Anti-phishing system and method
AssigneeGoogle Inc.
InventorsChristopher Soghoian, Kelly Caine
Life of this patent
Estimating the term…
Abstract
An anti-phishing system and method includes monitoring a user input data stream input to a computing device, identifying, in the user input data stream, one or more characters corresponding to a trigger event related to private information of a user, and taking an action to protect the private information based on identifying the one or more characters corresponding to the trigger event.
Claims24
A computer-implemented method comprising:
- at a computing device having one or more processors, memory, a database storing private information of a user, a transmission module, and an anti-phishing module:
- generating a trigger event based on forwarding information, wherein the forwarding information comprises information indicating a manner in which a user is directed to an electronic document;
- in response to the trigger event:
- monitoring a user input data stream input to the computing device subsequent to the trigger event;
- as the user enters, subsequent to the trigger event, one or more characters into the user input data stream:
- comparing characters in the user input data stream with the private information of the user stored in the database;
- identifying, in the user input data stream, one or more characters corresponding to the private information of the user, wherein the one or more characters are identified before the user inputs all characters of the private information;
- and
- taking an action to protect the private information based on identifying the one or more characters, wherein the action includes stopping transmission by the transmission module of the user input data stream to a server remotely located from the computer device before the user inputs all characters of the private information.
A non-transitory computer readable medium storing data and one or more programs for execution by one or more processors of a respective computer system, the stored data and one or more programs comprising:
- a database storing private information of a user;
- a transmission module and
- an anti-phishing module, the anti-phishing module including instructions to:
- generate a trigger event based on forwarding information, wherein the forwarding information comprises information indicating a manner in which a user is directed to an electronic document;
- and,
- in response to the trigger event:
- monitor a user input data stream to a computing device subsequent to the trigger event;
- and
- as the user enters, subsequent to the trigger event, one or more characters into the user input data stream:
- compare characters in the user input data stream with the private information of the user stored in the database;
- identify, in the user input data stream, one or more characters corresponding to private information of the user, wherein the one or more characters are identified before the user inputs all characters of the private information;
- and
- take an action to protect the private information based on identifying the one or more characters, wherein the action includes stopping transmission by the transmission module of the user input data stream to a server remotely located from the computer device before the user inputs all characters of the private information.
A system comprising:
- memory;
- one or more processors;
- a database storing private information of a user;
- and
- at least one program, stored in the memory and executed by the one or more processors, the at least one program including:
- a user input module to receive user input to form a user input data stream;
- a transmission module;
- and
- an anti-phishing module, the anti-phishing module including:
- a trigger module to generate a trigger event based on forwarding information, the forwarding information comprises information indicating a manner in which a user is directed to an electronic document;
- a detection module to compare characters in the user input data stream with the private information of the user stored in the database and to identify, as the user enters, subsequent to the trigger event, one or more characters into the user input data stream, one or more characters corresponding to the private information of the user in the user input data stream, wherein the trigger event is generated before the user inputs all characters of the private information;
- and
- an action module to take an action to protect the private information based on identifying the one or more characters, wherein the action includes stopping transmission by the transmission module of the user input data stream to a server remotely located from the system before the user inputs all characters of the private information.
A system comprising:
- memory;
- one or more processors;
- a database storing private information of a user;
- a transmission module;
- detection means for generating a trigger event based on forwarding information, the forwarding information comprises information indicating a manner in which a user is directed to an electronic document;
- input means for, in response to the trigger event, monitoring a user input data stream to a computing device subsequent to the trigger event;
- an anti-phishing module, the anti-phishing module including:
- identification means for, as the user enters, subsequent to the trigger event, one or more characters into the user input data stream, comparing characters in the user input data stream with the private information of the user stored in the database and identifying one or more characters in the user input data stream corresponding to the private information of the user, wherein the one or more characters are identified before the user inputs all characters of the private information;
- and
- action means for taking an action to protect the private information based on identifying the one or more characters, wherein the action includes stopping transmission by the transmission module of the user input data stream to a server remotely located from the computing device before the user inputs all characters of the private information.
A computer-implemented method comprising:
- at a computing device having a cache database storing private information of a user, one or more processors, a transmission module, an anti-phishing module and memory:
- retrieving private information from the cache database, the private information including one or more characters;
- generating a trigger event based on forwarding information, the forwarding information comprises information indicating a manner in which a user is directed to an electronic document;
- in response to the trigger event,
- monitoring a user input data stream input to the computing device, subsequent to the trigger event, the user input data stream being capable of communication by the computing device to a server of an untrusted electronic document;
- as the user enters, subsequent to the trigger event, one or more characters into the user input data stream:
- comparing characters in the user input data stream with the private information of the user stored in the database;
- identifying, in the user input data stream, the one or more characters, wherein the one or more characters are identified before the user inputs all characters of the private information;
- and
- taking an action to protect the private information based on identifying the one or more characters corresponding to the private information, wherein the action includes stopping transmission by the transmission module of the user input data stream to a server remotely located from the computing device before the user inputs all characters of the private information.
Dependencies are inferred from the claim text.