Machine learning for identity access management
AssigneeSoftWarfare, LLC
InventorsWyatt O'Neill Cobb, Zachary Lewis Jovic Misic
Life of this patent
Estimating the term…
Abstract
A computer readable medium, a system, and a method for providing data security through identity access management using a transaction classifier to classify transactions according to a set of transaction data associated with the transaction and mitigate abnormal transactions. The transaction classifier is trained using a set of training data and updated after each transaction. The identity access management may also include a mitigation policy that is used to determine a mitigation technique for each transaction.
Claims20
A method of updating a mitigation policy of an identity access management system, the method comprising:
- receiving transaction data relating to a transaction for an authorized user account;
- determining a transaction type of the transaction based on the transaction data;
- identifying an abnormality associated with the transaction based on the transaction data using a machine learning model trained with user data;
- determining a threat level associated with the transaction based on the transaction data and the transaction type;
- responsive to identifying the abnormality, determining a mitigation procedure from the mitigation policy based on the transaction type of the transaction and the threat level associated with the transaction;
- applying the mitigation procedure to the transaction based on the transaction type;
- storing the transaction data, an indication of the mitigation procedure, and an indication of the threat level associated with the transaction in a transaction data store;
- and
- updating the mitigation policy based on the transaction data and the transaction type of the transaction.
An identity access management system comprising:
- at least one processor;
- and
- one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the at least one processor, perform a method of updating a mitigation policy of the identity access management system, the method comprising:
- receiving transaction data relating to a transaction for a user account;
- determining a transaction type of the transaction based on the transaction data;
- identifying an abnormality associated with the transaction based on the transaction data using a machine learning model trained with user data;
- determining a threat level associated with the transaction based on the transaction data and the transaction type;
- responsive to identifying the abnormality, determining a mitigation procedure from the mitigation policy based on the transaction type of the transaction and the threat level associated with the transaction;
- applying the mitigation procedure to the transaction based on the transaction type;
- and
- updating the mitigation policy based on the transaction data and the transaction type of the transaction.
One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by at least processor, perform a method of updating a mitigation policy of an identity access management system, the method comprising:
- receiving transaction data relating to a transaction for a user account;
- determining a transaction type of the transaction based on the transaction data;
- identifying an abnormality associated with the transaction based on the transaction data using a machine learning model trained with user data;
- determining a threat level associated with the transaction based on the transaction data and the transaction type;
- responsive to identifying the abnormality, determining a mitigation procedure from the mitigation policy based on the transaction type of the transaction and the threat level associated with the transaction;
- applying the mitigation procedure to the transaction based on the transaction type;
- flagging the transaction and the user account based on the transaction type of the transaction and the threat level associated with the transaction;
- storing the transaction data, an indication of the mitigation procedure, and an indication of the threat level associated with the transaction in a transaction data store;
- and
- updating the mitigation policy based on the transaction data and the transaction type of the transaction.
Dependencies are inferred from the claim text.