User behavior profile in a blockchain
AssigneeForcepoint LLC
InventorsRichard Anthony Ford, Brandon L. Swafford, Christopher Brian Shirey, Matthew P. Moynahan, Richard Heath Thompson
Life of this patent
Estimating the term…
Abstract
A method, system and computer-usable medium are disclosed for generating a cyber behavior profile, comprising: monitoring user interactions between a user and an information handling system; converting the user interactions and the information about the user into electronic information representing the user interactions; generating a unique cyber behavior profile based upon the electronic information representing the user interactions and the information about the user; and, storing information relating to the unique cyber behavior profile in a behavior blockchain.
Claims20
A computer-implementable method for generating a cyber behavior profile, comprising:
- monitoring electronically-observable user behavior;
- converting the electronically-observable user behavior into electronic information representing the electronically-observable user behavior, the electronic information representing the electronically-observable user behavior comprising respective user behavior elements;
- generating a user behavior profile based upon the electronic information representing the electronically-observable user behavior;
- storing information relating to the user behavior profile in a behavior blockchain;
- determining whether a user behavior is suspect;
- generating a user behavior block representing the suspect user behavior;
- and,
- appending the user behavior block to the behavior blockchain, the user behavior block comprising a known good user behavior representation when the user behavior is not suspect and a suspect user behavior representation when the user behavior is suspect.
A system comprising:
- a processor;
- a data bus coupled to the processor;
- and
- a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
- monitoring electronically-observable user behavior;
- converting the electronically-observable user behavior into electronic information representing the electronically-observable user behavior, the electronic information representing the electronically-observable user behavior comprising respective user behavior elements;
- generating a user behavior profile based upon the electronic information representing the electronically-observable user behavior;
- storing information relating to the user behavior profile in a behavior blockchain;
- determining whether a user behavior is suspect;
- generating a user behavior block representing the suspect user behavior;
- and,
- appending the user behavior block to the behavior blockchain, the user behavior block comprising a known good user behavior representation when the user behavior is not suspect and a suspect user behavior representation when the user behavior is suspect.
A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:
- monitoring electronically-observable user behavior;
- converting the electronically-observable user behavior into electronic information representing the electronically-observable user behavior, the electronic information representing the electronically-observable user behavior comprising respective user behavior elements;
- generating a user behavior profile based upon the electronic information representing the electronically-observable user behavior;
- storing information relating to the user behavior profile in a behavior blockchain;
- determining whether a user behavior is suspect;
- generating a user behavior block representing the suspect user behavior;
- and,
- appending the user behavior block to the behavior blockchain, the user behavior block comprising a known good user behavior representation when the user behavior is not suspect and a suspect user behavior representation when the user behavior is suspect.
Dependencies are inferred from the claim text.