Patents by Inventor Manu J. Kurian

Manu J. Kurian has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 11301305
    Abstract: A device configured to receive requirements that identifies hardware operating characteristics and to determine a performance metric based on the requirements. The device is further configured to generate a set of resource cluster configurations that each identify a set of hardware resources and a set of algorithms. The device is further configured to identify a first resource cluster configuration having a first performance value with the highest performance value from among the set of resource cluster configurations. The device is further configured to modify the first resource cluster configuration and to determine a second performance value for the modified resource cluster configuration. The device is further configured to modify the modified resource cluster configuration when the second performance value is less than the first performance value and to output the modified resource cluster configuration when the second performance value is greater than the first performance value.
    Type: Grant
    Filed: January 7, 2020
    Date of Patent: April 12, 2022
    Assignee: Bank of America Corporation
    Inventors: Sasidhar Purushothaman, Manu J. Kurian
  • Patent number: 11288679
    Abstract: A system for authorizing an electronic transaction in an augmented reality environment comprises an augmented reality user device and an authentication server. The augmented reality user device includes a display that overlays virtual objects onto a field of view of the user. The user device receives a request to verify information about a payment card used in an electronic transaction. The request includes a virtual authentication object, which is a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter an authentication code. The user device displays the virtual authentication object to the user and detects gestures performed on the virtual authentication object. The user device sends the detected gestures to the authentication server. The authentication server determines the authentication code using the virtual authentication object and the detected gestures, and uses it to authorize the transaction.
    Type: Grant
    Filed: February 6, 2020
    Date of Patent: March 29, 2022
    Assignee: Bank of America Corporation
    Inventors: Amanda J. Adams, Joseph N. Johansen, Michael Ogrinz, Heather Dolan, William P. Jacobson, Manu J. Kurian
  • Publication number: 20220021516
    Abstract: A system is configured for managing security of a database associated with an organization. A fingerprint of an authorized user is captured. The data is scrambled using a scrambling technique. A list of users authorized to access the data is received from the user. A descrambler key corresponding to the scrambling technique is generated. The descrambler key is associated with fingerprints and predetermined location coordinates of authorized users. The descrambler key is configured to descramble the data when authorized users attempt to access the data using their fingerprints at their corresponding location coordinates. The scrambled data is encrypted. The system determines whether a particular user attempting to access the data is authorized to access the data by validating a fingerprint and location coordinates of the particular user. If the particular user is authenticated, the descrambler key descrambles the data. The particular user is allowed to access the data.
    Type: Application
    Filed: July 20, 2020
    Publication date: January 20, 2022
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Patent number: 11182781
    Abstract: A system that includes a device with a processor is configured to receive a first set of data elements and to obtain an encryption key from a memory. The processor is further configured to encrypt the first set of data elements using the encryption key, to embed the first set of encrypted data elements within a first block for the block chain, and to generate a first encrypted element map identifying the locations of the first set of encrypted data elements within the first block. The processor is further configured to combine the encryption key with the first encrypted element map to generate a creator tag, to encrypt the creator tag, to embed the creator tag within the first block, and to publish the first block to a block chain.
    Type: Grant
    Filed: April 18, 2018
    Date of Patent: November 23, 2021
    Assignee: Bank of America Corporation
    Inventors: Joseph B. Castinado, Manu J. Kurian
  • Patent number: 11176264
    Abstract: An information security system that includes a data control engine configured to receive a data request identifying a first reference tag that is associated with a data file. The data control engine is further configured to identify a first set of encrypted data blocks that are linked with the reference tag and location information for the first set of encrypted data blocks from a data information table. The data control engine is further configured to extract the first set of data blocks from a memory based on the location information. The data control engine is further configured to identify access keys associated with the first set of encrypted data blocks from the data information table and to decrypt the first set of encrypted data blocks using the identified access keys. The data control engine is further configured to reconstruct the data file using the decrypted first set of data blocks.
    Type: Grant
    Filed: August 20, 2019
    Date of Patent: November 16, 2021
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Michael R. Young, Jo-Ann Taylor
  • Patent number: 11170128
    Abstract: A network device that includes a memory operable to store a set of anonymization rules and a distributed ledger comprising information for a private blockchain and a semi-private blockchain associated with the user. The network device further includes an information security engine implemented by a processor. The information security engine is configured to receive data from one or more user devices and to store the data in the private blockchain. The information security engine is further configured to determine a data classification type for the data, to determine to anonymize the data based on the data classification type, to anonymize the data in accordance with the set of anonymization rules, and to store the anonymized data in the semi-private blockchain.
    Type: Grant
    Filed: February 27, 2019
    Date of Patent: November 9, 2021
    Assignee: Bank of America Corporation
    Inventor: Manu J. Kurian
  • Patent number: 11171881
    Abstract: A device configured to receive a data set and instructions for processing the data set from a network device. The device is further configured to parse the data set into a plurality of data segments to be processed, and generate a plurality of instruction segments from the received instructions. The device is further configured to assign each instruction segment to a resource unit, and to generate control information with instructions for combining processed data segments from the resource units. The device is further configured to receive processed data segments from the resource units, to generate the processed data set, and to output the processed data set to the network device.
    Type: Grant
    Filed: January 28, 2021
    Date of Patent: November 9, 2021
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Sasidhar Purushothaman, Rajesh Narayanan
  • Patent number: 11102005
    Abstract: A non-transitory computer-readable medium includes an encrypted dataset, a first access control measure, and instructions. The encrypted dataset includes a first encrypted block of data, encrypted using a first encryption algorithm, and a second encrypted block of data, encrypted using a second encryption algorithm stronger than the first. The first access control measure is associated with a first access control characteristic and is configured to selectively prevent access to the encrypted dataset. The instructions are configured, when executed by a processor of a device of a first user, to determine that a first characteristic of the first user matches the first access control characteristic. In response, the instructions are configured to decrypt the encrypted dataset to form a plain text dataset and provide the device of the first user access to the plain text dataset. Decrypting the encrypted dataset includes decrypting the first and second blocks of data.
    Type: Grant
    Filed: January 23, 2020
    Date of Patent: August 24, 2021
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Publication number: 20210243137
    Abstract: A device configured to receive a data set and instructions for processing the data set from a network device. The device is further configured to parse the data set into a plurality of data segments to be processed, and generate a plurality of instruction segments from the received instructions. The device is further configured to assign each instruction segment to a resource unit, and to generate control information with instructions for combining processed data segments from the resource units. The device is further configured to receive processed data segments from the resource units, to generate the processed data set, and to output the processed data set to the network device.
    Type: Application
    Filed: January 28, 2021
    Publication date: August 5, 2021
    Inventors: Manu J. Kurian, Sasidhar Purushothaman, Rajesh Narayanan
  • Publication number: 20210234868
    Abstract: A system includes an authorization token with a memory configured to store user attributes including a record of previous usage of the data store by the user, pre-authorization data for the user, and an access signature for accessing contents of a data store. The authorization token receives an authorization request. Session attributes are collected associated with a file path used by the user to request access to a file. A consistency measure is determined associated with whether the file path used by the user to request access to the file is consistent with a previous file path stored in a record of previous usage of the data store by the user. In response to determining that the consistency measure is greater than a threshold value, the access signature is provided to the data store, thereby granting the user access to the file.
    Type: Application
    Filed: January 23, 2020
    Publication date: July 29, 2021
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Publication number: 20210234673
    Abstract: A system includes a data store, memory, and hardware processor. The data store includes a dataset with first and second blocks of data. The memory stores first and second encryption algorithms. The processor receives a request to transmit the dataset to a first user's device. The processor encrypts the dataset by applying the first encryption algorithm to the first block and the second encryption algorithm to the second block, in response to determining a first level of security for the first block and a second level of security for the second block. The processor also applies an access control to the encrypted dataset, based on a characteristic of the first user, and transmits the encrypted dataset to the first user. The access control prevents a second user with a characteristic incompatible with the characteristic of the first user from accessing the encrypted dataset.
    Type: Application
    Filed: January 23, 2020
    Publication date: July 29, 2021
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Publication number: 20210234693
    Abstract: A non-transitory computer-readable medium includes an encrypted dataset, a first access control measure, and instructions. The encrypted dataset includes a first encrypted block of data, encrypted using a first encryption algorithm, and a second encrypted block of data, encrypted using a second encryption algorithm stronger than the first. The first access control measure is associated with a first access control characteristic and is configured to selectively prevent access to the encrypted dataset. The instructions are configured, when executed by a processor of a device of a first user, to determine that a first characteristic of the first user matches the first access control characteristic. In response, the instructions are configured to decrypt the encrypted dataset to form a plain text dataset and provide the device of the first user access to the plain text dataset. Decrypting the encrypted dataset includes decrypting the first and second blocks of data.
    Type: Application
    Filed: January 23, 2020
    Publication date: July 29, 2021
    Inventors: Manu J. Kurian, Sasidhar Purushothaman
  • Publication number: 20210208947
    Abstract: A device configured to receive requirements that identifies hardware operating characteristics and to determine a performance metric for the requirements. The device is configured to generate a set of resource cluster configurations that each identify a set of hardware resources and a set of algorithms. The device is further configured to identify a first resource cluster configuration having a first performance value with the highest performance value from among the set of resource cluster configurations. The device is further configured to combine the first resource cluster configuration with a second resource cluster configuration, and to determine a second performance value for the combined resource cluster configuration.
    Type: Application
    Filed: January 7, 2020
    Publication date: July 8, 2021
    Inventors: Sasidhar Purushothaman, Manu J. Kurian
  • Publication number: 20210211433
    Abstract: An authentication device that includes a memory operable to store a behavior signature for a user and a distributed ledger comprising information for a private blockchain and a semi-private blockchain associated with the user. The network device further includes an authentication engine implemented by a processor. The authentication engine is configured to receive an authentication request for a network resource and to determine a resource classification type based on the network resource. The authentication engine is further configured to identify one of the private blockchain and the semi-private blockchain based on the resource classification type and to extract data from one or more blocks in the identified blockchain. The authentication engine is further configured to determine at least a portion of the extracted data matches the stored behavior signature for the user and to provide access to the network resource in response to the determination.
    Type: Application
    Filed: March 23, 2021
    Publication date: July 8, 2021
    Inventor: Manu J. Kurian
  • Publication number: 20210208950
    Abstract: A device configured to receive requirements that identifies hardware operating characteristics and to determine a performance metric based on the requirements. The device is further configured to generate a set of resource cluster configurations that each identify a set of hardware resources and a set of algorithms. The device is further configured to identify a first resource cluster configuration having a first performance value with the highest performance value from among the set of resource cluster configurations. The device is further configured to modify the first resource cluster configuration and to determine a second performance value for the modified resource cluster configuration. The device is further configured to modify the modified resource cluster configuration when the second performance value is less than the first performance value and to output the modified resource cluster configuration when the second performance value is greater than the first performance value.
    Type: Application
    Filed: January 7, 2020
    Publication date: July 8, 2021
    Inventors: Sasidhar Purushothaman, Manu J. Kurian
  • Publication number: 20210157804
    Abstract: A database reporting device that includes a network interface in signal communication with a database. The network device further includes a processor configured to receive a report request comprising a project key and to identify data records associated with the project key. The processor is further configured to identify a report template for a user associated with the report request and to identify data record element types corresponding with sections of the identified report template. The processor is further configured to generate a search query for data record elements corresponding with the identified data record element types and to send the search query to the database. The network device is further configured to receive a plurality of data record elements, to populate the report template with data record elements that correspond with data record element types for each section, and to output a report based on the populated report template.
    Type: Application
    Filed: November 21, 2019
    Publication date: May 27, 2021
    Inventors: Jason Sy Coady, Gregory J. Capello, Manu J. Kurian
  • Patent number: 10992681
    Abstract: An authentication device that includes a memory operable to store a behavior signature for a user and a distributed ledger comprising information for a private blockchain and a semi-private blockchain associated with the user. The network device further includes an authentication engine implemented by a processor. The authentication engine is configured to receive an authentication request for a network resource and to determine a resource classification type based on the network resource. The authentication engine is further configured to identify one of the private blockchain and the semi-private blockchain based on the resource classification type and to extract data from one or more blocks in the identified blockchain. The authentication engine is further configured to determine at least a portion of the extracted data matches the stored behavior signature for the user and to provide access to the network resource in response to the determination.
    Type: Grant
    Filed: February 27, 2019
    Date of Patent: April 27, 2021
    Assignee: Bank of America Corporation
    Inventor: Manu J. Kurian
  • Patent number: 10963510
    Abstract: A natural language processing system that includes an artificial intelligence (AI) engine and a tagging engine. The AI engine is configured to receive a set of audio files and to identify concepts within the set of audio files. The AI engine is further configured to determine a usage frequency for each of the identified concepts and to generate an AI-defined tag for concepts with a usage frequency that is greater than a usage frequency threshold. The tagging engine is configured to receive an audio file and to identify observed concepts within the audio file. The tagging engine is further configured to compare the observed concepts to the first set of concepts, to determine one or more observed concepts matches concepts linked with AI-defined tags, and to modify metadata for the audio file to include AI-defined tags.
    Type: Grant
    Filed: August 9, 2018
    Date of Patent: March 30, 2021
    Assignee: Bank of America Corporation
    Inventors: James McCormack, Sean M. Gutman, Manu J. Kurian, Sasidhar Purushothaman, Suki Ramasamy, William P. Jacobson
  • Patent number: 10938742
    Abstract: A device configured to receive a data set and instructions for processing the data set from a network device. The device is further configured to identify data flow paths within the instructions and to parse the data set into data segments that correspond with the identified data flow paths. The device is further configured to generate an instruction segment for each data flow path by associating each data segment with a corresponding subset of commands for each data flow path, to assign each instruction segment to a resource unit, and to generate control information with instructions for combining processed data segments from the resource units. The device is further configured to receive processed data segments from the resource units, to generate the processed data set by combining the received processed data segments, and to output the processed data set to the network device.
    Type: Grant
    Filed: January 31, 2020
    Date of Patent: March 2, 2021
    Assignee: Bank of America Corporation
    Inventors: Manu J. Kurian, Sasidhar Purushothaman, Rajesh Narayanan
  • Publication number: 20210056218
    Abstract: An information security system that includes a data control engine configured to receive a data request identifying a first reference tag that is associated with a data file. The data control engine is further configured to identify a first set of encrypted data blocks that are linked with the reference tag and location information for the first set of encrypted data blocks from a data information table. The data control engine is further configured to extract the first set of data blocks from a memory based on the location information. The data control engine is further configured to identify access keys associated with the first set of encrypted data blocks from the data information table and to decrypt the first set of encrypted data blocks using the identified access keys. The data control engine is further configured to reconstruct the data file using the decrypted first set of data blocks.
    Type: Application
    Filed: August 20, 2019
    Publication date: February 25, 2021
    Inventors: Manu J. Kurian, Michael R. Young, Jo-Ann Taylor