# US 2021/0344683 A1 · Systems and methods for data security notification generation > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0344683 A1 - Document ID: US20210344683A1 - Status: Published application - Kind: A1 - Application number: 17/372,641 - Filed: 2021-07-12 - Published: 2021-11-04 - Earliest claimed: 2020-03-24 - Assignees: The Toronto-Dominion Bank - Applicants: The Toronto-Dominion Bank - Inventors: Milos DUNJIC; Anthony Haituyen NGUYEN; David Samuel TAX - Web page: https://patentgrep.com/patent/US20210344683A1 ## CPC - H04L 63/102: {Entity profiles} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/105: {Multiple levels of security} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 67/306: User profiles - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A server comprises a communications module; a processor coupled to the communications module; and a memory coupled to the processor, the memory storing processor-executable instructions which, when executed, configure the processor to receive, via the communications module and from a remote computing device, user input indicating a response to one or more prompts; generate an aspirational profile for a user based at least on the received user input; receive, via the communications module and from a monitoring application installed on the remote computing device, monitoring data; generate a behavior profile for the user based at least on the monitoring data; and when the behavior profile is misaligned with the aspirational profile, send, via the communications module and to the remote computing device, a notification indicating that the behavior profile is misaligned with the aspirational profile. ## Claims ### Claim 1 A server comprising: a communications module; a processor coupled to the communications module; and a memory coupled to the processor, the memory storing processor-executable instructions which, when executed, configure the processor to: generate, based on received input, an aspirational profile defining a level of acceptable risk; generate a behavior profile based on monitoring data that includes a list of applications installed on a remote computing device and levels of permission granted to the installed applications; and when the behavior profile is misaligned with the aspirational profile, modify one of the aspirational profile or the levels of permission granted to one or more of the installed applications. ### Claim 2 (depends on 1) The server of claim 1, wherein prior to modifying the one of the aspirational profile or the levels of permission granted to the one or more of the installed applications, the processor-executable instructions, when executed, further configure the processor to: send, via the communications module and to the remote computing device, a notification indicating that the behavior profile is misaligned with the aspirational profile. ### Claim 3 (depends on 2) The server of claim 2, wherein the processor-executable instructions, when executed, further configure the processor to: after sending the notification, receive, via the communications module and from the remote computing device, additional monitoring data; update the behavior profile based at least on the additional monitoring data; and when the behavior profile remains misaligned with the aspirational profile, modify the one of the aspirational profile or the levels of permission granted to the one or more of the installed applications. ### Claim 4 (depends on 1) The server of claim 1, wherein generating the behavior profile includes obtaining a score for at least a plurality of the installed applications and generating the behavior profile from the obtained scores. ### Claim 5 (depends on 1) The server of claim 1, wherein generating the behavior profile includes obtaining a score for at least a plurality of the levels of permission granted to the one or more of the installed applications and generating the behavior profile from the obtained scores. ### Claim 6 (depends on 1) The server of claim 1, wherein prior to modifying the one of the aspirational profile or the levels of permission granted to the one or more of the installed applications, the processor-executable instructions, when executed, further configure the processor to: send, via the communications module and to the remote computing device, a notification that includes a selectable option that, when selected, modifies the aspirational profile based on the monitoring data. ### Claim 7 (depends on 1) The server of claim 1, wherein prior to modifying the one of the aspirational profile or the levels of permission granted to the one or more of the installed application, the processor-executable instructions, when executed, further configure the processor to: send, via the communications module and to the remote computing device, a notification that includes a selectable option that, when selected, modifies the levels of permission granted to the one or more of the installed applications. ### Claim 8 (depends on 7) The server of claim 7, wherein the selectable option includes a selectable option that, when selected, indicates that the aspirational profile is not to be adjusted. ### Claim 9 (depends on 1) The server of claim 1, wherein the monitoring data includes data indicating behavior conducted on the remote computing device. ### Claim 10 (depends on 9) The server of claim 9, wherein the behavior conducted on the remote computing device includes sharing at least one of personal data, location data, image data and video data. ### Claim 11 A computer-implemented method comprising: generating, based on received input, an aspirational profile defining a level of acceptable risk; generating a behavior profile based on monitoring data that includes a list of applications installed on a remote computing device and levels of permission granted to the installed applications; and when the behavior profile is misaligned with the aspirational profile, modifying one of the aspirational profile or the levels of permission granted to one or more of the installed applications. ### Claim 12 (depends on 11) The computer-implemented method of claim 11, wherein prior to modifying the one of the aspirational profile or the levels of permission granted to the one or more of the installed application, the method further comprises: sending, to the remote computing device, a notification indicating that the behavior profile is misaligned with the aspirational profile. ### Claim 13 (depends on 12) The computer-implemented method of claim 12, further comprising: after sending the notification, receiving, from the remote computing device, additional monitoring data; updating the behavior profile based at least on the additional monitoring data; and when the behavior profile remains misaligned with the aspirational profile, modifying the one of the aspirational profile or the levels of permission granted to the one or more of the installed applications. ### Claim 14 (depends on 11) The computer-implemented method of claim 11, wherein generating the behavior profile includes obtaining a score for at least a plurality of the installed applications and generating the behavior profile from the obtained scores. ### Claim 15 (depends on 11) The computer-implemented method of claim 11, wherein generating the behavior profile includes obtaining a score for at least a plurality of the levels of permission granted to the one or more of the installed applications and generating the behavior profile from the obtained scores. ### Claim 16 (depends on 11) The computer-implemented method of claim 11, wherein prior to modifying the one of the aspirational profile or the levels of permission granted to the one or more of the installed applications, the method further comprises: sending, to the remote computing device, a notification that includes a selectable option that, when selected, modifies the aspirational profile based on the monitoring data. ### Claim 17 (depends on 11) The computer-implemented method of claim 11, wherein prior to modifying the one of the aspirational profile or the levels of permission granted to the one or more of the installed applications, the method further comprises: sending, to the remote computing device, a notification that includes a selectable option that, when selected, modifies the levels of permission granted to one or more of the installed applications. ### Claim 18 (depends on 17) The computer-implemented method of claim 17, wherein the selectable option includes a selectable option that, when selected, indicates that the aspirational profile is not to be adjusted. ### Claim 19 (depends on 11) The computer-implemented method of claim 11, wherein the monitoring data includes data indicating behavior conducted on the remote computing device. ### Claim 20 A non-transitory computer-readable storage medium storing instructions that, when executed by a processor of a computing system, cause the computing system to: generate, based on received input, an aspirational profile defining a level of acceptable risk; generate a behavior profile based on monitoring data that includes a list of applications installed on a remote computing device and levels of permission granted to the installed applications; and when the behavior profile is misaligned with the aspirational profile, modify one of the aspirational profile or levels of permission granted to one or more of the installed applications.