# US 8,789,186 B2 · System and method for packet profiling > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,789,186 B2 - Document ID: US8789186B2 - Status: Granted - Kind: B2 - Application number: 13/364,931 - Filed: 2012-02-02 - Published: 2012-09-06 - Granted: 2014-07-22 - Earliest claimed: 2011-03-03 - Assignees: JPMorgan Chase Bank, N.A. - Applicants: Jeffrey D. DiMuro - Inventors: Jeffrey D. DiMuro - Web page: https://patentgrep.com/patent/US8789186B2 ## CPC - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - A61K 8/00: Cosmetics or similar toiletry preparations - A61Q 11/00: Preparations for care of the teeth, of the oral cavity or of dentures; Dentifrices, e.g. toothpastes; Mouth rinses - G06F 21/56: Computer malware detection or handling, e.g. anti-virus arrangements - G06F 21/566: {Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities} - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - H04L 63/126: {the source of the received data} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - A61K: PREPARATIONS FOR MEDICAL, DENTAL OR TOILETRY PURPOSES (devices or methods specially adapted for bringing pharmaceutical products into particular physical or administering forms A61J3/00; chemical aspects of, or use of materials for deodorisation of air, for disinfection or sterilisation, or for bandages, dressings, absorbent pads or surgical articles A61L; soap compositions C11D) - A61Q: SPECIFIC USE OF COSMETICS OR SIMILAR TOILETRY PREPARATIONS - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems and methods for packet profiling are disclosed. According to one embodiment, a method for profiling incoming data packets for an organization includes the steps of (1) receiving, at an interface for a transport provider, a data packet; (2) using a computer processor, analyzing the data packet; (3) using the computer processor, based on the analysis, marking the data packet; and (4) transmitting the data packet to the organization. ## Claims ### Claim 1 A method for profiling incoming data packets for an organization, comprising: receiving, at an interface for a transport provider, a data packet intended for an organization; at least one computer processor performing the following: analyzing the data packet by applying at least one inspection sentinel to the contents of the data packet; scoring the data packet based on the analysis; signing the data packet with a digital signature, the digital signature comprising an identification of the transport provider and the score and at least one of a date of the scoring, a time of the scoring, an expiration of the scoring, and a classification of the packet; and transmitting the signed data packet to the organization. ### Claim 2 (depends on 1) The method of claim 1, wherein the score is based on a risk of the data packet comprising at least some malicious data. ### Claim 3 (depends on 1) The method of claim 1, wherein the score is based on an attribute of the data packet. ### Claim 4 (depends on 1) The method of claim 1, wherein data packets having a score above a predetermined threshold are sandboxed. ### Claim 5 (depends on 1) The method of claim 1, wherein data packets having a score below a first threshold are transmitted using a first data pipe, and data packets having a score above the first threshold are transmitted using a second data pipe. ### Claim 6 (depends on 1) The method of claim 1, further comprising: using the computer processor, notifying the organization of the receipt of the data packet. ### Claim 7 (depends on 6) The method of claim 6, wherein the notification is provided using a transmission network that is different from the network over which the signed data packet is transmitted. ### Claim 8 (depends on 1) The method of claim 1, wherein the score comprises a bit. ### Claim 9 (depends on 1) The method of claim 1, wherein the score comprises a plurality of bits. ### Claim 10 (depends on 1) The method of claim 1, wherein the at least one inspection sentinel is specific to the organization. ### Claim 11 (depends on 1) The method of claim 1, wherein the at least one inspection sentinel searches for behavioral traits in the contents of the data packet. ### Claim 12 A system for profiling incoming data packets for an organization, comprising: at least one computer processor; a memory; and an executable computer program that is tangibly embodied on a non-transitory computer readable medium that causes the at least one computer processor to perform the following: receive a data packet intended for an organization; analyze the data packet by applying at least one inspection sentinel to the contents of the data packet; score the data packet based on the analysis; mark the data packet with the score; sign the marked, data packet with a digital signature, the digital signature comprising an identification of a transport provider and at least one of a date of the scoring, a time of the scoring, an expiration of the scoring, and a classification of the packet; and transmit the marked and signed data packet to the organization. ### Claim 13 (depends on 12) The system of claim 12, wherein a header of the data packet is marked with the score. ### Claim 14 (depends on 12) The system of claim 12, wherein a payload of the data packet is marked with the score. ### Claim 15 (depends on 12) The system of claim 12, wherein the executable computer program further causes the at least one computer processor to: append a second data packet to the scored data packet; and transmit the scored data packet and the appended second data packet to the organization. ### Claim 16 (depends on 12) The system of claim 12, wherein the executable computer program further causes the at least one computer processor to: store the score at a location; and transmit the data packet and a packet identifier for the stored score to the organization. ### Claim 17 (depends on 12) The system of claim 12, wherein data packets having a score above a predetermined threshold are sandboxed. ### Claim 18 (depends on 12) The system of claim 12, wherein data packets having a score below a first threshold are transmitted using a first data pipe, and data packets having a score above the first threshold are transmitted using a second data pipe. ### Claim 19 (depends on 12) The system of claim 12, wherein the score comprises a bit. ### Claim 20 (depends on 12) The system of claim 12, wherein the score comprises a plurality of bits. ### Claim 21 (depends on 12) The system of claim 12, wherein the at least one inspection sentinel is specific to the organization. ### Claim 22 (depends on 12) The system of claim 12, wherein the score is based on a risk of the data packet comprising at least some malicious data. ### Claim 23 (depends on 12) The system of claim 12, wherein the score is based on an attribute of the data packet. ### Claim 24 (depends on 12) The system of claim 12, wherein the at least one inspection sentinel searches for behavioral traits in the contents of the data packet. ### Claim 25 (depends on 12) The system of claim 12, wherein the executable computer program further causes the at least one computer processor to: notify the organization of the receipt of the data packet. ### Claim 26 (depends on 25) The system of claim 25, wherein the organization is notified using a transmission network that is different from the network over which the data packet and the appended score is transmitted.