Patent ID: 11962617
Assignee: BANK OF AMERICA CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC H

Claim 0:
1. A system for cross-channel network security with tiered adaptive mitigation operations, wherein the system is structured for dynamic detection of security events associated with network devices and resources, and triggering real-time mitigation operations across a plurality of resource channels, the system comprising:
at least one memory device;
at least one communication device connected to a distributed network;
at least one processing device operatively coupled to the at least one memory device; and
a module stored in the at least one memory device comprising executable instructions that when executed by the at least one processing device, cause the at least one processing device to:
receive, from a first network device, a request to execute a first activity via a first activity channel, wherein the first activity is associated with a first resource;
extract activity data regarding the first network device and the first resource;
escalate, in real-time, a level of authentication required for executing the first activity via the first activity channel based on determining that (i) the first activity is associated with a security event, and (ii) the first network device is associated with a predetermined security device, wherein escalating the level of authentication further comprises:
determining that a user associated with the first network device is currently in a first physical area associated with a historical exposure event, comprising:
determining a successful authentication of biometric credentials associated with the user within a predetermined time interval preceding the request to execute the first activity;
determining a first geographic location associated with the input of the biometric credentials;
constructing a distance range from the first geographic location based on determining travel time between the first geographic location and the first physical area associated with the first activity channel, based on, at least, local travel restrictions preventing the user's arrival at the first physical area; and
determining that the first physical area is outside the distance range;

disabling one or more features of the first network device, comprising freezing a display screen associated with the first network device when the first network device is in the first physical area and prohibiting transfer of data to and from first network device when the first network device is in the first physical area;
blocking completion of the first activity via the first activity channel for a first time interval at least until a security proceed signal is determined;
presenting a determined escalated authentication requirement on a second network device; and
presenting, via the second network device, a request for an additional authentication response;

construct one or more tiered adaptive mitigation actions based on at least the activity data, wherein the one or more tiered adaptive mitigation actions comprise de-escalating (i) an action tier, (ii) a resource tier, and/or (iii) a device tier associated with the first activity;
trigger, in real-time, initiation of the one or more tiered adaptive mitigation actions, prior to the first activity via the first activity channel to prevent security exposure associated with the first activity, comprising:
implementing a first block of the first resource such that the first activity associated with the first resource is blocked, wherein the first block is an adapted partial block;
receiving a request to execute a second activity associated with the first resource; and
allowing the second activity associated with the blocked first resource in response to determining that the second activity has a level of authentication below a predetermined threshold;

in response to determining an authorization validation status of the activity data, continue the one or more tiered adaptive mitigation actions and trigger the security proceed signal;
remove the block to the completion of the first activity via the first activity channel; and
unlock the one or more disabled features of the first network device.