US 12,452,311 B2
Artificial intelligence based real-time security escrow system
Jack Bishop, Evanston, IL (US); Betsy Balgooyen Keller, Chicago, IL (US); Luqman Sharief, Libertyville, IL (US); Basil C. Doyle, Chicago, IL (US); Yasir Pervaiz, Lombard, IL (US); Camilla Solideo, Chicago, IL (US); and Caroline Farris, Chicago, IL (US)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by Bank of America Corporation, Charlotte, NC (US)
Filed on Dec. 6, 2023, as Appl. No. 18/531,292.
Prior Publication US 2025/0193241 A1, Jun. 12, 2025
Int. Cl. H04L 9/40 (2022.01); G06F 21/62 (2013.01); G06N 20/00 (2019.01); H04L 41/16 (2022.01)
CPC H04L 63/20 (2013.01) [G06F 21/6218 (2013.01); G06N 20/00 (2019.01); H04L 41/16 (2013.01); H04L 63/102 (2013.01); H04L 63/1416 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising:
a first computing network comprising a first application computing platform exchanging data with a second application computing platform via an application programming interface (API), wherein the first computing network performs operations based on first network security policy information;
a second computing network comprising the second application computing platform, wherein the API controls data exchange to and from the second application computing platform;
a security escrow computing system comprising:
a processor; and
memory storing computer-readable instructions that, when executed by the processor, cause the security escrow computing system to:
train, based on historic network security data logs, a machine learning model, wherein the machine learning model corresponds to one or more network security rule sets;
receive, from the second computing network, second network security policy information associated with the second computing network;
analyze, based on analysis of the second network security policy information via the machine learning model, the first network security policy information to identify a level of compliance complies with the second network security policy information; and
set, automatically and based on a first level of compliance, a flag indicating whether the first application computing platform is allowed to access data from the second application computing platform via the API, wherein API function calls are enabled or disabled, wherein data exchange between the first application computing platform and the second application computing platform is enabled or disabled based on the flag.