US 11,113,759 B1Granted

Account vulnerability alerts

AssigneeConsumerInfo.com, Inc.

InventorsMark Joseph Kapczynski, Michael John Dean, Herbert Harris Hunt, III

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods are provided for assessing an account takeover risk for one or more accounts of an individual. The account security procedures for each of a number of services with which the user has an account may be analyzed. Publicly accessible information regarding the user may also be collected and analyzed. The collected information and security procedures may be compared in order to determine one or more vulnerabilities to hostile account takeover of one or more of the analyzed accounts. An alert may be generated regarding a determined takeover risk, which may include suggested actions for remedying the risk.

Claims20

Dependent claims

A computer system comprising:

one or more computer processors configured to execute software instructions;
a non-transitory computer readable medium storing software instructions executable by the one or more computer processors to cause the computer system to:
scan one or more online networks for personal data associated with a user, wherein identification of personal data indicates a potential account takeover risk;
identify a second online account that uses a first online account in association with an account recovery option for the second online account;
based on the second online account using the first online account in association with the account recovery option, link the first online account with the second online account;
identify a first vulnerability for the first online account to hostile account takeover based at least in part on the potential account takeover risk associated with identification of personal data of the user;
identify a second vulnerability for the second online account based on the link;
determine one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities;
electronically provide the user with an alert regarding the one or more of the first or second vulnerabilities and an indication of the determined one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities;
receive a selection of a remedial action;
initiate the selected remedial action in response to user input,
monitor at least one of the first or second online account to identify a change corresponding to the selected remedial action;
identify the change based on the monitoring;
determine that the change addresses the remedial action;
and
electronically provide the user with an updated alert including information indicative of the completion of the selected remedial action.

13 more elements

A computer-implemented method implemented by one or more computing devices configured with specific executable instructions, the method comprising:

determining, by the one or more computing devices, account security procedures associated with a first online account of a user;
identifying, by the one or more computing devices, a second online account that uses the first online account in association with an account security procedure for the second online account;
based on the second online account using the first online account in association with the account security procedure, linking, by the one or more computing devices, the first online account with the second online account;
identifying, by the one or more computing devices, personal data associated with the user accessible on a social network service;
determining, by the one or more computing devices, one or more vulnerabilities to takeover of the first online account of the user, wherein the one or more vulnerabilities are determined based at least in part by determining that an answer to an account security question associated with the first online account of the user is included in the personal data associated with the user;
identifying a second vulnerability for the second online account based on the link;
determining one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities;
generating, by the one or more computing devices, an alert regarding the determined one or more vulnerabilities of the first online account or the second vulnerability for the second online account for presentation to the user and an indication of the determined one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities;
receiving a selection of a remedial action;
initiating the selected remedial action in response to user input;
monitoring at least one of the first or second online account to identify a change corresponding to the selected remedial action;
identifying the change based on the monitoring;
determining that the change addresses the remedial action;
and
electronically providing the user with an updated alert including information indicative of the completion of the selected remedial action.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/999,515Filed 20 Aug 2018 · continuation
Priority: 14 Mar 2013
Granted: 7 Sep 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06Q 40/02
Finance; Insurance; Tax strategies; Processing of corporate or income taxes: banking, e.g. interest calculation or account maintenance
G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
H04L 63/083
For authentication of entities: using passwords
H04L 63/1433
For detecting or protecting against malicious traffic: vulnerability analysis

Family

Application13/829,912Parent of this continuation · filed 14 Mar 2013
US 10,102,570 B1Parent of this continuation
US 11,113,759 B1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key