# US 11,113,759 B1 · Account vulnerability alerts > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,113,759 B1 - Document ID: US11113759B1 - Status: Granted - Kind: B1 - Application number: 15/999,515 - Filed: 2018-08-20 - Granted: 2021-09-07 - Earliest claimed: 2013-03-14 - Assignees: ConsumerInfo.com, Inc. - Applicants: ConsumerInfo.com, Inc. - Inventors: Mark Joseph Kapczynski; Michael John Dean; Herbert Harris Hunt, III - Web page: https://patentgrep.com/patent/US11113759B1 ## CPC - G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/1433: {Vulnerability analysis} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods are provided for assessing an account takeover risk for one or more accounts of an individual. The account security procedures for each of a number of services with which the user has an account may be analyzed. Publicly accessible information regarding the user may also be collected and analyzed. The collected information and security procedures may be compared in order to determine one or more vulnerabilities to hostile account takeover of one or more of the analyzed accounts. An alert may be generated regarding a determined takeover risk, which may include suggested actions for remedying the risk. ## Claims ### Claim 1 A computer system comprising: one or more computer processors configured to execute software instructions; a non-transitory computer readable medium storing software instructions executable by the one or more computer processors to cause the computer system to: scan one or more online networks for personal data associated with a user, wherein identification of personal data indicates a potential account takeover risk; identify a second online account that uses a first online account in association with an account recovery option for the second online account; based on the second online account using the first online account in association with the account recovery option, link the first online account with the second online account; identify a first vulnerability for the first online account to hostile account takeover based at least in part on the potential account takeover risk associated with identification of personal data of the user; identify a second vulnerability for the second online account based on the link; determine one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities; electronically provide the user with an alert regarding the one or more of the first or second vulnerabilities and an indication of the determined one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities; receive a selection of a remedial action; initiate the selected remedial action in response to user input, monitor at least one of the first or second online account to identify a change corresponding to the selected remedial action; identify the change based on the monitoring; determine that the change addresses the remedial action; and electronically provide the user with an updated alert including information indicative of the completion of the selected remedial action. ### Claim 2 (depends on 1) The computer system of claim 1, wherein the first or second vulnerabilities are determined based on collective information provided by a plurality of individuals that also have online accounts. ### Claim 3 (depends on 1) The computer system of claim 1, wherein the one or more online networks are identified at least in part by an automated search for information associated with the user across a plurality of data sources, wherein the personal data associated with the user includes at least one of a name, a user name or an email address. ### Claim 4 (depends on 1) The computer system of claim 1, wherein the first or second vulnerabilities are determined based at least in part by comparing the personal data with information that is accessible to at least one individual that is connected to the user within one or more social network services. ### Claim 5 (depends on 1) The computer system of claim 1, wherein determining the first vulnerability comprises determining that an answer to a security question asked in a password recovery procedure of the first online account is included in personal data accessible from the second online account. ### Claim 6 A computer-implemented method implemented by one or more computing devices configured with specific executable instructions, the method comprising: determining, by the one or more computing devices, account security procedures associated with a first online account of a user; identifying, by the one or more computing devices, a second online account that uses the first online account in association with an account security procedure for the second online account; based on the second online account using the first online account in association with the account security procedure, linking, by the one or more computing devices, the first online account with the second online account; identifying, by the one or more computing devices, personal data associated with the user accessible on a social network service; determining, by the one or more computing devices, one or more vulnerabilities to takeover of the first online account of the user, wherein the one or more vulnerabilities are determined based at least in part by determining that an answer to an account security question associated with the first online account of the user is included in the personal data associated with the user; identifying a second vulnerability for the second online account based on the link; determining one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities; generating, by the one or more computing devices, an alert regarding the determined one or more vulnerabilities of the first online account or the second vulnerability for the second online account for presentation to the user and an indication of the determined one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities; receiving a selection of a remedial action; initiating the selected remedial action in response to user input; monitoring at least one of the first or second online account to identify a change corresponding to the selected remedial action; identifying the change based on the monitoring; determining that the change addresses the remedial action; and electronically providing the user with an updated alert including information indicative of the completion of the selected remedial action. ### Claim 7 (depends on 6) The computer-implemented method of claim 6, wherein the account security procedures are determined based at least in part by an automated process for accessing (a) the first online account of the user and (b) online accounts of additional users. ### Claim 8 (depends on 7) The computer-implemented method of claim 7, wherein an account security procedure for the first online account of the user is determined to include an account security question previously presented to another user other than the user. ### Claim 9 (depends on 6) The computer-implemented method of claim 6, wherein the account security procedures include at least one of asking one or more account security questions, prompting the user for personal information, providing a password reset option, electronically communicating with a specified user device, or sending a message to a specified email address. ### Claim 10 (depends on 1) The computer system of claim 1, wherein the account recovery option comprises a password recovery option. ### Claim 11 (depends on 1) The computer system of claim 1, wherein the first vulnerability is identified based on feedback from other users regarding hacking attempts. ### Claim 12 (depends on 1) The computer system of claim 1, wherein the personal data is not available on the user online accounts, wherein scanning the one or more online networks is performed on online networks associated with first or second degree connections of the user. ### Claim 13 (depends on 6) The computer-implemented method of claim 6, wherein the account security procedures are determined based at least in part by feedback from other users. ### Claim 14 (depends on 13) The computer-implemented method of claim 13, wherein the second vulnerability is identified without identifying the account security procedure for the second online account. ### Claim 15 A non-transitory computer storage medium storing computer-executable instructions that, when executed by one or more processors, causes the one or more processors to at least: scan one or more online networks for personal data associated with a user, wherein identification of personal data indicates a potential account takeover risk; identify a second online account that uses a first online account in association with an account recovery option for the second online account; based on the second online account using the first online account in association with the account recovery option, link the first online account with the second online account; identify a first vulnerability for the first online account to hostile account takeover based at least in part on the potential account takeover risk associated with identification of personal data of the user; identify a second vulnerability for the second online account based on the link; determine one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities; electronically provide the user with an alert regarding the one or more of the first or second vulnerabilities and an indication of the determined one or more remedial actions that may be taken by the user with reference to one or more of the first or second vulnerabilities; receive a selection of a remedial action; initiate the selected remedial action in response to user input, monitor at least one of the first or second online account to identify a change corresponding to the selected remedial action; identify the change based on the monitoring; determine that the change addresses the remedial action; and electronically provide the user with an updated alert including information indicative of the completion of the selected remedial action. ### Claim 16 (depends on 13) The non-transitory computer storage medium of claim 13, wherein the alert comprises a selectable link that when selected by the user, causes display of additional information related to the one or more of the first or second vulnerabilities. ### Claim 17 (depends on 13) The non-transitory computer storage medium of claim 13, wherein the computer-executable instructions further causes the one or more processors to at least: store a data structure indicating the link between the first and second online account. ### Claim 18 (depends on 13) The non-transitory computer storage medium of claim 13, wherein the selected remedial action comprises changing a password for the first and second online accounts. ### Claim 19 (depends on 1) The computer system of claim 1, wherein linking the first online account with the second online account comprises the computer system storing an association between the first online account and the second online account in a database. ### Claim 20 (depends on 1) The computer system of claim 1, wherein the alert comprises information corresponding to the first vulnerability, the second vulnerability, the first online account, and the second online account.