is allowed under the determined security level associated with the user.

18. The computer program product of claim 17, wherein the computer readable instructions further comprise instructions for:

authorizing the user to conduct the action a predetermined number of times within a predetermined period of time when the action is allowed under the determined security level associated with the user.

19. A computer implemented method for execution on a system operatively connected with a block chain distributed network and for using the block chain distributed network for facilitating a rights management protocol to ensure information security, said computer implemented method comprising:

providing a computing system comprising one or more computer processing devices and a non-transitory computer readable medium, where the computer readable medium comprises configured computer program instruction code, such that when said instruction code is operated by said one or more computer processing devices, said one or more computer processing devices perform the following operations;

receiving an authorization request from a user to conduct an action associated with a block chain distributed network;

determining a security level associated with the user;

authorizing the user to conduct the action when the action is allowed under the determined security level associated with the user; and

not authorizing the user to conduct the action when the action is not allowed under the determined security level of the user.

20. The computer implemented method of claim 19, wherein said configured computer program instruction code is further configured, such that when said instruction code is operated by said one or more computing processing devices, said one or more computer processing devices perform the following operations:

prompting the user to provide additional authorization credentials based on the determined security level associated with the user;

receiving the additional authorization credentials from the user;

determining that the additional authorization credentials are valid; and

authorizing the user to conduct the action in response to the determination that the additional authorization credentials are valid.