IP Library Granted Patent US 10,205,737
Granted Patent B2
US 10,205,737 · App. 14/992,054 · Granted Feb 12, 2019

Addressing login platform security risks

Inventors: Yi-Chun Chen (Taipei, TW); Zen-Jerr Hong (Taipei, TW); Lin Chung Liang (New Taipei, TW); Min-Tsung Wu (Taipei, TW)
Assignee: International Business Machines Corporation
H04L63/1433H04L63/083
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,205,737
App. No.
14/992,054
Granted
Feb 12, 2019
Kind
B2
Abstract

A computer-implemented method includes identifying a primary login platform and identifying one or more security developments associated with the primary login platform. The computer-implemented method further includes determining one or more security corrective actions based on the one or more security developments. A corresponding computer program product and computer system are also disclosed.

Claims (74)

1. A computer-implemented method comprising:

identifying security credentials of a user for a primary login platform, wherein the security credentials of the user indicate an access level for the user and security category for the primary login platform;

identifying one or more security developments, said one or more security developments comprising suspected fraudulent attempts being associated with said primary login platform, wherein identifying said one or more security developments further comprises:

identifying one or more sensitive information databases,

receiving a primary sensitive information artefact, said primary sensitive information artefact being associated with said primary login platform,

determining whether one or more matching sensitive information artefacts match said primary sensitive information artefact, said one or more matching sensitive information artefacts being stored in at least one of said one or more sensitive information databases and each of said one or more matching sensitive information artefacts being associated with a matching login platform,

responsive to said one or more matching sensitive information artefacts matching said primary sensitive information artefact, determining a security divergence factor between said primary login platform and each said matching login platform based on at least one of one or more security levels associated with each of said primary login factor and each said matching login platform and one or more security categories associated with each of said primary login factor and each said matching login platform, and

determining whether said security divergence factor exceeds a predefined security divergence threshold; and

responsive to identifying the one or more security developments, automatically updating the security credentials of the user to decrease the access level, increasing the security category for the primary login platform, and modifying one or more sensitive information artefacts associated with the primary login platform for the user.

2. The computer-implemented method of claim 1 , wherein said one or more security developments comprise at least one security incident selected from the group consisting of:

an increase in a security risk measure associated with said primary login platform exceeding a predefined security risk increase threshold;

a number of hacking incidents associated with said primary login platform exceeding a predefined hacking risk threshold;

a number of fraud incidents associated with said primary login platform exceeding a predefined fraud risk threshold; and

a number of phishing incidents associated with said primary login platform exceeding a predefined phishing risk threshold.

3. The computer-implemented method of claim 1 , wherein identifying said one or more security developments comprises accessing at least one security analysis service provider at predefined regular intervals.

4. The computer-implemented method of claim 1 , further comprising:

performing at least one of said one or more security corrective actions.

5. The computer-implemented method of claim 1 , further comprising:

determining at least one of at least one notifying action or at least one preventive action.

6. The computer-implemented method of claim 5 , wherein:

said at least one notifying action comprises sending at least one notification via at least one communication profile associated with said primary login platform; and

said at least one preventive action is selected from the group consisting of:

automatically changing one or more sensitive information artefacts associated with said login platform; and

initiating at least one financial account suspending process.

7. A computer program product, comprising one or more computer readable storage media and program instructions stored on said one or more computer readable storage media, said program instructions comprising instructions to:

identify security credentials of a user for a primary login platform, wherein the security credentials of the user indicate an access level for the user and security category for the primary login platform;

identify one or more security developments said one or more security developments comprising suspected fraudulent attempts being associated with said primary login platform, wherein said instructions to identify said one or more security developments further comprise instructions to:

identify one or more sensitive information databases,

receive a primary sensitive information artefact, said primary sensitive information artefact being associated with said primary login platform,

determine whether one or more matching sensitive information artefacts match said primary sensitive information artefact, said one or more matching sensitive information artefacts being stored in at least one of said one or more sensitive information databases and each of said one or more matching sensitive information artefacts being associated with a matching login platform,

responsive to said one or more matching sensitive information artefacts matching said primary sensitive information artefact, determine a security divergence factor between said primary login platform and each said matching login platform based on at least one of one or more security levels associated with each of said primary login factor and each said matching login platform and one or more security categories associated with each of said primary login factor and each said matching login platform, and

determine whether said security divergence factor exceeds a predefined security divergence threshold; and

responsive to identifying the one or more security developments, automatically update the security credentials of the user to decrease the access level, increase the security category for the primary login platform, and modify one or more sensitive information artefacts associated with the primary login platform for the user.

8. The computer program product of claim 7 , wherein said one or more security developments comprise at least one security incident selected from the group consisting of:

an increase in a security risk measure associated with said primary login platform exceeding a predefined security risk increase threshold;

a number of hacking incidents associated with said primary login platform exceeding a predefined hacking risk threshold;

a number of fraud incidents associated with said primary login platform exceeding a predefined fraud risk threshold; and

a number of phishing incidents associated with said primary login platform exceeding a predefined phishing risk threshold.

9. The computer program product of claim 7 , wherein said instructions to identify said one or more security developments further comprise instructions to access at least one security analysis service provider at predefined regular intervals.

10. The computer program product of claim 7 , wherein said program instructions further comprise instructions to perform at least one of said one or more security corrective actions.

11. The computer program product of claim 7 , further comprise:

instructions to determine at least one of at least one notifying action or at least one preventive action.

12. The computer program product of claim 11 , wherein:

said at least one notifying action comprises sending at least one notification via at least one communication profile associated with said primary login platform; and

said at least one preventive action is selected from the group consisting of:

automatically changing one or more sensitive information artefacts associated with said login platform; and

initiating at least one financial account suspending process.

13. A computer system comprising:

a processor;

one or more computer readable storage media;

computer program instructions;

said computer program instructions being stored on said one or more computer readable storage media; and

said computer program instructions comprising instructions to:

identify security credentials of a user for a primary login platform, wherein the security credentials of the user indicate an access level for the user and security category for the primary login platform;

identify one or more security developments said one or more security developments comprising suspected fraudulent attempts being associated with said primary login platform, wherein said instructions to identify said one or more security developments further comprise instructions to:

identify one or more sensitive information databases,

receive a primary sensitive information artefact, said primary sensitive information artefact being associated with said primary login platform,

determine whether one or more matching sensitive information artefacts match said primary sensitive information artefact, said one or more matching sensitive information artefacts being stored in at least one of said one or more sensitive information databases and each of said one or more matching sensitive information artefacts being associated with a matching login platform,

responsive to said one or more matching sensitive information artefacts matching said primary sensitive information artefact, determine a security divergence factor between said primary login platform and each said matching login platform based on at least one of one or more security levels associated with each of said primary login factor and each said matching login platform and one or more security categories associated with each of said primary login factor and each said matching login platform, and

determine whether said security divergence factor exceeds a predefined security divergence threshold; and

responsive to identifying the one or more security developments, automatically update the security credentials of the user to decrease the access level, increase the security category for the primary login platform, and modify one or more sensitive information artefacts associated with the primary login platform for the user.

14. The computer system of claim 13 , wherein said one or more security developments comprise at least one security incident selected from the group consisting of:

an increase in a security risk measure associated with said primary login platform exceeding a predefined security risk increase threshold;

a number of hacking incidents associated with said primary login platform exceeding a predefined hacking risk threshold;

a number of fraud incidents associated with said primary login platform exceeding a predefined fraud risk threshold; and

a number of phishing incidents associated with said primary login platform exceeding a predefined phishing risk threshold.

15. The computer system of claim 13 , wherein said instructions to identify said one or more security developments further comprise instructions to access at least one security analysis service provider at predefined regular intervals.

16. The computer system of claim 13 , further comprise:

instructions to determine at least one of at least one notifying action or at least one preventive action.

17. The computer system of claim 16 , wherein:

said at least one notifying action comprises sending at least one notification via at least one communication profile associated with said primary login platform; and

said at least one preventive action is selected from the group consisting of:

automatically changing one or more sensitive information artefacts associated with said login platform; and

initiating at least one financial account suspending process.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 11, 2021
From: ARKOSE LABS, INC.
To: ARKOSE LABS HOLDINGS, INC.
Reel/Frame 057455/0455 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 9, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: ARKOSE LABS, INC.
Reel/Frame 057418/0615 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 11, 2016
From: CHEN, YI-CHUN; HONG, ZEN-JERR; LIANG, LIN CHUNG; WU, MIN-TSUNG
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 037471/0379 →
Continuity (1)
Related Publication 20170201512A1 · Jul 13, 2017