US 12,147,539 B2
System and method for automatic identification of unauthorized updates to internet of things devices
Shailendra Singh, Maharashtra (IN); and Vasuki Anand, Chennai (IN)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by BANK OF AMERICA CORPORATION, Charlotte, NC (US)
Filed on Mar. 16, 2022, as Appl. No. 17/696,303.
Prior Publication US 2023/0297681 A1, Sep. 21, 2023
Int. Cl. G06F 21/57 (2013.01); G16Y 30/10 (2020.01)
CPC G06F 21/572 (2013.01) [G16Y 30/10 (2020.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising:
a memory configured to store:
one or more smart contracts associated with a first device, wherein each smart contact comprises software code that is configured to determine whether a set of parameters extracted from a transmission by the first device is consistent with a respective set of parameters received from the first device;
a hardware processor communicatively coupled to the memory, the hardware processor configured to:
detect a transmission by the first device;
extract the set of parameters from the transmission;
run the software code relating to a first smart contract associated with the first device to determine whether the set of parameters extracted from the transmission by the first device is consistent with the respective set of parameters previously received from the first device;
in response to determining that the set of parameters extracted from the transmission by the first device is not consistent with the respective set of parameters previously received from the first device, extract an updated set of parameters from the first device;
generate an updated smart contract based on the updated set of parameters;
execute a machine learning algorithm to determine a probability that changes to the updated smart contract as compared to the first smart contract are a result of an unauthorized update made to the first device, wherein the machine learning algorithm is configured to identify patterns in the changes that are indicative of the unauthorized update;
determine that the probability is greater than a threshold; and
in response to determining that the probability is greater than the threshold, reject a request transmitted by the device.