IP Library › Granted Patent US 12701135
Granted Patent B2
US 12701135 · App. 18/480,913 · Granted Aug 4, 2026

System and method for omnichannel social engineering attack avoidance

Inventors: Damien Phelan Stolarz (Los Angeles, CA); Johanna Dwyer (Brookline, MA); Ronald J. Pollack (Tampa, FL)
Assignee: Telepathy Labs, Inc.
H04L63/1441G06N3/084G06N5/02G06N5/043G06N20/00G10L15/26H04L63/10H04L63/1408H04L63/1416H04L63/1425H04L63/1483H04L67/306H04W12/08H04W12/12H04W4/21H04W12/67
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12701135
App. No.
18/480,913
Granted
Aug 4, 2026
Kind
B2
Abstract

A method, computer program product, and computer system for identifying social engineering activity associated with at least one of a first communication and a second communication based upon, at least in part, correlation to a predetermined rule. Characteristics of the communications are compared to the predetermined rule to determine if there is a correlation.

Claims (32)

1 . A computer-implemented method comprising:

identifying, by a computing device, a first characteristic of a first communication received on a first communication channel and sent on the first communication channel;

identifying a second characteristic of a second communication received on a second communication channel, and sent on the second communication channel, wherein both the first communication channel and the second communication channel are different communication platforms;

comparing, with a rule, both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel;

determining whether both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the rule by detecting a pattern between both the first communication received on the first communication channel and the second communication received on the second communication channel; and

identifying, as potential social engineering activity, activity associated with at least one of the first communication or the second communication in response to both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the rule to detect the pattern, wherein identifying at least one of the first characteristic of the first communication received on the first communication channel or the second characteristic of the second communication received on the second communication channel includes one or more of voice analysis and text analysis, and further includes analyzing aggregated information about a user participating with one of the first communication channel and the second communication channel.

2 . The computer-implemented method of claim 1 , wherein the rule includes receiving the first communication and the second communication by the user.

3 . The computer-implemented method of claim 1 , wherein the rule includes receiving the first communication by the user and receiving the second communication by a second user related to the user.

4 . The computer-implemented method of claim 1 , wherein the pattern is one of an implicit pattern or an explicit pattern.

5 . The computer-implemented method of claim 1 , wherein the first communication channel is a first communication platform and the second communication channel is a second communication platform.

6 . The computer-implemented method of claim 1 further comprising providing an indication of the activity that is identified as potential social engineering activity to at least one of a user participating in the first communication received on the first communication channel or a third party based upon, at least in part, identifying the potential social engineering activity.

7 . A computer program product residing on a non-transitory computer readable storage medium having a plurality of instructions stored thereon which, when executed across one or more processors, causes at least a portion of the one or more processors to perform operations comprising:

identifying, by a computing device, a first characteristic of a first communication received on a first communication channel and sent on the first communication channel;

identifying a second characteristic of a second communication received on a second communication channel, and sent on the second communication channel, wherein both the first communication channel and the second communication channel are different communication platforms;

comparing, with a rule, both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel;

determining whether both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the rule by detecting a pattern between both the first communication received on the first communication channel and the second communication received on the second communication channel; and

identifying, as potential social engineering activity, activity associated with at least one of the first communication or the second communication in response to both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the rule to detect the pattern, wherein identifying at least one of the first characteristic of the first communication received on the first communication channel or the second characteristic of the second communication received on the second communication channel includes one or more of voice analysis and text analysis, and further includes analyzing aggregated information about a user participating with one of the first communication channel and the second communication channel.

8 . The computer program product of claim 7 , wherein the rule includes receiving the first communication and the second communication by the user.

9 . The computer program product of claim 7 , wherein the pattern is one of an implicit pattern or an explicit pattern.

10 . The computer program product of claim 7 , wherein the first communication channel is a first communication platform and the second communication channel is a second communication platform.

11 . The computer program product of claim 7 , wherein the operations further comprise providing an indication of the activity that is identified as potential social engineering activity to at least one of a user participating in the first communication received on the first communication channel or a third party based upon, at least in part, identifying the potential social engineering activity.

12 . A computing system including one or more processors and one or more memories configured to perform operations comprising:

identifying, by a computing device, a first characteristic of a first communication received on a first communication channel and sent on the first communication channel;

identifying a second characteristic of a second communication received on a second communication channel, and sent on the second communication channel, wherein both the first communication channel and the second communication channel are different communication platforms;

comparing, with a rule, both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel;

determining whether both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the rule by detecting a pattern between both the first communication received on the first communication channel and the second communication received on the second communication channel; and

identifying, as potential social engineering activity, activity associated with at least one of the first communication or the second communication in response to both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the rule to detect the pattern, wherein identifying at least one of the first characteristic of the first communication received on the first communication channel or the second characteristic of the second communication received on the second communication channel includes one or more of voice analysis and text analysis, and further includes analyzing aggregated information about a user participating with one of the first communication channel and the second communication channel.

13 . The computing system of claim 12 , wherein the rule includes receiving the first communication and the second communication by the user.

14 . The computing system of claim 12 , wherein the pattern is one of an implicit pattern or an explicit pattern.

15 . The computing system of claim 12 , wherein the first communication channel is a first communication platform and the second communication channel is a second communication platform.

16 . The computing system of claim 12 , wherein the operations further comprise providing an indication of the activity that is identified as potential social engineering activity to at least one of a user participating in the first communication received on the first communication channel or a third party based upon, at least in part, identifying the potential social engineering activity.

17 . The computing system of claim 12 , wherein the operations further comprise at least one of monitoring and controlling the operations by a virtual agent.