IP Library Granted Patent US 10,917,429
Granted Patent B1
US 10,917,429 · App. 17/002,340 · Granted Feb 9, 2021

Systems and methods for effective delivery of simulated phishing campaigns

Inventors: Mark William Patton (Clearwater, FL); Daniel Cormier (Clearwater, FL); Greg Kras (Dunedin, FL)
Assignee: KnowBe4, Inc.
H04L63/1433H04L63/1483
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,917,429
App. No.
17/002,340
Granted
Feb 9, 2021
Kind
B1
Abstract

Systems and methods are described for verifying whether simulated phishing communications are allowed to pass by a security system of an email system to email account of users. The delivery verification campaign may be configured to include the selection of the one or more types of simulated phishing communications from the plurality of types of simulated phishing communications. The selected one or more types of simulated phishing communications of the delivery verification campaign may be communicated to one or more email accounts. It is determined whether or not each of the one or more types of simulated phishing communications was allowed by the security system to be received unchanged at the one or more email accounts.

Claims (33)

1. A method for verifying whether simulated phishing emails are allowed to pass by a security system of an email system to email account of users, the method comprising:

(a) identifying, by one or more processors, one or more email accounts of an email system with a security system to use for a delivery verification campaign;

(b) selecting, by the one or more processors, one or more types of simulated phishing communications from a plurality of types of simulated phishing communications;

(c) configuring, by the one or more processors, the delivery verification campaign to comprise the selection of the one or more types of simulated phishing communications from the plurality of types of simulated phishing communications;

(d) communicating, by the one or more processors, the one or more types of simulated phishing communications of the delivery verification campaign to the one or more email accounts; and

(e) determining, by the one or more processors, whether or not each of the one or more types of simulated phishing communications was allowed by the security system to be received unchanged at the one or more email accounts.

2. The method of claim 1 , wherein (e) further comprises determining, by the one or more processors, that at least one of the one or more types of simulated phishing communications was successfully communicated to the one or more email accounts.

3. The method of claim 2 , further comprising determining that the at least one of the one or more types of simulated phishing communications was received unchanged at the one or more email accounts.

4. The method of claim 1 , wherein (e) further comprises accessing, by the one or more processors, the one or more email accounts with credentials provided to the one or more processors.

5. The method of claim 1 , wherein (e) further comprises determining, by the one or more processors, that at least one of the one or more types of simulated phishing communications was not received at the one or more email accounts.

6. The method of claim 5 , further comprising identifying, by the one or more processors, the type of the at least one of the one or more types of simulated phishing communications that was not received.

7. The method of claim 1 , wherein (e) further comprises determining, by the one or more processors, that at least one of the one or more types of simulated phishing communications was not successfully communicated beyond the security system to the one or more email accounts.

8. The method of claim 1 , wherein (e) further comprises accessing, by the one or more processors, the one or more email accounts to examine one or more messages received in the one or more email accounts.

9. The method of claim 1 , wherein the plurality of types of simulated phishing communications comprises any of the following: simulated phishing email with attachment, simulated phishing email with one or more links and a simulated phishing email with a macro.

10. The method of claim 1 , further comprising configuring, by the one or more processors, a simulated phishing campaign to a plurality of emails accounts of the email system based at least on the one or more types of simulated phishing communications that were successfully communicated unmodified by the security system to the one or more email accounts.

11. The method of claim 10 , further comprising displaying, by the one or more processors, for selection in configuring the simulated phishing campaign, the one or more types of simulated phishing communications that were successfully communicated unmodified via the security system to the one or more email accounts.

12. A system for verifying whether simulated phishing emails are allowed to pass by a security system of an email system to email account of users, the system comprising:

one or more processors, coupled to memory and configured to:

identify one or more email accounts of an email system with a security system to use for a delivery verification campaign;

select one or more types of simulated phishing communications from a plurality of types of simulated phishing communications;

configure the delivery verification campaign to comprise the selection of the one or more types of simulated phishing communications from the plurality of types of simulated phishing communications;

communicate the one or more types of simulated phishing communications of the delivery verification campaign to the one or more email accounts; and

determine whether or not each of the one or more types of simulated phishing communications was allowed by the security system to be received unchanged at the one or more email accounts.

13. The system of claim 12 , wherein the one or more processors are further configured to determine that at least one of the one or more types of simulated phishing communications was successfully communicated to the one or more email accounts.

14. The system of claim 13 , wherein the one or more processors are further configured to determine that the at least one of the one or more types of simulated phishing communications was received unchanged at the one or more email accounts.

15. The system of claim 12 wherein the one or more processors are further configured to access the one or more email accounts with credentials provided to the one or more processors.

16. The system of claim 12 , wherein the one or more processors are further configured to determine that at least one of the one or more types of simulated phishing communications was not received at the one or more email accounts.

17. The system of claim 16 , wherein the one or more processors are further configured to identify the type of the at least one of the one or more types of simulated phishing communications that was not received.

18. The system of claim 12 , wherein the one or more processors are further configured to determine that at least one of the one or more types of simulated phishing communications was not successfully communicated beyond the security system to the one or more email accounts.

19. The system of claim 12 , wherein the one or more processors are further configured to access the one or more email accounts to examine one or more messages received in the one or more email accounts.

20. The system of claim 12 , wherein the plurality of types of simulated phishing communications comprises any of the following: simulated phishing email with attachment, simulated phishing email with one or more links and a simulated phishing email with a macro.

21. The system of claim 12 , wherein the one or more processors are further configured to configure a simulated phishing campaign to a plurality of emails accounts of the email system based at least on the one or more types of simulated phishing communications that were successfully communicated unmodified by the security system to the one or more email accounts.

22. The system of claim 21 , wherein the one or more processors are further configured to display, for selection in configuring the simulated phishing campaign, the one or more types of simulated phishing communications that were successfully communicated unmodified by the security system to the one or more email accounts.

Assignments (6)
PATENT SECURITY AGREEMENT Recorded Aug 8, 2025
From: KNOWBE4, INC.
To: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
Reel/Frame 072337/0277 →
RELEASE OF SECURITY INTEREST IN PATENT COLLATERAL RECORDED AT REEL/FRAME: 062627/0001 Recorded Jul 28, 2025
From: BLUE OWL CREDIT INCOME CORP. (FORMERLY KNOWN AS OWL ROCK CORE INCOME CORP.)
To: KNOWBE4, INC.
Reel/Frame 072108/0205 →
TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL/FRAME NO.: 056885/0889 Recorded Feb 2, 2023
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: KNOWBE4, INC.
Reel/Frame 062625/0841 →
PATENT SECURITY AGREEMENT Recorded Feb 2, 2023
From: KNOWBE4, INC.
To: OWL ROCK CORE INCOME CORP., AS COLLATERAL AGENT
Reel/Frame 062627/0001 →
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Mar 12, 2021
From: KNOWBE4, INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 056885/0889 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 15, 2021
From: PATTON, MARK WILLIAM; CORMIER, DANIEL; KRAS, GREG
To: KNOWBE4, INC.
Reel/Frame 054935/0273 →
Cited By (4)
US 12,423,421 US 12,432,244 US 12,519,815 US 12,580,961