# US 2021/0344509 A1 · System And Apparatus For Providing Authenticable Electronic Communication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0344509 A1
- Document ID: US20210344509A1
- Status: Published application
- Kind: A1
- Application number: 17/376,260
- Filed: 2021-07-15
- Published: 2021-11-04
- Earliest claimed: 2019-02-24
- Assignees: OnDefend Holdings, LLC
- Applicants: OnDefend Holdings, LLC
- Inventors: Benjamin Finke; Christopher Freedman
- Web page: https://patentgrep.com/patent/US20210344509A1

## CPC

- G06F 21/313: {using a call-back technique via a telephone network}
- H04L 9/3247: {involving digital signatures}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 21/36: by graphic or iconic representation
- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- H04L 51/18: Commands or executable codes
- H04L 51/212: using filtering or selective blocking
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/126: {the source of the received data}
- H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The present disclosure relates to security risk warning system that a recipient may acknowledge and act accordingly. Security insights may be provided explicitly in a security insight panel that may clearly identify vulnerabilities specific to a particular authenticable communication. This may limit risk that a recipient would ignore or not understand the risk. Security insights may be provided for a combination of indicated source, recipients, and content, such as links, text, attachments, and images. Security insights may be provided on site, such as on or proximate to the reviewed portions of the authenticable communication.

## Claims

### Claim 1

A computer-implemented method for providing security insights for an authenticable communication, the computer-implemented method comprising method steps of:
receiving an authenticable communication comprising an indicated source, at least one recipient, and content, wherein the authenticable communication comprises an electronic communication accessed through an access device;
assessing indicated source security risk;
developing security insights for the authenticable communication, wherein security insights comprise results of assessing content security risk and assessing indicated source security risk; and
providing a first security panel proximate to a view of the authenticable communication comprising at least security insights and a first security insight integration.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
identifying the content;
identifying content types within the content, wherein the content types comprise at least two or more of text, images, attachments, or links;
separating portions of the content by content types;
assessing content security risk of the content based on predefined criteria associated with content types; and
identifying the indicated source comprising at least a review of a sender email address.

### Claim 3 (depends on 1)

The method of claim 1, wherein the first security panel comprises an independent database for the retention of actionable items.

### Claim 4 (depends on 1)

The method of claim 1, wherein the first security panel duplicates at least a portion of the content.

### Claim 5 (depends on 1)

The method of claim 1, wherein the first security insight integration replicates a third party integration.

### Claim 6 (depends on 5)

The method of claim 5, wherein the third party integration comprises a calendaring application.

### Claim 7 (depends on 1)

The method of claim 1, wherein the first security insight integration provides external supplemental information related to the content.

### Claim 8 (depends on 7)

The method of claim 7, wherein the first security insight integration provides external links comprising prepopulated queries from the content.

### Claim 9

A risk assessment system comprising:
one or more processors;
one or more memory resources comprising:
an authentication mechanism database;
an indicated source database; and
wherein the one or more memory resources are connectable to one or more external device through a communications network, wherein at least one of the one or more external devices comprises an authenticable communication transmittal mechanism and at least one of the one or more external devices comprises an authenticable communication receiving mechanism, wherein the one or more memory resources are executable by the one or more processors to perform the steps of:
accessing an authenticable communication comprising an indicated source, at least one recipient, and content;
identifying the content;
identifying content types within the content, wherein the content types comprise at least two or more of text, images, attachments, or links;
separating portions of the content by content types;
assessing content security risk of the content based on predefined criteria associated with content types;
identifying the indicated source comprising at least a review of a sender email address;
assessing indicated source security risk;
developing content security insights and indicated source security insights for the authenticable communication, wherein security insights comprise results of assessing content security risk and assessing indicated source security risk; and
developing a security panel comprising at least content security insights, indicated source security insights, and a security insight integration.

### Claim 10 (depends on 9)

The system of claim 9, wherein the risk assessment system comprises an at least one external database integration.

### Claim 11 (depends on 10)

The system of claim 10, wherein the at least one external database integration comprises external compliance policies.

### Claim 12

A computer-implemented method for providing security insights for an authenticable communication, the computer-implemented method comprising method steps of:
receiving security insights for an authenticable communication comprising an indicated source, at least one recipient, and content, wherein the authenticable communication comprises an electronic communication accessed through an access device;
developing a first security panel comprising at least security insights for the authenticable communication and a first security insight integration; and
providing a security insight panel proximate to a view of the authenticable communication to at least one recipient, wherein the security insight panel comprises the first visualization.

### Claim 13 (depends on 12)

The method of claim 12, wherein the first security panel comprises integrated authentication.

### Claim 14 (depends on 12)

The method of claim 12, wherein the first security insight integration provides external supplemental information related to the content.

### Claim 15 (depends on 12)

The method of claim 12, wherein the security insight panel sources and inputs external information within the security insight panel.

### Claim 16 (depends on 12)

The method of claim 12, wherein the security insight panel receives information from two or more recipients.

### Claim 17 (depends on 16)

The method of claim 16, wherein the security insight panel aggregates information from two or more recipients.

### Claim 18 (depends on 12)

The method of claim 12, wherein the first security insight integration comprises location telemetry of received information.

### Claim 19 (depends on 19)

The method of claim 19, wherein the first security insight integration verifies device registration for known users.

### Claim 20 (depends on 19)

The method of claim 19, wherein the first security insight integration evaluates server hygienics to avoid malicious appearance of authenticated content.