BLOCKCHAIN SYSTEM FOR ASSESSMENT AND MANAGEMENT OF ASSETS

• US 20200134189A1
• Filed: 10/25/2018
• Published: 04/30/2020
• Est. Priority Date: 10/25/2018
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Carter, Lonnie Jason, Gwin, Cris Jay, Leahy, Theresa Kruse
• Granted Patent: US 11,132,446 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

The present disclosure is directed to a novel system for using a distributed blockchain ledger to conduct, manage, and store application assessment data. In particular, computing systems may be used to perform assessments on the various applications within the enterprise environment and store the assessments as data records within the blockchain. The entity system may further comprise one or more blockchain interjectors which may trigger the addition of updated data records for one or more application assessments in the blockchain. In this way, the system provides for a highly efficient way to perform application assessments.

Claims

1. A system for managing assessment data in a blockchain, comprising:

a processor;

a communication interface; and

a memory having a copy of the blockchain and executable code stored thereon, wherein the executable code, when executed by the processor, causes the processor to;

receive, from an assessment computing system, a request to add a proposed data record to the blockchain, wherein the proposed data record comprises application assessment data;

validate, using a consensus algorithm, the proposed data record based on the application assessment data;

append the proposed data record to a block in the blockchain;

detect, via a blockchain interjector, that the application assessment data requires an update;

based on detecting that the application assessment data requires the update, trigger the assessment computing system to submit additional application assessment data;

receive, from the assessment computing system, a second proposed data record, the second proposed data record comprising the additional assessment data;

validate, using the consensus algorithm, the second proposed data record based on the additional application assessment data; and

append the second proposed data record to a new block in the blockchain.

2. The system of claim 1, wherein the executable code further causes the processor to:

receive, from the assessment computing system, a request to access a graphical user interface; and

provide the graphical user interface to a user via the assessment computing system, wherein the graphical user interface is configured to accept the application assessment data from the user.

3. The system of claim 1, wherein the application assessment data comprises an assessment parameter, wherein the additional application assessment data comprises assessment input data associated with the assessment parameter.

4. The system of claim 1, wherein the blockchain interjector is a security vulnerability interjector, wherein the security vulnerability interjector causes the processor to:

detect a presence of a security vulnerability affecting an application; and

trigger the assessment computing system to submit a third proposed data record, the third proposed data record comprising application assessment data associated with the security vulnerability.

5. The system of claim 1, wherein the blockchain interjector is an incident interjector, wherein the incident interjector causes the processor to:

detect a presence of an incident affecting an application; and

trigger the assessment computing system to submit a third proposed data record, the third proposed data record comprising application assessment data associated with the incident.

6. The system of claim 1, wherein the blockchain interjector is a periodic interjector, wherein the periodic interjector causes the processor to:

detect that a threshold amount of time has passed since an application was last assessed; and

trigger the assessment computing system to submit a third proposed data record, the third proposed data record comprising application reassessment data.

7. The system of claim 1, wherein the blockchain interjector is a regulations interjector, wherein the regulations interjector causes the processor to:

detect a change in a regulation affecting an application; and

trigger the assessment computing system to submit a third proposed data record, the third proposed data record comprising application assessment data associated with the change in the regulation.

8. A computer program product for managing assessment data in a blockchain, the computer program product comprising at least one non-transitory computer readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:

an executable portion for receiving, from an assessment computing system, a request to add a proposed data record to the blockchain, wherein the proposed data record comprises application assessment data;

an executable portion for validating, using a consensus algorithm, the proposed data record based on the application assessment data;

an executable portion for appending the proposed data record to a block in the blockchain;

an executable portion for detecting, via a blockchain interjector, that the application assessment data requires an update;

an executable portion for, based on detecting that the application assessment data requires the update, triggering the assessment computing system to submit additional application assessment data;

an executable portion for receiving, from the assessment computing system, a second proposed data record, the second proposed data record comprising the additional assessment data;

an executable portion for validating, using the consensus algorithm, the second proposed data record based on the additional application assessment data; and

an executable portion for appending the second proposed data record to a new block in the blockchain.

9. The computer program product of claim 8, the computer-readable program code portions further comprising:

an executable portion for receiving, from the assessment computing system, a request to access a graphical user interface; and

an executable portion for providing the graphical user interface to a user via the assessment computing system, wherein the graphical user interface is configured to accept the application assessment data from the user.

10. The computer program product of claim 8, wherein the application assessment data comprises an assessment parameter, wherein the additional application assessment data comprises assessment input data associated with the assessment parameter.

11. The computer program product of claim 8, wherein the blockchain interjector is a security vulnerability interjector, wherein the computer-readable program code portions further comprise:

an executable portion for detecting a presence of a security vulnerability affecting an application; and

an executable portion for triggering the assessment computing system to submit a third proposed data record, the third proposed data record comprising application assessment data associated with the security vulnerability.

12. The computer program product of claim 8, wherein the blockchain interjector is an incident interjector, wherein the computer-readable program code portions further comprise:

an executable portion for detecting a presence of an incident affecting an application; and

an executable portion for triggering the assessment computing system to submit a third proposed data record, the third proposed data record comprising application assessment data associated with the incident

13. The computer program product of claim 8, wherein the blockchain interjector is a periodic interjector, wherein the computer-readable program code portions further comprise:

an executable portion for detecting that a threshold amount of time has passed since an application was last assessed; and

an executable portion for triggering the assessment computing system to submit a third proposed data record, the third proposed data record comprising application reassessment data.

14. A computer-implemented method for managing assessment data in a blockchain, the method comprising:

receiving, from an assessment computing system, a request to add a proposed data record to the blockchain, wherein the proposed data record comprises application assessment data;

validating, using a consensus algorithm, the proposed data record based on the application assessment data;

appending the proposed data record to a block in the blockchain;

detecting, via a blockchain interjector, that the application assessment data requires an update;

based on detecting that the application assessment data requires the update, triggering the assessment computing system to submit additional application assessment data;

receiving, from the assessment computing system, a second proposed data record, the second proposed data record comprising the additional assessment data;

validating, using the consensus algorithm, the second proposed data record based on the additional application assessment data; and

appending the second proposed data record to a new block in the blockchain.

15. The computer-implemented method of claim 14, the method further comprising:

receiving, from the assessment computing system, a request to access a graphical user interface; and

providing the graphical user interface to a user via the assessment computing system, wherein the graphical user interface is configured to accept the application assessment data from the user.

16. The computer-implemented method of claim 14, wherein the application assessment data comprises an assessment parameter, wherein the additional application assessment data comprises assessment input data associated with the assessment parameter.

17. The computer-implemented method of claim 14, wherein the blockchain interjector is a security vulnerability interjector, wherein the method further comprises:

detecting a presence of a security vulnerability affecting an application; and

triggering the assessment computing system to submit a third proposed data record, the third proposed data record comprising application assessment data associated with the security vulnerability.

18. The computer-implemented method of claim 14, wherein the blockchain interjector is an incident interjector, wherein the method further comprises:

detecting a presence of an incident affecting an application; and

triggering the assessment computing system to submit a third proposed data record, the third proposed data record comprising application assessment data associated with the incident.

19. The computer-implemented method of claim 14, wherein the blockchain interjector is a periodic interjector, wherein the method further comprises:

detecting that a threshold amount of time has passed since an application was last assessed; and

triggering the assessment computing system to submit a third proposed data record, the third proposed data record comprising application reassessment data.

20. The computer-implemented method of claim 14, wherein the blockchain interjector is a regulations interjector, wherein the method further comprises:

detecting a change in a regulation affecting an application; and

triggering the assessment computing system to submit a third proposed data record, the third proposed data record comprising application assessment data associated with the change in the regulation.