# US 12,182,279 B2 · Techniques for providing security-related information

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,182,279 B2
- Document ID: US12182279B2
- Status: Granted
- Kind: B2
- Application number: 17/825,643
- Filed: 2022-05-26
- Published: 2023-11-30
- Granted: 2024-12-31
- Earliest claimed: 2022-05-26
- Assignees: Vanta Inc.
- Applicants: Vanta Inc.
- Inventors: Sanjay Umesh Padval; Lauren Joyce Adiova; Ritvik Sunil Annam; Kevin Chen; Frederick Wonbae Chung; Walton Lawrence Seymour
- Web page: https://patentgrep.com/patent/US12182279B2

## CPC

- G06F 21/552: {involving long-term monitoring or reporting}
- G06F 21/604: {Tools and structures for managing or administering access control systems}
- G06F 21/577: {Assessing vulnerabilities and evaluating computer system security}
- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Techniques are described for a computing system to provide security-related information by (a) storing, by the computing system, security-related documents about a service provider; (b) monitoring, by the computing system, services provided by the service provider for a plurality of security-related features, and storing monitoring results; (c) receiving, by the computing system, a request to report security-related information about the service provider; (d) in response to receiving the request, creating a link for accessing the security-related documents and the monitoring results; and (e) in response to a user accessing the link, providing, by the computing system, the user with access to the security-related documents and monitoring results. A system, apparatus, and computer program product for performing this method and similar methods are also described.

## Claims

### Claim 1

A method, performed by a computing system, of providing security-related information, the method comprising:
storing, by the computing system, security-related documents about a service provider;
monitoring, by the computing system, services provided by the service provider for a plurality of security-related features, and storing monitoring results;
receiving, by the computing system, a request to report security-related information about the service provider;
in response to receiving the request, creating a link for accessing the security-related documents and the monitoring results, including associating the link with a security policy that limits use of the link, the security policy being an access point policy;
in response to a user accessing the link, providing, by the computing system, the user with access to the security-related documents and monitoring results, including associating the link with an access point from which the user initially accessed the link; and
subsequent to the user initially accessing the link, refusing access to the link from outside the access point.

### Claim 2 (depends on 1)

The method of claim 1 wherein monitoring the services provided by the service provider for the plurality of security-related features includes accessing computing resources of the service provider and confirming whether the services are in compliance with one or more of the plurality of security-related features.

### Claim 3 (depends on 2)

The method of claim 2 wherein storing the monitoring results is performed periodically.

### Claim 4 (depends on 2)

The method of claim 2 wherein monitoring for the plurality of security-related features includes monitoring the computing resources for security features, including:
access controls and
use of anti-malware software.

### Claim 5 (depends on 2)

The method of claim 2 wherein monitoring for the plurality of security-related features includes monitoring the computing resources for data privacy features, including:
deleting customer data upon customers unenrolling and
deleting customer data upon request.

### Claim 6 (depends on 2)

The method of claim of claim 2 wherein accessing the computing resources includes accessing a backend of the service provider for compliance with the one or more of the plurality of security-related features.

### Claim 7 (depends on 2)

The method of claim of claim 2 wherein accessing the computing resources includes checking for unexpired documents maintained by the service provider.

### Claim 8 (depends on 1)

The method of claim 1 wherein:
receiving the request includes receiving an e-mail address that identifies the user; and
creating the link further includes:
associating the link with the received e-mail address; and
sending the link to the received e-mail address.

### Claim 9 (depends on 1)

The method of claim 1 wherein:
the security policy is time-limited policy having an expiration; and
the method further comprises refusing access to the link after the expiration.

### Claim 10 (depends on 1)

The method of claim 1 wherein providing the user with access to the security-related documents and monitoring results includes:
generating a report page that summarizes the monitoring results and links to the security-related documents; and
sending the report page to the user.

### Claim 11

A computer program product comprising a non-transitory computer-readable storage medium storing a set of instructions, which, when executed by a computing system, caused the computing system to provide security-related information by:
storing security-related documents about a service provider;
monitoring services provided by the service provider for a plurality of security-related features, and storing monitoring results;
receiving a request to report security-related information about the service provider;
in response to receiving the request, creating a link for accessing the security-related documents and the monitoring results, including associating the link with a security policy that limits use of the link, the security policy being an access point policy; and
in response to a user accessing the link, providing the user with access to the security-related documents and the monitoring results, including associating the link with an access point from which the user initially accessed the link; and
subsequent to the user initially accessing the link, refusing access to the link from outside the access point.

### Claim 12 (depends on 11)

The computer program product of claim 11 wherein monitoring the services provided by the service provider for the plurality of security-related features includes accessing computing resources of the service provider and confirming whether the services are in compliance with one or more of the plurality of security-related features.

### Claim 13

A system comprising:
a network;
a service provider connected to the network; and
one or more computing devices including processing circuitry coupled to memory configured to provide security-related information by:
storing security-related documents about the service provider;
monitoring, via the network, services provided by the service provider for a plurality of security-related features, and storing monitoring results;
receiving, via the network, a request to report security-related information about the service provider;
in response to receiving the request, creating a link for accessing the security-related documents and the monitoring results, including associating the link with a security policy that limits use of the link, the security policy being an access point policy; and
in response to a user accessing the link, providing, via the network, the user with access to the security-related documents and the monitoring results, including associating the link with an access point from which the user initially accessed the link; and
subsequent to the user initially accessing the link, refusing access to the link from outside the access point.

### Claim 14 (depends on 13)

The system of claim 13 wherein monitoring the services provided by the service provider for the plurality of security-related features includes accessing computing resources of the service provider via the network and confirming whether the services are in compliance with one or more of the plurality of security-related features.

### Claim 15 (depends on 13)

The system of claim 13 wherein:
receiving the request includes receiving an e-mail address that identifies the user; and
creating the link further includes:
associating the link with the received e-mail address; and
sending the link to the received e-mail address.