# US 10,313,342 B1 · Automatic event migration

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,313,342 B1
- Document ID: US10313342B1
- Status: Granted
- Kind: B1
- Application number: 15/365,941
- Filed: 2016-11-30
- Granted: 2019-06-04
- Earliest claimed: 2015-11-30
- Assignees: Mx Technologies, Inc.
- Applicants: MX Technologies, Inc.
- Inventors: John Ryan Caldwell
- Web page: https://patentgrep.com/patent/US10313342B1

## CPC

- G06F 9/542: {Event management; Broadcasting; Multicasting; Notifications}
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- G06F 9/00: Arrangements for program control, e.g. control units (program control for peripheral devices G06F13/10)
- H04L 63/102: {Entity profiles}
- H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms}
- H04L 67/00: Network arrangements or protocols for supporting network services or applications (user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00)
- H04L 67/1095: Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/1425: {Traffic logging, e.g. anomaly detection}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Apparatuses, systems, methods, and computer program products are disclosed for automated event migration. A method includes aggregating a set of events from one or more servers to a trusted hardware device. Certain different events of a set of events may be associated with different service providers. A method includes identifying, on a trusted hardware device, a repeating event from a set of events. A method includes prompting a user to migrate subsequent instances of a repeating event from one service provider to a different service provider of a plurality of service providers. A method includes migrating subsequent instances of a repeating event, using a user's electronic credentials, from one service provider to a different service provider in response to the user accepting a prompt.

## Claims

### Claim 1

A method comprising:
aggregating a set of events from one or more servers to a trusted hardware device, different events of the set of events associated with different service providers;
identifying, on the trusted hardware device, a repeating event from the set of events;
prompting a user to migrate subsequent instances of the repeating event from one service provider to a different service provider of the different service providers; and
migrating the subsequent instances of the repeating event, using the user's electronic credentials, from the one service provider to the different service provider in response to the user accepting the prompting, wherein migrating the subsequent instances of the repeating event comprises:
logging into a website of a server associated with the repeating event from the trusted hardware device using the user's electronic credentials;
locating one or more user interface elements associated with the repeating event;
submitting information associated with the different service provider from the trusted hardware device to the website of the server using the one or more user interface elements; and
accessing one or more other locations on the website of the server associated with the repeating event, with one or more artificially introduced delays between accessing the one or more other locations and submitting the information, thereby emulating a use pattern of the user for the website of the server associated with the repeating event.

### Claim 2 (depends on 1)

The method of claim 1, wherein the repeating event comprises one or more of a data backup event for a hardware device of the user over a data network, an antivirus scan event for a hardware device of the user, a software update event for a hardware device of the user, an electronic subscription event for a data network service, and an electronic transaction event.

### Claim 3 (depends on 1)

The method of claim 1, further comprising determining whether to prompt the user to migrate the subsequent instances of the repeating event based on the aggregated set of events.

### Claim 4 (depends on 3)

The method of claim 3, wherein the determination is based on a likelihood that the aggregated set of events includes each event for the user of an event type of the aggregated set of events.

### Claim 5 (depends on 3)

The method of claim 3, wherein the determination is based on an estimated value to the different service provider of migrating the subsequent instances of the repeating event to the different service provider, the estimated value determined based on values associated with the repeating event in the aggregated set of events.

### Claim 6 (depends on 1)

The method of claim 1, further comprising aggregating a subsequent set of events from the one or more servers and verifying whether the subsequent instances of the repeating event remain migrated to the different service provider in the subsequent set of events.

### Claim 7 (depends on 6)

The method of claim 6, further comprising re-prompting the user to migrate additional subsequent instances of the repeating event to the different service provider in response to verifying that one or more of the subsequent instances of the repeating event has not remained migrated to the different service provider.

### Claim 8 (depends on 1)

The method of claim 1, further comprising iteratively re-prompting the user to migrate the subsequent instances of the repeating event to the different service provider in response to the user rejecting a previous prompting.

### Claim 9 (depends on 8)

The method of claim 8, wherein each iterative re-prompting comprising an offer for the user, the offer increasing in value each iteration.

### Claim 10 (depends on 1)

The method of claim 1, further comprising:
detecting a trigger indicating one or more of a potential and an actual security breach;
logging into the website of the server associated with the repeating event from the trusted hardware device using the user's electronic credentials;
locating one or more user interface elements associated with the user's electronic credentials; and
changing the user's electronic credentials using the one or more user interface elements associated with the user's electronic credentials in response to detecting the trigger.

### Claim 11 (depends on 1)

The method of claim 1, wherein the emulated use pattern is determined based on one or more of an average pattern identified in behavior of multiple other users accessing the website of the server using a web browser and a pattern identified in behavior of the user accessing the website of the server using a web browser.

### Claim 12 (depends on 1)

The method of claim 1, wherein migrating the subsequent instances of the repeating event comprises replacing a payment source associated with the one service provider with a payment source associated with the different service provider as a default payment source for one or more of a website associated with the repeating event and mobile electronic payment system of a hardware device of the user.

### Claim 13 (depends on 1)

The method of claim 1, wherein migrating the subsequent instances of the repeating event comprises performing one of the subsequent instances of the repeating event using the different service provider before the one service provider is expected to perform the one of the subsequent instances of the repeating event such that the one service provider detects that the one of the subsequent instances of the event has already been performed.

### Claim 14

An apparatus comprising:
a trusted hardware device authorized by a user to use a plurality of electronic credentials for the user, the trusted hardware device configured to:
aggregate a set of events from one or more servers using one or more of the electronic credentials for the user;
identify a plurality of repeating events from the set of events, the plurality of repeating events associated with a plurality of service providers;
prompt a user to migrate execution of the plurality of repeating events from the plurality of service providers to a different service provider;
migrate execution of the plurality of repeating events, using one or more of the electronic credentials for the user, from the plurality of service providers to the different service provider in response to the user accepting the prompting;
detect a trigger indicating one or more of a potential and an actual security breach;
log into websites associated with each of the plurality of electronic credentials for the user using the plurality of electronic credentials;
locate one or more user interface elements associated with the electronic credentials on each of the websites; and
change each of the plurality of electronic credentials using the one or more user interface elements associated with the electronic credentials on each of the websites in response to detecting the trigger.

### Claim 15

A system comprising:
a backend server computer that selects one or more repeating events for at least a subset of a plurality of users based on aggregated sets of events for each of the plurality of users wherein the backend server computer is configured to:
detect a trigger indicating one or more of a potential and an actual security breach,
log into websites associated with events from the aggregated sets of events using electronic credentials for the plurality of users,
locate one or more user interface elements associated with the electronic credentials on each of the websites, and
change the electronic credentials for the plurality of users using the one or more user interface elements associated with the electronic credentials on each of the websites for the plurality of users in response to detecting the trigger; and
hardware devices comprising a plurality of event migration modules, the event migration modules configured to prompt at least the subset of users to migrate the selected one or more repeating events to one or more different service providers, one of the backend server computer and an event migration module of the plurality of event migration modules migrating one of the one or more repeating events to one of the one or more different service providers in response to a user of the at least the subset of the users accepting a prompt associated with the one of the one or more repeating events.

### Claim 16 (depends on 15)

The system of claim 15, wherein the backend server computer is configured to select a repeating event from the one or more repeating events based on a likelihood that one of the aggregated sets of events associated with the repeating event includes each event for one of the plurality of users of an event type of the one of the aggregated sets of events.

### Claim 17 (depends on 15)

The system of claim 15, wherein the backend server computer is configured to select a repeating event from the one or more repeating events based on an estimated value to the different service provider of migrating the repeating event to the different service provider, the estimated value determined based on values associated with the repeating event in one of the aggregated sets of events.