IP Library Granted Patent US 11,438,368
Granted Patent B2
US 11,438,368 · App. 17/025,848 · Granted Sep 6, 2022

Security risk evaluation across user devices

Inventors: Rahul Deshpande (Santa Clara, CA); German Lancioni (Santa Clara, CA); Celeste Fralick (Santa Clara, CA)
Assignee: MCAFEE, LLC
H04L63/1433G06F21/31G06F21/44G06F21/552G06F21/577H04L63/1441G06F2221/033G06F2221/034
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,438,368
App. No.
17/025,848
Granted
Sep 6, 2022
Kind
B2
Abstract

Security risk evaluation across user devices is disclosed herein. An example method includes registering one or more devices associated with a first user with the computer system, determining respective security sub-scores for each item of the one or more devices, computing an overall security score for the first user based, at least in part, on an aggregation of the security sub-scores, and creating a user profile based on the overall security score, the user profile to enable the at least one of the one or more devices to exchange data with an external device when the overall security score meets a security score threshold, the user profile to prevent the at least one of the one or more devices from exchanging data with the external device when the overall security score does not meet the security score threshold.

Claims (63)

1. A computer-implemented method for producing a security score, the method comprising:

registering a first user with a computer system;

registering one or more devices associated with the first user with the computer system;

collecting information from the first user, wherein the collected information identifies:

the one or more devices associated with the first user;

applications used by the first user on the one or more devices; and

activities performed by the first user on the one or more devices;

determining respective security sub-scores for respective items of the one or more devices, the applications used by the first user, and the activities performed by the first user;

computing an overall security score for the first user based, at least in part, on an aggregation of the respective security sub-scores; and

creating a user profile based on the overall security score, the user profile to enable the at least one of the one or more devices to exchange data with an external device when the overall security score meets a security score threshold, the user profile to prevent the at least one of the one or more devices from exchanging data with the external device when the overall security score does not meet the security score threshold.

2. The computer-implemented method of claim 1 , further including applying one or more Statistical Process Control (SPC) rules to one or more overall security scores computed for the first user.

3. The computer-implemented method of claim 2 , further including reporting one or more security alerts to at least one of the one or more devices, wherein a content of the security alert is based, at least in part, on the application of the one or more SPC rules.

4. The computer-implemented method of claim 1 , further including:

authenticating the first user and at least one of the one or more devices; and

reporting the computed overall security score to one or more of the one or more authenticated devices.

5. The computer-implemented method of claim 1 , wherein the computing of the overall security score for the first user is repeated at least one of:

at a regular time interval;

at an irregular time interval; or

in response to one or more trigger events.

6. A non-transitory computer readable medium storing a program for producing security scores, comprising computer executable instructions to cause one or more processing units to, at least:

register a first user with a computer system;

register one or more devices associated with the first user with the computer system;

collect information from the first user, wherein the collected information includes information regarding:

the one or more devices associated with the first user;

applications used by the first user on the one or more devices; and

activities performed by the first user on the one or more devices;

determine respective security sub-scores for respective items of the one or more devices, the applications used by the first user, and the activities performed by the first user;

compute an overall security score for the first user based, at least in part, on an aggregation of the respective security sub-scores; and

cause at least one of the one or more devices to create a user profile based on the overall security score, the user profile to enable the one or more processing units to exchange data with an external device when the overall security score meets a security score threshold, the user profile to prevent the one or more processing units from exchanging data with the external device when the overall security score does not meet the security score threshold.

7. The non-transitory computer readable medium of claim 6 , wherein the instructions when executed, cause the one or more processing units to apply one or more Statistical Process Control (SPC) rules to one or more overall security scores computed for the first user.

8. The non-transitory computer readable medium of claim 7 , wherein the instructions, when executed, cause the one or more processing units to report one or more security alerts to at least one of the one or more devices, wherein a content of the security alert is based, at least in part, on the application of the one or more SPC rules.

9. The non-transitory computer readable medium of claim 8 , wherein the instructions, when executed, cause the one or more processing units to:

authenticate the first user and at least one of the one or more devices; and

report the computed overall security score to one or more of the one or more authenticated devices.

10. The non-transitory computer readable medium of claim 6 , wherein the instructions to compute the overall security score for the first user are executed at least one of:

at a regular time interval;

at an irregular time interval; or

in response to one or more trigger events.

11. A computer system to produce security scores, the system comprising:

memory; and

one or more processors, the memory including instructions that, when executed, cause the one or more processors to at least:

register a first user with the computer system;

register one or more devices associated with the first user with the computer system;

collect information from the first user, the collected information to identify:

the one or more devices associated with the first user;

applications used by the first user on the one or more devices; and

activities performed by the first user on the one or more devices;

determine respective security sub-scores for respective ones of the one or more devices, the applications used by the first user, and the activities performed by the first user;

compute an overall security score for the first user based, at least in part, on an aggregation of the respective security sub-scores; and

cause at least one of the one or more devices to create a user profile based on the overall security score, the user profile to enable the at least one of the one or more devices to exchange data with an external device when the overall security score meets a security score threshold, the user profile to prevent the at least one of the one or more devices from exchanging data with the external device when the overall security score does not meet the security score threshold.

12. The computer system of claim 11 , wherein the one or more processors are to assign a first unique identifier to the first user.

13. The computer system of claim 11 , wherein the one or more processors are to assign a unique identifier to the respective ones of the one or more devices associated with the first user.

14. The computer system of claim 11 , wherein the one or more processors are to:

authenticate the first user and at least one of the one or more devices; and

report the computed overall security score to one or more of the one or more authenticated devices.

15. The computer system of claim 11 , wherein the one or more processors are to compute the overall security score for the first user in response to at least one of a regular time interval, an irregular time interval, or in response to one or more trigger events.

16. The computer system of claim 11 , wherein the one or more processors are to apply one or more Statistical Process Control (SPC) rules to one or more overall security scores computed for the first user.

17. The computer system of claim 16 , wherein the one or more processors are to report one or more security alerts to at least one of the one or more devices, wherein a content of the security alert is based, at least in part, on the application of the one or more SPC rules.

18. The computer system of claim 11 , wherein the one or more processors are to:

decrease the overall security score for the first user responsive to collected information that indicates a lesser level of security for the first user; and

increase the overall security score for the first user responsive to collected information that indicates a greater level of security for the first user.

19. The computer system of claim 18 , wherein a first degree to which the overall security score for the first user is to increase or decrease corresponds to a second degree to which the collected information indicates an overall greater level of security or lesser level of security, respectively, for the first user.

20. The computer system of claim 11 , wherein at least one of the one or more devices includes at least one of an automobile, a home, a home appliance, a smart device, or a wearable device.

Assignments (5)
CORRECTIVE ASSIGNMENT TO CORRECT THE THE PATENT TITLES AND REMOVE DUPLICATES IN THE SCHEDULE PREVIOUSLY RECORDED AT REEL: 059354 FRAME: 0335. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Jun 23, 2022
From: MCAFEE, LLC
To: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 060792/0307 →
SECURITY INTEREST Recorded Mar 3, 2022
From: MCAFEE, LLC
To: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT AND COLLATERAL AGENT
Reel/Frame 059354/0335 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 2, 2021
From: DESHPANDE, RAHUL; LANCIONI, GERMAN
To: MCAFEE, LLC
Reel/Frame 055462/0004 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 2, 2021
From: FRALICK, CELESTE
To: MCAFEE, LLC
Reel/Frame 055462/0098 →
CHANGE OF NAME Recorded Mar 2, 2021
From: MCAFEE, INC.
To: MCAFEE, LLC
Reel/Frame 055471/0694 →
Cited By (1)
US 12,301,610