Patent ID: 11930014
Assignee: BANK OF AMERICA CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A system comprising:
at least one user device for initiating one or more data interactions associated with a data file; and
a central server communicatively coupled to the at least one user device and configured to:
receive from the at least one user device, a request initiated by a first user to establish a data interaction session associated with the data file based on authentication credentials of the first user;
establish the data interaction session for the first user based on the authentication credentials;
receive from the at least one user device after establishing the data interaction session, a request initiated by the first user for a first data interaction associated with the data file;
check whether the first user is authorized to perform the first data interaction, wherein the check comprises:
search a list of user authorizations based on at least a portion of the authentication credentials of the first user; and
determine, based on the search, at least one data interaction associated with the data file the first user is authorized to perform;

determine, based on the check, that the first user is authorized to perform the first data interaction;
in response to the determining, check whether a rule is defined to trigger an additional level of authorization for the first user relating to a type of the first data interaction associated with the data file, wherein the type of the first data interaction may comprise one or more of viewing a status of the data file, generating a report of data interactions related to the data file previously processed in a given time period, transferring data from the data file, transferring data into the data file, configuring user authorizations for the data file, defining user configured rules related to the data file, and modifying user data stored in the data file;
determine that a first rule is defined to trigger the additional level of authorization for the first user relating to transfer of data objects from the data file requested by the first user, wherein:
the first rule requires that the additional level of authorization is performed for the first user before processing the transfer of data objects from the data file when a first condition is met for the transfer of the data objects from the data file;
the first condition is met when the data objects requested by the first user for the transfer from the data file equals or exceeds a first amount of data objects;
the first rule is different from a second rule defined to trigger the additional level of authorization for a second user relating to transfer of data objects from the same data file requested by the second user;
the second rule requires that the additional level of authorization is performed for the second user before processing a transfer of data objects from the data file requested by the second user when a second condition is met for the transfer of the data objects from the data file; and
the second condition is met when the data objects requested by the second user for the transfer from the data file equals or exceeds a second amount of data objects, wherein the first user is different from the second user and the first amount is different from the second amount;

check whether the first data interaction satisfies the first condition of the first rule to perform the type of the first data interaction;
determine that the first data interaction satisfies the first condition;
in response, trigger the additional level of authorization, wherein the additional level of authorization comprises confirming an identity of the first user by at least one authorization method;
detect that the additional level of authorization was successful; and
in response to the detection, process the first data interaction.