Bot detection and access grant or denial based on bot identified
AssigneeBehaviosec Inc
InventorsIngo Deutschmann, Per Burstrom, Neil Costigan
Life of this patent
Estimating the term…
Abstract
A user accessing data from a server in an authenticated session is determined to be human, an authorized bot, or a non-authorized bot based on receipt of behaviometric information from the user's interactions and responses to and with the server. The user is then denied or granted continued access to receive data, such as financial data, after it is determined if the user is authorized to do so by way of comparing the behaviometric data to known prior behaviometric data for particular humans and bots in embodiments of the disclosed technology.
Claims20
A method of detecting a non-authorized bot, comprising steps of:
- sending data from a server disposed at a first network node at a first location on a packet switched network to an end user computer device disposed at a second network node at a second location on said packet switched network, aid end user computer device being associated with an end user, said data including an authentication request requiring said end user to provide authentication credentials to access secure data;
- at said server, receiving said authentication credentials from said end user computer;
- in response to determining that said received authentication credentials match credentials of said end user, sending at least some personal data from said server to said end user computer device;
- receiving additional data generated at said end user computer device and comparing characteristics, including timing, of said received additional data to bot signatures based on characteristics of data previously received from bots;
- based on said comparing, determining which bot generated said received additional data;
- continuing to grant access to and sending of said personal data to said end user computer device until a determination is made that said bot which generated said received additional data is a non-authorized bot.
A method of denying access to data, comprising steps of:
- sending data via a server disposed at a first network node sufficient to generate authentication input requests on an end user computer device residing at a second network node, said end user computer device being associated with an end user;
- receiving from said end user computer device, at said server, at least two responses to said authentication input requests, each of said at least two responses including at least one authentication credential of said end user;
- determining, at said server, that said received authentication credentials match credentials of said end user;
- subsequently to said determining, comparing timing of said responses relative to one another to response timing characteristics included in at least one pre-determined bot signature of at least one bot, thereby to identify a bot generating said responses;
- sending additional secure data from said server to said end user computer device, based on whether said identified bot is determined by said comparing to be an authorized bot or a non-authorized bot.
Dependencies are inferred from the claim text.