US 11,455,641 B1 · System and method to identify user and device behavior abnormalities to continuously measure transaction risk

Abstract

Aspects of the disclosure provide techniques for using behavior based information for providing and restricting access to a secure website, or computer network and its assets to a user. Components of the system may include the following. Client remote computing device, network and browser unique attribute data collection and fingerprinting. Method for capturing user habits and fingerprinting with ability to detect abnormalities through AIML using mobile and wearable device applications. System for detection of normality of user behavior based on habits, and cyber transactions, device access and determining a confidence score associated with each transaction. Method for calculating individual transaction risk based on contextual factors such as user behavior, device, browser and the network traffic and request for authentication by account owner when risk greater than allowed threshold. Method and system to identify user device, browser, and behavior unique attributes, storing and later matching to infer change upon consequent transactions and measuring transaction risk through a search and match against classified set of static and dynamic attributes using a user, browser traffic, device search and match engine.

Claims18

Dependent claims

A system for using user entity context and behavior information for providing and restricting access to a secure computer network comprising:

a plurality of hardware processors coupled to a network interface, the hardware processors configured to:
capture behavioral and contextual factors of a user entity interacting with a client device used to access cloud services, wherein the behavioral and contextual factors include the user entity behavior and habits, client device characteristics, client device browser characteristics and network traffic when transacting and not transacting with the secure computer network;
calculate a transaction risk and confidence score of a user entity, the client device and the client device browser for a transaction request based on the user entity behavior and habits and client device characteristics obtained from the user entity when transacting and not transacting with the secure computer network;
and
compare the transaction risk and confidence score to a predetermined threshold required risk score to determine whether the transaction request is automatically approved and when not approved, send an out of band authentication request to a user entity device to authenticate and authorize access.

2 more elements

A method for using user entity context and behavior information for providing and restricting access to a secure computer network comprising:

capturing behavioral and contextual factors of a user entity interacting with a client device used to access cloud services, wherein the behavioral and contextual factors include the user entity behavior and habits, client device characteristics, client device browser characteristics and network traffic when transacting and not transacting with the secure computer network;
calculating a transaction risk and confidence score of a user entity, the client device and the client device browser for a transaction request based on the user entity behavior and habits and client device characteristics obtained from the user entity when transacting and not transacting with the secure computer network;
and
comparing the transaction risk and confidence score to a predetermined threshold required risk score to determine whether the transaction request is automatically approved and when not approved, send an out of band authentication request to a user entity device to authenticate and authorize access.

1 more element

Dependencies are inferred from the claim text.

System and method to identify user and device behavior abnormalities to continuously measure transaction risk

Life of this patent

System and method to identify user and device behavior abnormalities to continuously measure transaction risk

Life of this patent

Abstract

Claims18