Multi-factor profile and security fingerprint analysis
A security fingerprint architecture is disclosed. A security fingerprint comprises one or more behavioral factors which store a history of events associated with one or more users. The data in the security fingerprint is exposed by one or more modes, each of which determines the conditions that data in the security fingerprint may be accessed. Security fingerprints support a number of primitive operations that allow set operations to be performed. Security fingerprints may be used in for authentication, advertising, and other operations either alone, or in conjunction with third party data sources. An exemplary platform of security fingerprints built upon a cellular infrastructure is also disclosed.
1. A method to generate an identity fingerprint, comprising:
retrieving at least one record from a data store of records based at least on a profile corresponding to one or more users, the profile comprising a specification of records from the data store and the records relating to historical activities of the one or more users;
converting the at least one record into a set of data; and
generating an identity fingerprint from the set of data, the identity fingerprint comprising a plurality of selectable modes with each mode being associated with a different set of access restrictions for exposing at least a part of the set of data for querying, wherein the plurality of selectable modes includes at least a first mode associated with a patient, a second mode associated with a family member, and a third mode associated with a medical caregiver.
2. The method of claim 1 , wherein the profile further comprises a specification of access restrictions associated with the set of data, the access restrictions exposing at least a part of the set of data for querying.
3. The method of claim 1 , wherein the profile enumerates at least one data field, the at least one data field comprising a data field identifier and an indicator of whether the user has enabled the at least one data field to be exposed by a query applied to the identity fingerprint.
4. The method of claim 1 , wherein the profile specifies at least one of the plurality of selectable modes.
5. The method of claim 1 , wherein the profile specifies what data source is to be used in maintaining the data store.
6. The method of claim 5 , wherein at least one data source comprises a data source identifier and an indicator whether the one or more users have enabled the at least one data source to be used in maintaining the data store.
7. The method of claim 1 , wherein the generating the identity fingerprint comprises compressing the set of data.
8. The method of claim 1 , wherein the generating the identity fingerprint comprises encrypting the set of data.
9. The method of claim 1 , wherein the identity fingerprint includes at least a summary of the historical activities of the one or more users.
10. The method of claim 1 , wherein at least one of the second mode associated with the family member or the third mode associated with the medical caregiver allow access to a subset of the set of data.
11. A system to generate an identity fingerprint, comprising:
a processor;
a memory;
instructions stored in the memory configured to cause the processor to perform operations comprising:
retrieving at least one record from a data store of records based at least on a profile corresponding to one or more users, the profile comprising a specification of records from the data store and the records relating to historical activities of the one or more users, wherein at least one data source used in maintaining the data store comprises a data source identifier and an indicator whether the one or more users have enabled the at least one data source to be used in maintaining the data store; and
converting the at least one record into a set of data; and
generating an identity fingerprint from the set of data, wherein the profile enumerates at least one data field, the at least one data field comprising a data field identifier and an indicator of whether the one or more users have enabled the at least one data field to be exposed by a query applied to the identity fingerprint.
12. The system of claim 11 , wherein the profile further comprises a specification of access restrictions associated with the set of data, the access restrictions exposing at least a part of the set of data for querying.
13. The system of claim 11 , wherein the identity fingerprint comprises a plurality of selectable modes, each mode associated with a different set of access restrictions for exposing at least a part of the set of data for querying.
14. The system of claim 13 , wherein the profile specifies at least one of the plurality of selectable modes.
15. A non-transitory computer-readable medium having stored thereon computer-executable instructions configured to program a computing device to perform operations comprising:
retrieving at least one record from a data store of records based at least on a profile corresponding to one or more users, the profile comprising a specification of records from the data store and the records relating to historical activities of the one or more users, wherein at least one data source used in maintaining the data store comprises a data source identifier and an indicator whether the one or more users have enabled the at least one data source to be used in maintaining the data store; and
converting the at least one record into a set of data; and
generating an identity fingerprint from the set of data, wherein the identity fingerprint comprises a plurality of selectable modes, each mode associated with a different set of access restrictions for exposing at least a part of the set of data for querying.
16. The non-transitory computer-readable medium of claim 15 , wherein the profile specifies what data source of the at least one data source is to be used in maintaining the data store.
17. The non-transitory computer-readable medium of claim 16 , wherein the at least one data source to be used in maintaining the data store is any one or more of:
cellular activity data; and
cellular plan data.
18. The non-transitory computer-readable medium of claim 15 , wherein the generating the identity fingerprint comprises compressing the set of data.