Back to results
US 10,885,165 B2Granted
Account monitoring
AssigneeForescout Technologies, Inc.
InventorsChunhui Zhan, Siying Yang
Life of this patent
Estimating the term…
Abstract
Systems, methods, and related technologies for account access monitoring are described. In certain aspects, a login request associated with a device can be analyzed and a score determined. The score and a threshold can be used to determine whether to initiate an action.
Claims19
A method comprising:
- generating a data structure comprising physical location and login information for a plurality of accounts;
- accessing the data structure for information associated with a login request of an account, wherein the login request is associated with a physical location, and wherein the information associated with the login request comprises a login duration;
- determining whether an initial phase of monitoring the account of the plurality of accounts associated with the login request is in progress;
- in response to the initial phase being determined to be in progress, comparing a portion of the information associated with the login request with information associated with a previous login request;
- determining a score associated with the login request;
- accessing a threshold;
- determining, by a processing device, whether to initiate a security action based on the score associated with the login request and the threshold;
- and
- storing the information associated with the login request.
6 more elements
A system comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- generate a data structure comprising physical location and login information for a plurality of accounts;
- access the data structure for information associated with a login request of an account, wherein information associated with the login request comprises a physical location, and wherein the information associated with the login request comprises a login duration;
- determine whether an initial phase of monitoring the account of the plurality of accounts associated with the login request is in progress;
- in response to the initial phase being determined to be in progress, compare a portion of the information associated with the login request with information associated with a previous login request, wherein the information associated with the previous login request comprises a one or more security properties of a device associated with the login request;
- determine a score associated with the login request based on the information associated with the previous login request;
- access a threshold;
- determine whether to initiate an action based on the score associated with the login request and the threshold;
- and
- store the information associated with the login request.
9 more elements
A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
- generate a data structure comprising physical location and login information for a plurality of accounts;
- access the data structure for information associated with a login request of an account, wherein information associated with the login request comprises a physical location, and wherein the information associated with the login request comprises a login duration;
- determine whether an initial phase of monitoring the account of the plurality of accounts associated with the login request is in progress;
- in response to the initial phase being determined to be in progress, compare a portion of the information associated with the login request with information associated with a previous login request, wherein the information associated with the login request comprises a login information entry time;
- determine a score associated with the login request based on the information associated with the previous login request;
- access a threshold;
- determine whether to initiate a security action based on the score associated with the login request and the threshold;
- and
- store the information associated with the login request.
6 more elements
Dependencies are inferred from the claim text.