# US 2017/0286700 A1 · Systems and methods for analyzing, assessing and controlling trust and authentication in applications and devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0286700 A1 - Document ID: US20170286700A1 - Status: Published application - Kind: A1 - Application number: 15/474,831 - Filed: 2017-03-30 - Published: 2017-10-05 - Earliest claimed: 2016-03-30 - Assignees: The Privacy Factor, LLC - Applicants: The Privacy Factor, LLC - Inventors: Mark A. Sartor - Web page: https://patentgrep.com/patent/US20170286700A1 ## CPC - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/44: Program or device authentication - G06F 21/45: Structures or tools for the administration of authentication - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - G06F 2221/2101: Auditing as a secondary aspect - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods for receiving a request to analyze trust of a client system and perform actions based on a client trust profile. A trust rating server device receives a request from a client computing device to analyze the trust on the device. The request identifies at least one credential or certificate installed on the device for example. The credential or certificate is obtained and analyzed to identify key information that relates to trust, such as level of encryption, country or entity of origin, duration of credential, certifying authority, etc. A rating is established using the key information and compared to a profile or other metric. One or more credentials or certifications may be blocked, disabled, enabled or removed based on a user's profile. Trust credentials are continuously monitored on the device for changes, and new credentials are blocked that do not meet thresholds established in the user's profile. ## Claims ### Claim 1 A system comprising: one or more processors; and memory storing instructions that, when executed by the one or more processors, cause the system to perform: receiving a request to analyze trust of a client system; identifying, based on the request, a set of credentials installed on the client system; for at least one credential of the set of credentials identified based on the request: (i) determining whether the credential has a previously generated credential trust rating; (ii) if at least a determination is made that the credential does not have a previously generated credential trust rating, then (1) identifying one or more credential parameters of the credential; and (2) generating a new credential trust rating for the credential based on a respective level of trust risk associated with each respective credential parameter of the one or more credential parameters; (iii) if at least a determination is made that the credential has a previously generated trust rating, then retrieving the previously generated credential trust rating for the credential from a datastore; generating a first aggregate credential trust rating based on any of the new credential trust ratings and the previously generated credential trust ratings for the set of credentials installed on the client system; and establishing a mapping or other connection between an application or website and one or more credentials of the set of credentials installed on the client system. ### Claim 2 (depends on 1) The system of claim 1, wherein the one or more credential parameters include any of an encryption level, a history of adverse events associated with the credential, or a history of adverse events associated with an issuer of the credential. ### Claim 3 (depends on 1) The system of claim 1, wherein the instructions further cause the system to perform: determining a client system trust rating of the client system based on the first aggregate credential trust rating; comparing the first aggregate credential trust rating with a threshold value; and performing one or more trust actions based on the comparison. ### Claim 4 (depends on 3) The system of claim 3, wherein the one or more trust actions include any of generating an alert indicating the client system trust rating, removing at least one credential of the set of credentials, disabling at least one credential of the set of credentials, or disabling an application or applications that are using at least one credential of the set of credentials. ### Claim 5 (depends on 1) The system of claim 1, wherein the instructions further cause the system to perform: comparing each of the credential trust ratings with a threshold value; and performing one or more trust actions based on the comparison. ### Claim 6 (depends on 5) The system of claim 5, wherein the one or more trust actions include any of generating an alert indicating at least one of the credential trust ratings, removing at least one credential of the set of credentials, disabling at least one credential of the set of credentials, or disabling an application or applications that are using at least one credential of the set of credentials. ### Claim 7 (depends on 1) The system of claim 1, wherein the instructions further cause the system to perform: detecting a trigger event; intercepting the trigger event; identifying a second set of credentials associated with the trigger event; for at least one credential of the second set of credentials: (i) determining whether the credential has a previously generated credential trust rating; (ii) if at least a determination is made that the credential does not have a previously generated credential trust rating, then (1) identifying one or more credential parameters of the credential; and (2) generating a new credential trust rating for the credential based on a respective level of trust risk associated with each respective credential parameter of the one or more credential parameters; (iii) if at least a determination is made that the credential has a previously generated trust rating, then retrieving the previously generated credential trust rating for the credential from a datastore; generating a second aggregate credential trust rating based on any of the new credential trust ratings and the previously generated credential trust ratings for the second set of credentials associated with the trigger event; and performing a trust action based on the second aggregate credential trust rating. ### Claim 8 (depends on 7) The system of claim 7, wherein the trigger event comprises a request to install an application on the client system, and the trust action comprises blocking the request to install the application on the client system or allowing the request to install the application on the client system. ### Claim 9 (depends on 7) The system of claim 7, wherein the second aggregate credential trust rating is generated based on a trust profile. ### Claim 10 (depends on 1) The system of claim 1, wherein the instructions further cause the system to perform: generating a second aggregate credential trust rating for a second set of credentials installed on a second client system; generating a user trust rating based on the first aggregate credential trust rating and the second aggregate credential trust rating; and performing a trust action based on the user trust rating. ### Claim 11 (depends on 1) The system of claim 1, wherein the instructions further cause the system to perform: detecting a change to one or more credentials of the set of credentials; and generating an alert indicating the change to the one or more credentials of the set of credentials. ### Claim 12 A method implemented by a computing system including one or more physical processors and storage media storing machine-readable instructions, the method comprising: receiving a request to analyze trust of a client system; identifying, based on the request, a set of credentials installed on the client system; for at least one credential of the set of credentials identified based on the request: (i) determining whether the credential has a previously generated credential trust rating; (ii) if at least a determination is made that the credential does not have a previously generated credential trust rating, then (1) identifying one or more credential parameters of the credential; and (2) generating a new credential trust rating for the credential based on a respective level of trust risk associated with each respective credential parameter of the one or more credential parameters; (iii) if at least a determination is made that the credential has a previously generated trust rating, then retrieving the previously generated credential trust rating for the credential from a datastore; generating a first aggregate credential trust rating based on any of the new credential trust ratings and the previously generated credential trust ratings for the set of credentials installed on the client system; and establishing a mapping or other connection between an application or website and one or more credentials of the set of credentials installed on the client system. ### Claim 13 (depends on 12) The method of claim 12, wherein the one or more credential parameters include any of an encryption level, a history of adverse events associated with the credential, or a history of adverse events associated with an issuer of the credential. ### Claim 14 (depends on 12) The method of claim 12, further comprising: determining a client system trust rating of the client system based on the first aggregate credential trust rating; comparing the first aggregate credential trust rating with a threshold value; and performing one or more trust actions based on the comparison. ### Claim 15 (depends on 14) The method of claim 14, wherein the one or more trust actions include any of generating an alert indicating the client system trust rating, removing at least one credential of the set of credentials, disabling at least one credential of the set of credentials, or disabling an application or applications that are using at least one credential of the set of credentials. ### Claim 16 (depends on 12) The method of claim 12, further comprising: comparing each of the credential trust ratings with a threshold value; and performing one or more trust actions based on the comparison. ### Claim 17 (depends on 16) The method of claim 16, wherein the one or more trust actions include any of generating an alert indicating at least one of the credential trust ratings, removing at least one credential of the set of credentials, disabling at least one credential of the set of credentials, or disabling an application or applications that are using at least one credential of the set of credentials. ### Claim 18 (depends on 12) The method of claim 12, further comprising: detecting a trigger event; intercepting the trigger event; identifying a second set of credentials associated with the trigger event; for at least one credential of the second set of credentials: (i) determining whether the credential has a previously generated credential trust rating; (ii) if at least a determination is made that the credential does not have a previously generated credential trust rating, then (1) identifying one or more credential parameters of the credential; and (2) generating a new credential trust rating for the credential based on a respective level of trust risk associated with each respective credential parameter of the one or more credential parameters; (iii) if at least a determination is made that the credential has a previously generated trust rating, then retrieving the previously generated credential trust rating for the credential from a datastore; generating a second aggregate credential trust rating based on any of the new credential trust ratings and the previously generated credential trust ratings for the second set of credentials associated with the trigger event; and performing a trust action based on the second aggregate credential trust rating. ### Claim 19 (depends on 18) The method of claim 18, wherein the trigger event comprises a request to install an application on the client system, and the trust action comprises blocking the request to install the application on the client system or allowing the request to install the application on the client system. ### Claim 20 (depends on 12) The method of claim 12, further comprising: detecting a change to one or more credentials of the set of credentials; and generating an alert indicating the change to the one or more credentials of the set of credentials. ### Claim 21 A non-transitory computer readable medium comprising instructions that, when executed, cause one or more processors to perform: receiving a request to analyze trust of a client system; identifying, based on the request, a set of credentials installed on the client system; for at least one credential of the set of credentials identified based on the request: (i) determining whether the credential has a previously generated credential trust rating; (ii) if at least a determination is made that the credential does not have a previously generated credential trust rating, then (1) identifying one or more credential parameters of the credential; and (2) generating a new credential trust rating for the credential based on a respective level of trust risk associated with each respective credential parameter of the one or more credential parameters; (iii) if at least a determination is made that the credential has a previously generated trust rating, then retrieving the previously generated credential trust rating for the credential from a datastore; generating an aggregate credential trust rating based on any of the new credential trust ratings and the previously generated credential trust ratings for the set of credentials installed on the client system; and establishing a mapping or other connection between an application or website and one or more credentials of the set of credentials installed on the client system.