Patents by Inventor Manu J. Kurian

Manu J. Kurian has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 11558397
    Abstract: A system that includes a tagging engine and a routing engine. The tagging engine is configured to link a data element with an access control tag. The tagging engine is configured to apply context rules to the access control tag array based on the content of the data element to change the access control tag value for one or more of the access control tags. The tagging engine sends the data element with the access control tag array to a target network node within an end user group. The routing engine is configured to identify an access control tag value in the access control tag array corresponding with the end user group and to forward the data element to the target network node in response to determining that the access control value is greater than or equal to the access control level associated with the end user group.
    Type: Grant
    Filed: September 3, 2020
    Date of Patent: January 17, 2023
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Michael S. Karafotis, Paul G. Roscoe, Saritha P. Vrittamani, Jo-Ann Taylor, Srinivasa D. Madireddi, Timothy L. Atwell, Crystal M. Sundaramoorthy
  • Patent number: 11483147
    Abstract: A system includes a data store, memory, and hardware processor. The data store includes a dataset with first and second blocks of data. The memory stores first and second encryption algorithms. The processor receives a request to transmit the dataset to a first user's device. The processor encrypts the dataset by applying the first encryption algorithm to the first block and the second encryption algorithm to the second block, in response to determining a first level of security for the first block and a second level of security for the second block. The processor also applies an access control to the encrypted dataset, based on a characteristic of the first user, and transmits the encrypted dataset to the first user. The access control prevents a second user with a characteristic incompatible with the characteristic of the first user from accessing the encrypted dataset.
    Type: Grant
    Filed: January 23, 2020
    Date of Patent: October 25, 2022
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Patent number: 11429564
    Abstract: A file transfer system that includes a data source, a destination device, and a transfer server. The transfer server is configured to receive a file from the data source and determine a file size of the file. The transfer server is further configured to determine an available disk space for the destination device, to compare the available disk space to the file size of the file, and to determine that the available disk space is less than the file size of the file. In response to the determination, the transfer server is further configured to determine a file type for the file based on content within the file and to identify metadata linked with the determined file type. The transfer server is further configured to extract data from the file corresponding with the identified metadata and to send the data to the destination device.
    Type: Grant
    Filed: June 18, 2019
    Date of Patent: August 30, 2022
    Assignee: Bank of America Corporation
    Inventors: Jayachandra Varma, Balaji Subramanian, Anshika Choudhary, Manu J. Kurian
  • Patent number: 11425143
    Abstract: A system includes an authorization token with a memory configured to store user attributes including a record of previous usage of the data store by the user, pre-authorization data for the user, and an access signature for accessing contents of a data store. The authorization token receives an authorization request. Session attributes are collected associated with a file path used by the user to request access to a file. A consistency measure is determined associated with whether the file path used by the user to request access to the file is consistent with a previous file path stored in a record of previous usage of the data store by the user. In response to determining that the consistency measure is greater than a threshold value, the access signature is provided to the data store, thereby granting the user access to the file.
    Type: Grant
    Filed: January 23, 2020
    Date of Patent: August 23, 2022
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Patent number: 11403315
    Abstract: A database reporting device that includes a network interface in signal communication with a database. The network device further includes a processor configured to receive a report request comprising a project key and to identify data records associated with the project key. The processor is further configured to identify a report template for a user associated with the report request and to identify data record element types corresponding with sections of the identified report template. The processor is further configured to generate a search query for data record elements corresponding with the identified data record element types and to send the search query to the database. The network device is further configured to receive a plurality of data record elements, to populate the report template with data record elements that correspond with data record element types for each section, and to output a report based on the populated report template.
    Type: Grant
    Filed: November 21, 2019
    Date of Patent: August 2, 2022
    Assignee: Bank of America Corporation
    Inventors: Jason Sy Coady, Gregory J. Capello, Manu J. Kurian
  • Patent number: 11334393
    Abstract: A device configured to receive requirements that identifies hardware operating characteristics and to determine a performance metric for the requirements. The device is configured to generate a set of resource cluster configurations that each identify a set of hardware resources and a set of algorithms. The device is further configured to identify a first resource cluster configuration having a first performance value with the highest performance value from among the set of resource cluster configurations. The device is further configured to combine the first resource cluster configuration with a second resource cluster configuration, and to determine a second performance value for the combined resource cluster configuration.
    Type: Grant
    Filed: January 7, 2020
    Date of Patent: May 17, 2022
    Assignee: Bank of America Corporation
    Inventors: Sasidhar Purushothaman, Manu J. Kurian
  • Patent number: 11316658
    Abstract: A system is configured for managing security of a database associated with an organization. A fingerprint of an authorized user is captured. The data is scrambled using a scrambling technique. A list of users authorized to access the data is received from the user. A descrambler key corresponding to the scrambling technique is generated. The descrambler key is associated with fingerprints and predetermined location coordinates of authorized users. The descrambler key is configured to descramble the data when authorized users attempt to access the data using their fingerprints at their corresponding location coordinates. The scrambled data is encrypted. The system determines whether a particular user attempting to access the data is authorized to access the data by validating a fingerprint and location coordinates of the particular user. If the particular user is authenticated, the descrambler key descrambles the data. The particular user is allowed to access the data.
    Type: Grant
    Filed: July 20, 2020
    Date of Patent: April 26, 2022
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Patent number: 11301305
    Abstract: A device configured to receive requirements that identifies hardware operating characteristics and to determine a performance metric based on the requirements. The device is further configured to generate a set of resource cluster configurations that each identify a set of hardware resources and a set of algorithms. The device is further configured to identify a first resource cluster configuration having a first performance value with the highest performance value from among the set of resource cluster configurations. The device is further configured to modify the first resource cluster configuration and to determine a second performance value for the modified resource cluster configuration. The device is further configured to modify the modified resource cluster configuration when the second performance value is less than the first performance value and to output the modified resource cluster configuration when the second performance value is greater than the first performance value.
    Type: Grant
    Filed: January 7, 2020
    Date of Patent: April 12, 2022
    Assignee: Bank of America Corporation
    Inventors: Sasidhar Purushothaman, Manu J. Kurian
  • Patent number: 11288679
    Abstract: A system for authorizing an electronic transaction in an augmented reality environment comprises an augmented reality user device and an authentication server. The augmented reality user device includes a display that overlays virtual objects onto a field of view of the user. The user device receives a request to verify information about a payment card used in an electronic transaction. The request includes a virtual authentication object, which is a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter an authentication code. The user device displays the virtual authentication object to the user and detects gestures performed on the virtual authentication object. The user device sends the detected gestures to the authentication server. The authentication server determines the authentication code using the virtual authentication object and the detected gestures, and uses it to authorize the transaction.
    Type: Grant
    Filed: February 6, 2020
    Date of Patent: March 29, 2022
    Assignee: Bank of America Corporation
    Inventors: Amanda J. Adams, Joseph N. Johansen, Michael Ogrinz, Heather Dolan, William P. Jacobson, Manu J. Kurian
  • Publication number: 20220021516
    Abstract: A system is configured for managing security of a database associated with an organization. A fingerprint of an authorized user is captured. The data is scrambled using a scrambling technique. A list of users authorized to access the data is received from the user. A descrambler key corresponding to the scrambling technique is generated. The descrambler key is associated with fingerprints and predetermined location coordinates of authorized users. The descrambler key is configured to descramble the data when authorized users attempt to access the data using their fingerprints at their corresponding location coordinates. The scrambled data is encrypted. The system determines whether a particular user attempting to access the data is authorized to access the data by validating a fingerprint and location coordinates of the particular user. If the particular user is authenticated, the descrambler key descrambles the data. The particular user is allowed to access the data.
    Type: Application
    Filed: July 20, 2020
    Publication date: January 20, 2022
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Patent number: 11182781
    Abstract: A system that includes a device with a processor is configured to receive a first set of data elements and to obtain an encryption key from a memory. The processor is further configured to encrypt the first set of data elements using the encryption key, to embed the first set of encrypted data elements within a first block for the block chain, and to generate a first encrypted element map identifying the locations of the first set of encrypted data elements within the first block. The processor is further configured to combine the encryption key with the first encrypted element map to generate a creator tag, to encrypt the creator tag, to embed the creator tag within the first block, and to publish the first block to a block chain.
    Type: Grant
    Filed: April 18, 2018
    Date of Patent: November 23, 2021
    Assignee: Bank of America Corporation
    Inventors: Joseph B. Castinado, Manu J. Kurian
  • Patent number: 11176264
    Abstract: An information security system that includes a data control engine configured to receive a data request identifying a first reference tag that is associated with a data file. The data control engine is further configured to identify a first set of encrypted data blocks that are linked with the reference tag and location information for the first set of encrypted data blocks from a data information table. The data control engine is further configured to extract the first set of data blocks from a memory based on the location information. The data control engine is further configured to identify access keys associated with the first set of encrypted data blocks from the data information table and to decrypt the first set of encrypted data blocks using the identified access keys. The data control engine is further configured to reconstruct the data file using the decrypted first set of data blocks.
    Type: Grant
    Filed: August 20, 2019
    Date of Patent: November 16, 2021
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Michael R. Young, Jo-Ann Taylor
  • Patent number: 11170128
    Abstract: A network device that includes a memory operable to store a set of anonymization rules and a distributed ledger comprising information for a private blockchain and a semi-private blockchain associated with the user. The network device further includes an information security engine implemented by a processor. The information security engine is configured to receive data from one or more user devices and to store the data in the private blockchain. The information security engine is further configured to determine a data classification type for the data, to determine to anonymize the data based on the data classification type, to anonymize the data in accordance with the set of anonymization rules, and to store the anonymized data in the semi-private blockchain.
    Type: Grant
    Filed: February 27, 2019
    Date of Patent: November 9, 2021
    Assignee: Bank of America Corporation
    Inventor: Manu J. Kurian
  • Patent number: 11171881
    Abstract: A device configured to receive a data set and instructions for processing the data set from a network device. The device is further configured to parse the data set into a plurality of data segments to be processed, and generate a plurality of instruction segments from the received instructions. The device is further configured to assign each instruction segment to a resource unit, and to generate control information with instructions for combining processed data segments from the resource units. The device is further configured to receive processed data segments from the resource units, to generate the processed data set, and to output the processed data set to the network device.
    Type: Grant
    Filed: January 28, 2021
    Date of Patent: November 9, 2021
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Sasidhar Purushothaman, Rajesh Narayanan
  • Patent number: 11102005
    Abstract: A non-transitory computer-readable medium includes an encrypted dataset, a first access control measure, and instructions. The encrypted dataset includes a first encrypted block of data, encrypted using a first encryption algorithm, and a second encrypted block of data, encrypted using a second encryption algorithm stronger than the first. The first access control measure is associated with a first access control characteristic and is configured to selectively prevent access to the encrypted dataset. The instructions are configured, when executed by a processor of a device of a first user, to determine that a first characteristic of the first user matches the first access control characteristic. In response, the instructions are configured to decrypt the encrypted dataset to form a plain text dataset and provide the device of the first user access to the plain text dataset. Decrypting the encrypted dataset includes decrypting the first and second blocks of data.
    Type: Grant
    Filed: January 23, 2020
    Date of Patent: August 24, 2021
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Publication number: 20210243137
    Abstract: A device configured to receive a data set and instructions for processing the data set from a network device. The device is further configured to parse the data set into a plurality of data segments to be processed, and generate a plurality of instruction segments from the received instructions. The device is further configured to assign each instruction segment to a resource unit, and to generate control information with instructions for combining processed data segments from the resource units. The device is further configured to receive processed data segments from the resource units, to generate the processed data set, and to output the processed data set to the network device.
    Type: Application
    Filed: January 28, 2021
    Publication date: August 5, 2021
    Inventors: Manu J. Kurian, Sasidhar Purushothaman, Rajesh Narayanan
  • Publication number: 20210234868
    Abstract: A system includes an authorization token with a memory configured to store user attributes including a record of previous usage of the data store by the user, pre-authorization data for the user, and an access signature for accessing contents of a data store. The authorization token receives an authorization request. Session attributes are collected associated with a file path used by the user to request access to a file. A consistency measure is determined associated with whether the file path used by the user to request access to the file is consistent with a previous file path stored in a record of previous usage of the data store by the user. In response to determining that the consistency measure is greater than a threshold value, the access signature is provided to the data store, thereby granting the user access to the file.
    Type: Application
    Filed: January 23, 2020
    Publication date: July 29, 2021
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Publication number: 20210234673
    Abstract: A system includes a data store, memory, and hardware processor. The data store includes a dataset with first and second blocks of data. The memory stores first and second encryption algorithms. The processor receives a request to transmit the dataset to a first user's device. The processor encrypts the dataset by applying the first encryption algorithm to the first block and the second encryption algorithm to the second block, in response to determining a first level of security for the first block and a second level of security for the second block. The processor also applies an access control to the encrypted dataset, based on a characteristic of the first user, and transmits the encrypted dataset to the first user. The access control prevents a second user with a characteristic incompatible with the characteristic of the first user from accessing the encrypted dataset.
    Type: Application
    Filed: January 23, 2020
    Publication date: July 29, 2021
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Publication number: 20210234693
    Abstract: A non-transitory computer-readable medium includes an encrypted dataset, a first access control measure, and instructions. The encrypted dataset includes a first encrypted block of data, encrypted using a first encryption algorithm, and a second encrypted block of data, encrypted using a second encryption algorithm stronger than the first. The first access control measure is associated with a first access control characteristic and is configured to selectively prevent access to the encrypted dataset. The instructions are configured, when executed by a processor of a device of a first user, to determine that a first characteristic of the first user matches the first access control characteristic. In response, the instructions are configured to decrypt the encrypted dataset to form a plain text dataset and provide the device of the first user access to the plain text dataset. Decrypting the encrypted dataset includes decrypting the first and second blocks of data.
    Type: Application
    Filed: January 23, 2020
    Publication date: July 29, 2021
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Publication number: 20210208950
    Abstract: A device configured to receive requirements that identifies hardware operating characteristics and to determine a performance metric based on the requirements. The device is further configured to generate a set of resource cluster configurations that each identify a set of hardware resources and a set of algorithms. The device is further configured to identify a first resource cluster configuration having a first performance value with the highest performance value from among the set of resource cluster configurations. The device is further configured to modify the first resource cluster configuration and to determine a second performance value for the modified resource cluster configuration. The device is further configured to modify the modified resource cluster configuration when the second performance value is less than the first performance value and to output the modified resource cluster configuration when the second performance value is greater than the first performance value.
    Type: Application
    Filed: January 7, 2020
    Publication date: July 8, 2021
    Inventors: Sasidhar Purushothaman, Manu J. Kurian