Back to results
US 11,146,590 B2Granted
Omni-channel end-point security
AssigneeNCR Corporation
InventorsRamesh Vaddadi, Krishna Kumari Rudraraju
Life of this patent
Estimating the term…
Abstract
An Omni-channel security manager is provided. The Omni-channel security manager is configured to: receive selections for domain/channel specific security applications and deploy security agents to end-point devices. The security agents interact with the Omni-channel security manager to install, initiate, manage, and monitor the domain/channel specific security applications on the end-point devices.
Claims20
A method, comprising:
- via a processor of a server:
- receiving a selection for a security application and an end-point device;
- configuring the security application for the end-point device as a domain/channel specific security application for a domain/channel associated with the end-point device, wherein configuring further includes configuring a process flow of the security application to identify within the process flow where security is enforced within the process flow during end-point device boots, during a pre-boot process of the endpoint device and when a specific operation is attempted to be processed on the end-point device during a transaction process flow of a transaction that is being performed using the end-point device;
- deploying a security agent to the end-point device, wherein deploying further includes installing and initiating, by the security agent, the domain/channel specific security application on the end-point device, and wherein deploying the security agent further includes configuring the security agent to dynamically check a digital signature of the domain/channel specific security application during processing of the domain/channel specific security application on the end-point device and when the digital signature is unable to be validated removing the domain/channel specific security application from memory of the end-point device and shutting down other processes of the end-point device;
- and
- monitoring and managing the security application for the domain/channel associated with the end-point device along with other deployed security applications for other domains/channels through a single point of management performed by the processor of the server.
3 more elements
A method, comprising:
- obtaining, by a security agent deployed on an end-point device and executing on the end-point device, a domain/channel specific security application from an Omni-channel security manager, wherein the end-point device is a peripheral device that is interfaced to a second device as a peripheral of second device;
- installing and initiating, by the security agent, the domain/channel specific security application on the end-point device;
- enforcing, by the security agent, a security policy, based on monitoring of processing associated with the domain/channel specific security application that is configured within a process flow the domain/channel specific security application associated with end-point device boots, a pre-boot process of the end-point device, and when a specific operation is attempted to be processed on the end-point device during a transaction process flow of a transaction that is being performed using the end-point device;
- dynamically checking, by the security agent, a digital signature of the domain/channel specific security application during processing of the domain/channel specific security application on the end-point device;
- and
- removing, by the security agent, the domain/channel specific security application from memory of the end-point device and shutting down other processes on the end-point device when the digital signature is unable to be validated.
3 more elements
A system, comprising:
- a server configured to execute an Omni-channel security manager;
- and
- at least one end-point device configured to execute a security agent;
- wherein the Omni-channel security manager is configured to:
- (i) receive a selection to a security application for the at least one end-point device, (ii) configure the security application as a domain/channel specific security application associated with a domain/channel of the at least one end-point device and configure a process flow of the security application associated with end-point device boots, a pre-boot process of the end-point device, and when a specific operation is attempted to be processed on the end-point device during a transaction process flow of a transaction that is being performed using the end-point device, (iii) deploy the security agent to the at least one end-point device, and (iv) monitor and manage the security agent for the domain/channel associated with the at least one end-point device along with other deployed security agents for other domains/channels through a single point of management performed by the Omni-channel security manager of the server;
- wherein the security agent configured to:
- (i) obtain the domain/channel specific security application from the Omni-channel security manager once deployed to the at least one end-point device, (ii) initiate the domain/channel specific security application on the at least one end-point device, (iii) enforce a security policy in response to monitoring processing of the domain/channel specific security application on the at least one end-point device, wherein the security policy includes locking down menus, operations, and windows that are selectable and viewable from the at least one end-point device when the security policy is determined by the security agent to have been violated on the end-point device, (iv) dynamically check a digital signature of the domain/channel specific security application during processing of the domain/channel specific security application on the at least one end-point device, and (v) removing the domain/channel specific security application from memory of the end-point device and shut down other processes on the at least one end-point device when the digital signature is unable to be validated.
4 more elements
Dependencies are inferred from the claim text.