Risk analysis using port scanning for multi-factor authentication
AssigneeQomplx LLC
InventorsJason Crabtree, Andrew Sellers
Life of this patent
Estimating the term…
Abstract
A system for risk analysis using port scanning for multi-factor authentication having a multi-dimensional time series data server configured to monitor and record a network's traffic data and to serve the traffic data to other modules and a directed computational graph module configured to scan open ports on connection destinations, analyze the scan results, and determine a verification score needed before granting access based at least in part on the analysis of the received responses. A plurality of verification methods build up a user's verification score to required level to gain access.
Claims14
A system for risk analysis using port scanning for multi-factor authentication, comprising:
- a multi-dimensional time series data server comprising a memory, a processor, and a plurality of programming instructions stored in the memory thereof and operable on the processor thereof, wherein the programmable instructions, when operating on the processor, cause the processor to:
- monitor and store a network's traffic data;
- and
- serve traffic data to other modules;
- and
- a directed computational graph module comprising a memory, a processor, and a plurality of programming instructions stored in the memory thereof and operable on the processor thereof, wherein the programmable instructions, when operating on the processor, cause the processor to:
- receive traffic data from the multi-dimensional time series data server;
- identify a connection attempt from a user device to a destination device with unknown risk potential;
- scan a plurality of network ports at the destination device;
- analyze the scan results to determine at least a plurality of open ports at the destination device and a plurality of closed ports at the destination device;
- and
- determine a required verification score for granting access to a network resource based at least in part on the open and closed ports on the destination device;
- wherein a plurality of verification methods is used to build up a user's verification score to the required verification score in order for the user to gain access to the destination device.
A method for risk analysis using port scanning for multi-factor authentication, comprising the steps of:
- (a) using a computing device with a processor and a memory, monitoring and recording a network's traffic data for the purpose of providing a stateful, evolving baseline of authentication patterns, with a multi-dimensional time series data server;
- (b) serving the traffic data to other modules, with the multi-dimensional time series data server;
- (c) receiving the traffic data from the multi-dimensional time series data server, at a directed computation graph module;
- (d) identifying a connection attempt from a user device to a destination device with unknown risk potential;
- (e) scanning a plurality of network ports at the destination device;
- (f) analyzing the scan results to determine at least a plurality of open ports at the destination device and a plurality of closed ports at the destination device;
- and
- (g) determining a required verification score for granting access to a network resource based at least in part on the open and closed ports on the destination device;
- and
- (h) requiring user of the user device to use a plurality of verification methods to earn enough verification score in order to gain access to the destination device.
Dependencies are inferred from the claim text.