Multi-tiered protection platform

• US 9,832,200 B2
• Filed: 12/14/2015
• Issued: 11/28/2017
• Est. Priority Date: 12/14/2015
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Kurian, Manu, Cismas, Sorin N.
• Primary Examiner(s): Rahman, Shawnchoy
• Application Number:
  US14/968,377
• Publication Number:
  US 20170171207A1
• Time in Patent Office: 715 Days
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/53 using third party service providers

Abstract

A multi-tier platform provides additional security at a perimeter of a computer system, where an intermediate layer interacts with a web layer and controls data presentation to the web layer. When the intermediate layer receives a data request for dynamic data from the web layer, the intermediate layer obtains source data from the registered source and may remove a specified portion from the source data to obtain the dynamic data before returning it to the web layer. When requested data comprises static data, the intermediate layer accesses the static data from storage maintained at the intermediate layer. The intermediate layer obtains the static data by the registered source previously publishing source data and the intermediate layer removing a specified portion from it. Source data may assume different forms including a webpage of an external service provider with embedded third-party information being removed by the intermediate layer before presenting it.

Claims

1. An apparatus for supporting an intermediate layer comprising:

a processing device;

a memory device;

a storage subsystem;

a first communication interface configured to communicate with a plurality of sources of data, wherein the plurality of sources comprises first, second, and third sources;

a second communication interface interconnected with a web layer;

an intermediate layer module stored in the memory device, executable by the processor, wherein the intermediate layer module supports an intermediate layer that interacts with the web layer the intermediate layer module configured to cause the processor to;

receive a data request through the second communication interface for requested data through the web layer, wherein the requested data comprises dynamic data and wherein the first source is registered for the dynamic data;

generate an access message to the first source via the first communication interface to access first source data from the first source wherein the first source data comprises the dynamic data;

receive a response from the first source, the response containing the first source data;

remove a first data portion from the first source data to obtain the dynamic data wherein the dynamic data and the first data portion are distinct;

return the dynamic data to the web layer via the second communication interface;

store static data at the storage subsystem at the intermediate layer, wherein the static data is registered with a second source;

receive updated second source data from the second source;

remove a second data portion from the updated second source data, wherein the updated second source data comprises updated static data and the second data portion; and

replace the static data with the updated static data at the storage subsystem.

2. The apparatus of claim 1, wherein the first source comprises a first external source of a first external service provider and wherein the apparatus interacts with the first external service provider via the first communication interface without interacting with the web layer.

3. The apparatus of claim 2, wherein the first data portion comprises a first third-party information component within a first webpage of the first external service provider.

4. The apparatus of claim 3, wherein the first third-party information component comprises a first announcement component.

5. The apparatus of claim 3, wherein the apparatus comprises a third communication interface and wherein the intermediate layer module is further configured to cause the processor to:

receive a first configuration message via the third communication interface between the apparatus and an administrative system; and

specify, by the first configuration message, removal of the first third-party information from content of the first webpage.

6. The apparatus of claim 1, wherein the first source comprises a first application associated with an application layer and wherein the intermediate layer interacts between the web layer and the application layer.

7. The apparatus of claim 1, wherein the second source comprises a second external source of a second external service provider and wherein the apparatus interacts with the second external service provider via the first communication interface without interacting with the web layer.

8. The apparatus of claim 7, wherein the second data portion comprises a second third-party information component within a second webpage of the second external service provider.

9. The apparatus of claim 8, wherein the second third-party information component comprises a second announcement component.

10. The apparatus of claim 1, wherein the second source comprises a second application associated with an application layer and wherein the intermediate layer interacts between the web layer and the application layer.

11. The apparatus of claim 8, wherein the apparatus comprises a third communication interface and wherein the intermediate layer module is further configured to cause the processor to:

receive a second configuration message via the third communication interface between the apparatus and an administrative system; and

specify, by the second configuration message, removal of the second third-party information from content of the second webpage.

12. The apparatus of claim 1, wherein the web layer receives the data request from a web browser and passes the data request to the intermediate layer.

13. The apparatus of claim 1, wherein the web layer receives the data request from an application and passes the data request to the intermediate layer.

14. One or more non-transitory computer-readable media for supporting an intermediate layer that interacts between a web layer and having computer-executable instructions stored thereon, the computer-readable media comprising:

a first set of codes for causing a computing device to receive a data request for requested data through the web layer, wherein the requested data comprises dynamic data and wherein the first source is registered for the dynamic data;

a second set of codes for causing the computing device to generate an access message to the first source via the first communication interface to access first source data from the first source wherein the first source data comprises dynamic data;

a third set of codes for causing the computing device to receive a response from the first source, the response containing the first source data;

a fourth set of codes for causing the computing device to remove a first data portion from the first source data and to obtain the dynamic data, wherein the dynamic data and the first data portion are distinct;

a fifth set of codes for causing the computing device to return the dynamic data via the web layer;

an eighth set of codes for causing the computing device to store static data at the storage subsystem at the intermediate layer, wherein the static data is registered with a second source;

a ninth set of codes for causing the computing device to receive updated second source data from the second source;

a ninth set of codes for causing the computing device to remove a second data portion from the updated second source data, wherein the updated second source data comprises updated static data and the second data portion; and

a tenth set of codes for causing the computing device to replace the static data with the updated static data at the storage subsystem.

15. The computer-readable media of claim 14, wherein the first source comprises an external source of an external service provider, the media further comprising:

a sixth set of codes for causing the computing device to obtain the first source data comprising a webpage of the external service provider; and

a seventh set of codes for causing the computing device to remove a third party information component from the webpage and to obtain the dynamic data.

16. A method for supporting an intermediate layer that interacts with a web layer, the method comprising:

receiving a data request for requested data through the web layer wherein the requested data comprises dynamic data and wherein a first external source of a first external service, provider is registered with the dynamic data;

generating an access message to the first external source via the access first source data from the first source without interacting through the web layer, wherein the first source data comprises the dynamic data;

receiving a response from the first external source, the response containing the first source data;

removing a first third-party information component from the first source data wherein the dynamic data and the first third-party information component are distinct; and

returning the dynamic data to the web layer;

storing static data at the storage subsystem at the intermediate layer, wherein the static data is registered with a second external source of a second external service provider;

receiving updated second source data from the second external source;

removing a second third-party information component from the updated second source data, wherein the updated second source data comprises updated static data and the second third-party information component; and

replacing the static data with the updated static data at the storage subsystem.

17. The method of claim 16, wherein the first third-party information component comprises an announcement component.

18. The method of claim 16, wherein the first source data comprises a data representation of a webpage of the first external service provider.

19. The method of claim, 16 wherein the requested data comprises a data component registered for an application, the application is associated with the application layer, and the intermediate layer interacts between the web layer and the application layer, the method further comprising:

obtaining application source data from the application;

removing a data portion from the application source data to obtain the data component; and

returning the requested data via the web layer.