US 12,206,713 B2
Updating security rule sets using repository switching
Srinivas Alladi, Glen Allen, VA (US); and Muthukumar Kubendran, Glen Allen, VA (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Jan. 22, 2024, as Appl. No. 18/419,162.
Application 18/419,162 is a continuation of application No. 17/590,544, filed on Feb. 1, 2022, granted, now 11,916,971.
Prior Publication US 2024/0187456 A1, Jun. 6, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/205 (2013.01) 20 Claims
OG exemplary drawing
 
1. A system for updating cybersecurity enforcement rules in real-time over disparate computer networks, the system comprising:
one or more processors; and
a non-transitory, computer-readable storage medium storing instructions, which when executed by the one or more processors cause the one or more processors to perform operations comprising:
receiving a real-time data stream, the real-time data stream comprising a series of real-time communications requiring cybersecurity verification;
routing the real-time data stream to a first queue associated with a first rule repository, wherein the first rule repository comprises a complete rule set for addressing known cybersecurity incidents, and wherein the series of real-time communications is processed using the first rule repository;
determining that rule updates are available for rules within the first rule repository;
in response to determining that the rule updates are available, retrieving a second rule repository, wherein the second rule repository comprises a revised complete rule set for addressing the known cybersecurity incidents;
in response to verifying that the second rule repository has been received, routing the real-time data stream to a second queue associated with the second rule repository;
in response to routing the real-time data stream to the second queue, processing a first portion of the series of real-time communications in the first queue with the first rule repository and, a second portion of the series of real-time communications in the second queue using the second rule repository; and
setting a flag on the first rule repository that disables the first rule repository based on completion of processing of the first portion of the series of real-time communications.