US 11,755,727 B2
Self-defending computing device
Myles Lawrence, Charlotte, NC (US); and Amanda Jane Adams, Flint (GB)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by Bank of America Corporation, Charlotte, NC (US)
Filed on Dec. 4, 2020, as Appl. No. 17/112,303.
Prior Publication US 2022/0179952 A1, Jun. 9, 2022
Int. Cl. G06F 21/55 (2013.01); G06F 21/52 (2013.01); G06F 21/56 (2013.01); H04L 9/32 (2006.01)
CPC G06F 21/554 (2013.01) [G06F 21/52 (2013.01); G06F 21/56 (2013.01); H04L 9/3236 (2013.01); G06F 2221/034 (2013.01); G06F 2221/2111 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computing device, comprising:
at least one primary processor;
a communication interface communicatively coupled to the at least one primary processor;
a primary non-transitory memory device storing computer-readable instructions that, when executed by the at least one primary processor, cause the computing device to:
execute one or more applications accessing data stored in the primary non-transitory memory device of the computing device;
facilitate communication by the one or more applications via one or more network interfaces of the communication interface; and
a secure module comprising:
at least one secure processor, different from the primary processor; and
a secure and read-only non-transitory memory device pre-configured with second computer-readable instructions that, when executed by the at least one secure processor, cause the computing device to:
monitor the computing device for an event trigger;
cause execution, based on identifying the event trigger and based on a health check configuration stored in the secure memory, of a health check of the computing device to identify one or more anomalies, wherein the one or more anomalies are associated with at least one security flaw at the computing device;
determine, based on identifying an anomaly of the one or more anomalies and based on a response configuration stored in the secure memory, one or more response measures, wherein the anomaly is identified in the health check; and
cause execution, based on the determining the one or more response measures, of the one or more response measures at the computing device, wherein the second computer-readable instructions are protected from software modifications and wherein a replacement of the passcode data with second passcode data, wherein the second passcode data includes one or more characters that are inaccessible at an input of the computing device.