IP Library › Granted Patent US 10,419,455
Granted Patent B2
US 10,419,455 · App. 15/150,955 · Granted Sep 17, 2019

Cyber-security presence monitoring and assessment

Inventors: Jason D. Park (Chicago, IL); Howard Hayes (Glencoe, IL); Tao Chen (Northbrook, IL); John S. Parkinson (Lake Forest, IL)
Assignee: Allstate Insurance Company
H04L63/1416G06F21/57G06F21/6245G06F2221/2101
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,419,455
App. No.
15/150,955
Granted
Sep 17, 2019
Kind
B2
Abstract

Methods, computer-readable media, software, and apparatuses may monitor consumer information in order to determine a probability of a data breach associated with a customer based on an online presence of the customer. The probability of a data breach may be used to present metrics to a consumer and/or a service provider. Further, the consumer may be presented with information indicating what factors contribute to the probability of a data breach, as well as information regarding how to reduce those factors.

Claims (67)

1. A cyber-security system comprising:

a cyber-traffic event analysis system implemented at least partially in hardware, and a cyber-security data processing system implemented at least partially in hardware:

wherein the cyber-traffic event analysis system is configured to:

monitor a communications network for confidential information associated with a consumer account associated with a consumer;

determine, based on a number of devices on the communications network storing the confidential information and a number of digital accounts associated with the consumer on the communications network, a value indicative of a risk of a data breach;

detect evidence of the data breach of the confidential information associated with the consumer account as a result of the monitoring; and

report the evidence of the data breach to the cyber-security data processing system; wherein the cyber-security data processing system is configured to:

receive the evidence of the data breach associated with the consumer account;

determine, based on the evidence of the data breach, a probability that a future use of the confidential information will impact the consumer; and adjust the value based on the probability.

2. The cyber-security system of claim 1 , wherein the evidence of the data breach comprises a credit card number.

3. The cyber-security system of claim 1 , wherein the evidence of the data breach comprises credentials associated with the consumer account.

4. The cyber-security system of claim 1 , wherein the communications network comprises an Internet.

5. The cyber-security system of claim 1 , wherein the cyber-security data processing system is further configured to determine the value based on an online presence of the consumer.

6. The cyber-security system of claim 1 , wherein the cyber-security data processing system is further configured to:

publish the value on an online marketplace;

receive, via the online marketplace, a request for the value; and

transmit the value to a service provider in response to the request.

7. The cyber-security system of claim 1 , wherein the cyber-security data processing system is further configured to:

receive an indication that the consumer has undergone cyber-security training;

adjust the value based on the cyber-security training; and

transmit the adjusted value for presentation to the consumer.

8. The method of claim 1 , wherein the digital accounts comprise a banking account and a social media account.

9. A method comprising:

determining, by a security monitoring device, one or more accounts comprising confidential information associated with a consumer;

scanning, by the security monitoring device, a local network associated with the consumer for one or more local devices on the local network;

determine, based on the scanning, a number of devices on the local network storing the confidential information and a number of digital accounts associated with the consumer on the local network;

monitoring, by the security monitoring device, an external network for a data breach associated with the confidential information;

determining, by the security monitoring device, a value based on the determining the one or more accounts, the scanning the local network, the number of devices, the number of digital accounts and the monitoring the external network; and

transmitting, by the security monitoring device, the value for presentation to the consumer.

10. The method of claim 9 , wherein the monitoring the external network for the data breach comprises monitoring one or more Internet sites for the confidential information.

11. The method of claim 9 , further comprising:

publishing the value on an online marketplace;

receiving, via the online marketplace, a request for the value; and

transmitting the value to a service provider in response to the request.

12. The method of claim 9 , further comprising:

detecting, after the transmitting the value, a new data breach associated with the confidential information;

adjusting the value based on the detecting; and

transmitting the adjusted value for presentation to the consumer.

13. The method of claim 9 , wherein the determining the value further comprises determining the value further based on information received from a credit monitoring service.

14. The method of claim 9 , further comprising:

receiving an indication that the consumer has undergone cyber-security training;

adjusting the value based on the cyber-security training; and

transmitting the adjusted value for presentation to the consumer.

15. A cyber-security data processing system comprising a cyber-traffic event analysis system and a cyber-security data processing system:

a processor implemented at least partially in hardware;

a memory unit storing computer-executable instructions, which when executed by the processor, cause the cyber-security data processing system to:

monitor a communications network for confidential information associated with a consumer;

determine, based on a number of devices on the communications network storing the confidential information and a number of digital accounts associated with the consumer on the communications network, a value indicative of a risk of a data breach;

detect one or more instances of the confidential information on the communications network as a result of the monitoring; and

receive additional information associated with the consumer from a service provider;

determine a probability of a future fraudulent use of the confidential information impacting the consumer based on the one or more instances and the additional information; and

adjust the value based on the probability.

16. The cyber-security data processing system of claim 15 , wherein the cyber-security data processing system further stores computing-executable instructions, which when executed by the processor, cause the cyber-security data processing system to:

publish the value on an online marketplace;

receive, via the online marketplace, a request for the value; and

transmit the value to an insurance provider in response to the request.

17. The cyber-security data processing system of claim 15 , wherein the service provider comprises a credit monitoring service.

18. The cyber-security data processing system of claim 15 , wherein the cyber-security data processing system further stores computing-executable instructions, which when executed by the processor, cause the cyber-security data processing system to transmit the value to a device associated with the consumer.

19. The cyber-security data processing system of claim 18 , wherein the cyber-security data processing system further stores computing-executable instructions, which when executed by the processor, cause the cyber-security data processing system to:

detect, after the transmitting the value, a new instance of the confidential information;

adjust the value based on detecting the new instance; and

transmit the adjusted value for presentation to the consumer.

20. The cyber-security data processing system of claim 19 , wherein the adjusted value is presented to the consumer as a number displayed via a cyber-security application on a mobile computing device.

21. The cyber-security data processing system of claim 15 , wherein the cyber-security data processing system further stores computing-executable instructions, which when executed by the processor, cause the cyber-security data processing system to:

receive an indication that the consumer has undergone cyber-security training;

adjust the value based on the cyber-security training; and

transmit the adjusted value for presentation to the consumer.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 12, 2016
From: PARK, JASON D.; HAYES, HOWARD; CHEN, TAO; PARKINSON, JOHN S.
To: ALLSTATE INSURANCE COMPANY
Reel/Frame 039705/0686 →
Continuity (1)
Related Publication 20170331839A1 · Nov 16, 2017
Cited By (1)
US 12,547,645