System and apparatus for providing authenticable electronic communication
OwnerBenjamin Finke, Christopher Freedmaninventors
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to security risk warning system that a recipient may acknowledge and act accordingly. Security insights may be provided explicitly in a security insight panel that may clearly identify vulnerabilities specific to a particular authenticable communication. This may limit risk that a recipient would ignore or not understand the risk. Security insights may be provided for a combination of indicated source, recipients, and content, such as links, text, attachments, and images. Security insights may be provided on site, such as on or proximate to the reviewed portions of the authenticable communication.
Claims19
A computer-implemented method for confining an authenticable communication until it is authenticated, the computer-implemented method comprising:
- accessing an authenticable communication comprising an indicated source, at least one recipient, and content, wherein the authenticable communication comprises an electronic communication accessible via an access device;
- identifying the indicated source;
- identifying the content;
- assessing indicated source security risk;
- assessing content security risk;
- determining whether at least one of:
- the content, the at least one recipient, and the indicated source comprises at least one security risk;
- and
- redirecting the authenticable communication to a separated server, wherein the separated server comprises at least one independent confinement database for storage and retention of authenticable communications determined to comprise at least one security risk, wherein the at least one independent confinement database is logically and physically separate and independent from all other databases.
A risk assessment system comprising:
- one or more processors;
- one or more memory resources comprising:
- an authentication mechanism database;
- an indicated source database;
- a confinement database;
- and
- wherein the one or more memory resources are connectable to one or more external devices through a communications network, wherein at least one of the one or more external devices comprises an authenticable communication transmittal mechanism and at least one of the one or more external devices comprises an authenticable communication receiving mechanism, wherein the confinement database is contained within a separated server and is logically and physically separate and independent from all other databases, wherein the one or more memory resources are executable by the one or more processors to perform the steps of:
- accessing an authenticable communication comprising an indicated source, at least one recipient, and content;
- determining whether at least one of:
- the content, the at least one recipient, and the indicated source comprises at least one security risk;
- redirecting the authenticable communication to the separated server;
- identifying the content;
- identifying content types within the content, wherein the content types comprise at least two or more of text, images, attachments, or links;
- separating portions of the content by content types;
- assessing content security risk of the content based on predefined criteria associated with the content types;
- identifying the indicated source comprising at least a review of a sender email address;
- assessing indicated source security risk;
- developing content security insights and indicated source security insights for the authenticable communication, wherein security insights comprise results of assessing content security risk and assessing indicated source security risk;
- generating a rendering of the authenticable communication to create proxy content;
- and
- presenting the proxy content to the at least one recipient, wherein the proxy content comprises at least a portion of the content and at least one of:
- the content security insights and the indicated source security insights.
Dependencies are inferred from the claim text.