Multi-tiered protection platform

• US 9,832,229 B2
• Filed: 12/14/2015
• Issued: 11/28/2017
• Est. Priority Date: 12/14/2015
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Cismas, Sorin N., Kurian, Manu
• Primary Examiner(s): Rahman, Shawnchoy
• Application Number:
  US14/968,373
• Publication Number:
  US 20170171249A1
• Time in Patent Office: 715 Days
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A multi-tier platform supports a messaging platform. An intermediate layer interacts with a web layer and registered sources of data components, where a registered source may be an application executing on the computer system or an external source of an external service provider. A data request is received at the web layer and is passed to the intermediate layer for requested data, which may comprise one or more data components. The intermediate layer determines the authoritative source for a data component and whether the data component comprises static or dynamic data. If data component comprises dynamic data, the intermediate layer functions as a messaging platform by generating a message to the registered source to access the dynamic data. If the data component comprises static data, the intermediate layer accesses the static data stored at the intermediate layer. The intermediate layer then returns the requested data via the web layer.

Claims

1. An apparatus for supporting an intermediate layer comprising:

a processing device;

a memory device;

a storage subsystem;

a first communication interface configured to communicate with a plurality of sources of data, wherein the plurality of sources comprises first, second, and third sources;

a second communication interface interconnected with a web layer;

an intermediate layer module stored in the memory device, executable by the processor, wherein the intermediate layer module supports an intermediate layer that interacts with the web layer, the intermediate layer module configured to cause the processor to;

receive a data request through the second communication interface for requested data through the web layer, wherein the requested data comprises a first data component and a second data component and wherein the first source is registered for the first data component;

when the first data component comprises dynamic data,

generate a first message to the first source via the first communication interface to access the first data component; and

receive a first response with the first data component from the first source via the first communication interface;

return the requested data to the web layer via the second communication interface;

when a time to access the second data component is past an expiration time limit, send a second message to the second source for an updated second data component;

receive a second response with the updated second data component; and

replace the second data component with the updated second data component at the storage subsystem.

2. The apparatus of claim 1, wherein the requested data further comprises a third data component and wherein the intermediate layer module is further configured to cause the processor to:

when the third data component comprises dynamic data, generate a third message to the third source via the first communication interface to access the third data component, wherein the third source is registered for the third data component and wherein the third source is different from the first source; and

receive a third response with the third data component from the third source via the first communication interface.

3. The apparatus of claim 1, wherein the first source comprises an application associated with an application layer and wherein the intermediate layer interacts between the web layer and the application layer.

4. The apparatus of claim 1, wherein the first source comprises an external source of an external service provider and wherein the apparatus interacts with the external service provider via the first communication interface without interacting with the web layer.

5. The apparatus of claim 1, wherein the requested data comprises a plurality of data components and wherein the intermediate layer module is further configured to cause the processor to:

map the requested data into the plurality of data components;

when one data component of the plurality of data components comprises dynamic data,

generate a corresponding message to a registered source via the first communication interface to access said one data component; and

receive a corresponding response with said one data component from the registered source via the first communication interface; and

when said one data component comprises static data, access said one data component from the storage subsystem at the intermediate layer, wherein said one data component is registered for the registered source.

6. The apparatus of claim 5, wherein the intermediate layer module is further configured to cause the processor to:

repeat the generating, receiving, and accessing for all remaining data components of the plurality of data components.

7. The apparatus of claim 5, wherein the intermediate layer module is further configured to cause the processor to:

deny access to said one data component when returning the requested data to the web layer via the second communication interface.

8. The apparatus of claim 1, wherein the apparatus comprises a third communication interface and wherein the intermediate layer module is further configured to cause the processor to:

receive a configuration message via the third communication interface; and

register the first data component to the first source based on the configuration message.

15. The apparatus of claim 1, wherein the web layer receives the data request from a web browser and passes the data request to the intermediate layer.

16. The apparatus of claim 1, wherein the web layer receives the data request from an application and passes the data request to the intermediate layer.

9. One or more non-transitory computer-readable media for supporting an intermediate layer that interacts with a web layer and having computer-executable instructions stored thereon, the computer-readable media comprising:

a first set of codes for causing a computing device to receive a data request for requested data through the web layer, wherein the requested data comprises a first data component and wherein the first source is registered for the first data component;

a second set of codes for causing the computing device to generate a first message to the first source to access the first data component when the first data component comprises dynamic data;

a third set of codes for causing the computing device to receive, in response to generating the first message, a first response with the first data component from the first source;

a fourth set of codes for causing the computing device to return the requested data to the web layer;

a fifth set of codes for causing the computing device to access a second data component from a storage subsystem at the intermediate layer when the second data component comprises static data, wherein the requested data comprises the second data component and wherein the second source is registered for the second data component;

a sixth set of codes for causing the computing device to send a second message to the second source for an updated second data component when a time to access the second data component is past an expiration time limit;

a seventh set of codes for causing the computing device to receive a second response with the updated second data component; and

an eighth set of codes for causing the computing device to replace the second data component with the updated second data component at the storage subsystem.

10. The computer-readable media of claim 9, further comprising:

a ninth set of codes for causing the computing device to generate a third message to the third source to access the third data component when the third data component comprises dynamic data, wherein the requested data comprises the third data component, the third source is registered for the third data component, and the third source is different from the first source; and

a tenth set of codes for causing the computing device to receive a third response with the third data component from the third source.

11. The computer-readable media of claim 9, further comprising:

an eleventh set of codes for causing the computing device to map the requested data into a plurality of data components;

a twelfth set of codes for causing the computing device to, when one data component of the plurality of data components comprises dynamic data, generate a corresponding message to a registered source via the first communication interface to access said one data component;

a thirteenth set of codes for causing the computing device to receive, responsive to the generating, a corresponding response with said one data component from the registered source;

a fourteenth set of codes for causing the computing device to access said one data component from the storage subsystem at the intermediate layer when said one data component comprises static data, wherein said one data component is registered for the registered source; and

a fifteenth set of codes for causing the computing device to repeat the generating, receiving, and accessing for all remaining data components of the plurality of data components.

12. A method for supporting an intermediate layer that interacts with a web layer, the method comprising:

receiving a data request for requested data through the web layer, wherein the requested data comprises a first data component and wherein the first source is registered for the first data component;

when the first data component comprises dynamic data,

generating a first message to the first source via the first communication interface to access the first data component; and

receiving a first response with the first data component from the first source; and

returning the requested data to the web layer;

when a second data component comprises static data, accessing the second data component from the storage subsystem at the intermediate layer, wherein the requested data further comprises the second data component and wherein the second source is registered for the second data component;

when a time to access the second data component is past an expiration time limit, sending a second message to the second source for an updated second data component;

receiving a second response with the updated second data component; and

replacing the second data component with the updated second data component at the storage subsystem.

13. The method of claim 12, further comprising:

when a third data component comprises dynamic data, generating a third message to a third source to access the third data component, wherein the requested data further comprises the third data component, the third source is registered for the third data component, and the third source is different from the first source; and

receiving a third response with the third data component from the third source.

14. The method of claim 12, further comprising:

mapping the requested data into a plurality of data components;

when one data component of the plurality of data components comprises dynamic data,

generating a corresponding message to a registered source to access said one data component; and

receiving a corresponding response with said one data component from the registered source via the first communication interface;

when said one data component comprises static data, accessing said one data component from the storage subsystem at the intermediate layer, wherein said one data component is registered for the registered source; and

repeating the generating, receiving, and accessing for all remaining data components of the plurality of data components.