IP Library Granted Patent US 12,613,971
Granted Patent B2
US 12,613,971 · App. 17/745,485 · Granted Apr 28, 2026

Systems and methods for aida campaign controller intelligent records

Inventors: Stu Sjouwerman (Bellair, FL); Eric Sites (Clearwater, FL)
Assignee: KnowBe4, Inc.
G06F21/577G06F30/20G06N20/00H04L63/1433H04L63/1483G06F2221/034H04L67/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,613,971
App. No.
17/745,485
Granted
Apr 28, 2026
Kind
B2
Abstract

Systems and methods, disclosed herein, of a campaign controller that stores information to a database about execution of multiple simulated phishing campaigns for multiple users, where each of the simulated phishing campaigns use one or more models for communicating simulated phishing communications. Based on this information, the campaign controller may determine a rate of success of the model, in causing a user to interact with a link in one of the simulated phishing campaigns, and may display the model's rate of success via a user interface.

Claims (30)

1 . A method comprising:

creating, by a campaign controller executing on one or more processors, a template of a simulated phishing campaign, the template comprising identification of a list of actions to perform by the campaign controller responsive to one or more actions of a user during execution of the simulated phishing campaign;

modifying, by the campaign controller, one or more actions in the list of actions within the template while the template is being used during execution of the simulated phishing campaign based on an action of the user in response to an action sent to the user by the campaign controller;

determining, by the campaign controller using the template as modified during execution of the simulated phishing campaign in which the template was modified, a next action from the modified one or more actions to perform using the template based on a second action of the user in response to a second action sent to the user by the campaign controller; and

performing, by the campaign controller during execution of the simulated phishing campaign, the next action.

2 . The method of claim 1 , wherein creating, by the campaign controller, the template comprises creating the template during execution of the simulated phishing campaign.

3 . The method of claim 1 , wherein the template identifies an ordered list of actions.

4 . The method of claim 1 , wherein one or more of the actions of the template identify a type of simulated phishing communication to send.

5 . The method of claim 1 , further comprising modifying, by the campaign controller, an order of the actions of the template.

6 . The method of claim 1 , further comprising modifying, by the campaign controller, content of simulated phishing communications specified by one or more of the actions of the template.

7 . The method of claim 1 , further comprising modifying, by the campaign controller, timing of one or more of the actions of the template.

8 . The method of claim 1 , further comprising taking, by the campaign controller, the next action of sending a simulated phishing communication according to the modified template.

9 . The method of claim 1 , further comprising determining, by the campaign controller, the next action to take by looking up the second action of the user in a table of user actions and looking up the next action to take in the template based on the second action of the user.

10 . The method of claim 1 , further comprising taking, by the campaign controller during execution of the simulated phishing campaign, the next action a predetermined time after the second action.

11 . A system comprising:

one or more processors, coupled to memory;

a campaign controller to:

create a template of a simulated phishing campaign, the template comprising identification of a list of actions to perform by the campaign controller responsive to one or more actions of a user during execution of the simulated phishing campaign;

modify one or more actions in the list of actions by within the template while being used during execution of the simulated phishing campaign based on an action of the user in response to an action sent to the user by the campaign controller;

determine, while using the template as modified during execution of the simulated phishing campaign in which the template was modified, a next action from the modified one or more actions to perform using the template based on a second action of the user in response to a second action sent to the user by the campaign controller; and

perform take, during execution of the simulated phishing campaign, the next action.

12 . The system of claim 11 , wherein the campaign controller is further configured to create the template during execution of the simulated phishing campaign.

13 . The system of claim 11 , wherein the template identifies an ordered list of actions.

14 . The system of claim 11 , wherein one or more of the actions of the template identify a type of simulated phishing communication to send.

15 . The system of claim 11 , wherein the campaign controller is further configured to modify an order of the actions of the template.

16 . The system of claim 11 , wherein the campaign controller is further configured to modify content of simulated phishing communications specified by one or more of the actions of the template.

17 . The system of claim 11 , wherein the campaign controller is further configured to modify timing of one or more of the actions of the template.

18 . The system of claim 11 , wherein the campaign controller is further configured to take the next action of sending a simulated phishing communication according to the modified template.

19 . The system of claim 11 , wherein the campaign controller is further configured to determine the next action to take by looking up the second action of the user in a table of user actions and looking up the next action to take in the template based on the second action of the user.

20 . The system of claim 11 , wherein the campaign controller is further configured to take, during execution of the simulated phishing campaign, the next action a predetermined time after the second action.

Assignments (4)
PATENT SECURITY AGREEMENT Recorded Aug 8, 2025
From: KNOWBE4, INC.
To: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
Reel/Frame 072337/0277 →
RELEASE OF SECURITY INTEREST IN PATENT COLLATERAL RECORDED AT REEL/FRAME: 062627/0001 Recorded Jul 28, 2025
From: BLUE OWL CREDIT INCOME CORP. (FORMERLY KNOWN AS OWL ROCK CORE INCOME CORP.)
To: KNOWBE4, INC.
Reel/Frame 072108/0205 →
PATENT SECURITY AGREEMENT Recorded Feb 2, 2023
From: KNOWBE4, INC.
To: OWL ROCK CORE INCOME CORP., AS COLLATERAL AGENT
Reel/Frame 062627/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 21, 2022
From: SJOUWERMAN, STU; SITES, ERIC
To: KNOWBE4, INC.
Reel/Frame 062171/0396 →
Continuity (4)
Continuation 17361185 · Jun 28, 2021
Continuation 17099089 · Nov 16, 2020
Continuation 15829721 · Dec 1, 2017
Related Publication 20220277085A1 · Sep 1, 2022
References Cited (124)
US 7599992B2 · Nakajima · 2009 [cited by applicant]
US 8041769B2 · Shraim et al. · 2011 [cited by applicant]
US 8255285B1 · Peretz et al. · 2012 [cited by applicant]
US 8464346B2 · Barai et al. · 2013 [cited by applicant]
US 8484741B1 · Chapman · 2013 [cited by applicant]
US 8615807B1 · Higbee et al. · 2013 [cited by applicant]
US 8635703B1 · Belani et al. · 2014 [cited by applicant]
US 8719940B1 · Higbee et al. · 2014 [cited by applicant]
US 8793799B2 · Fritzson et al. · 2014 [cited by applicant]
US 8910287B1 · Belani et al. · 2014 [cited by applicant]
US 8966637B2 · Belani et al. · 2015 [cited by applicant]
US 9053326B2 · Higbee et al. · 2015 [cited by applicant]
US 9246936B1 · Belani et al. · 2016 [cited by applicant]
US 9253207B2 · Higbee et al. · 2016 [cited by applicant]
US 9262629B2 · Belani et al. · 2016 [cited by applicant]
US 9324034B2 · Gupta et al. · 2016 [cited by applicant]
US 9325730B2 · Higbee et al. · 2016 [cited by applicant]
US 9356948B2 · Higbee et al. · 2016 [cited by applicant]
US 9373267B2 · Sadeh-Koniecpol et al. · 2016 [cited by applicant]
US 9398029B2 · Sadeh-Koniecpol et al. · 2016 [cited by applicant]
US 9398038B2 · Higbee et al. · 2016 [cited by applicant]
US 9591017B1 · Higbee et al. · 2017 [cited by applicant]
US 9635052B2 · Hadnagy · 2017 [cited by applicant]
US 9667645B1 · Belani et al. · 2017 [cited by applicant]
US 9674221B1 · Higbee et al. · 2017 [cited by applicant]
US 9728573B2 · Tsai et al. · 2017 [cited by applicant]
US 9729573B2 · Gatti · 2017 [cited by applicant]
US 9749359B2 · Gatti · 2017 [cited by examiner]
US 9813454B2 · Sadeh-Koniecpol et al. · 2017 [cited by applicant]
US 9870715B2 · Sadeh-Koniecpol et al. · 2018 [cited by applicant]
US 9876753B1 · Hawthorn · 2018 [cited by applicant]
US 9894092B2 · Irimie et al. · 2018 [cited by applicant]
US 9912687B1 · Wescoe et al. · 2018 [cited by applicant]
US 9942249B2 · Gatti · 2018 [cited by applicant]
US 9998480B1 · Gates et al. · 2018 [cited by applicant]
US 10009375B1 · Sites · 2018 [cited by applicant]
US 10069856B2 · Alsaleh · 2018 [cited by examiner]
US 10243904B1 · Wescoe · 2019 [cited by examiner]
US 10257225B1 · Sites · 2019 [cited by applicant]
US 10264018B1 · Sites · 2019 [cited by applicant]
US 10904186B1 · Everton et al. · 2021 [cited by applicant]
US 10986122B2 · Bloxham et al. · 2021 [cited by applicant]
US 11044267B2 · Jakobsson et al. · 2021 [cited by applicant]
US 11184393B1 · Gendre et al. · 2021 [cited by applicant]
US 11297094B2 · Huda · 2022 [cited by applicant]
US 20070142030A1 · Sinha et al. · 2007 [cited by applicant]
US 20100211641A1 · Yih et al. · 2010 [cited by applicant]
US 20100269175A1 · Stolfo et al. · 2010 [cited by applicant]
US 20120124671A1 · Fritzson et al. · 2012 [cited by applicant]
US 20120258437A1 · Sadeh-Koniecpol et al. · 2012 [cited by applicant]
US 20130198846A1 · Chapman · 2013 [cited by examiner]
US 20130203023A1 · Sadeh-Koniecpol et al. · 2013 [cited by applicant]
US 20130219495A1 · Kulaga et al. · 2013 [cited by applicant]
US 20130297375A1 · Chapman · 2013 [cited by examiner]
US 20140025437A1 · Mcnall et al. · 2014 [cited by applicant]
US 20140173726A1 · Varenhorst · 2014 [cited by applicant]
US 20140199663A1 · Sadeh-Koniecpol · 2014 [cited by examiner]
US 20140199664A1 · Sadeh-Koniecpol · 2014 [cited by examiner]
US 20140201835A1 · Emigh et al. · 2014 [cited by applicant]
US 20140230061A1 · Higbee et al. · 2014 [cited by applicant]
US 20140230065A1 · Belani · 2014 [cited by examiner]
US 20150163242A1 · Laidlaw et al. · 2015 [cited by applicant]
US 20150180896A1 · Higbee et al. · 2015 [cited by applicant]
US 20150229664A1 · Hawthorn · 2015 [cited by examiner]
US 20160036829A1 · Sadeh-Koniecpol · 2016 [cited by examiner]
US 20160142439A1 · Goutal · 2016 [cited by applicant]
US 20160164898A1 · Belani et al. · 2016 [cited by applicant]
US 20160173510A1 · Harris et al. · 2016 [cited by applicant]
US 20160234245A1 · Chapman · 2016 [cited by applicant]
US 20160261618A1 · Koshelev · 2016 [cited by applicant]
US 20160301705A1 · Higbee · 2016 [cited by examiner]
US 20160301716A1 · Sadeh-Koniecpol · 2016 [cited by examiner]
US 20160308897A1 · Chapman · 2016 [cited by examiner]
US 20160330238A1 · Hadnagy · 2016 [cited by applicant]
US 20170026409A1 · Gatti · 2017 [cited by examiner]
US 20170026410A1 · Gatti · 2017 [cited by applicant]
US 20170078322A1 · Seiver et al. · 2017 [cited by applicant]
US 20170104778A1 · Shabtai et al. · 2017 [cited by applicant]
US 20170126729A1 · Oberheide · 2017 [cited by examiner]
US 20170140663A1 · Sadeh-Koniecpol et al. · 2017 [cited by applicant]
US 20170149824A1 · Bendersky · 2017 [cited by examiner]
US 20170237776A1 · Higbee et al. · 2017 [cited by applicant]
US 20170244746A1 · Hawthorn · 2017 [cited by examiner]
US 20170251009A1 · Irimie et al. · 2017 [cited by applicant]
US 20170251010A1 · Irimie et al. · 2017 [cited by applicant]
US 20170318046A1 · Weidman · 2017 [cited by applicant]
US 20170331848A1 · Alsaleh et al. · 2017 [cited by applicant]
US 20180041537A1 · Bloxham et al. · 2018 [cited by applicant]
US 20180103052A1 · Choudhury et al. · 2018 [cited by applicant]
US 20180219818A1 · Kramer et al. · 2018 [cited by applicant]
US 20180308124A1 · Gao et al. · 2018 [cited by applicant]
US 20190173819A1 · Wescoe et al. · 2019 [cited by applicant]
US 20190215335A1 · Benishti · 2019 [cited by applicant]
US 20190245885A1 · Starink et al. · 2019 [cited by applicant]
US 20190245894A1 · Epple et al. · 2019 [cited by applicant]
US 20200067861A1 · Leddy · 2020 [cited by examiner]
US 20200311260A1 · Klonowski et al. · 2020 [cited by applicant]
US 20210185075A1 · Adams · 2021 [cited by applicant]
US 20210194924A1 · Heinemeyer et al. · 2021 [cited by applicant]
US 20210407308A1 · Brubaker et al. · 2021 [cited by applicant]
US 20220005373A1 · Nelson et al. · 2022 [cited by applicant]
US 20220006830A1 · Wescoe · 2022 [cited by applicant]
US 20220078207A1 · Chang et al. · 2022 [cited by applicant]
US 20220094702A1 · Saad Ahmed et al. · 2022 [cited by applicant]
US 20220100332A1 · Haworth et al. · 2022 [cited by applicant]
US 20220116419A1 · Kelm et al. · 2022 [cited by applicant]
US 20220130274A1 · Krishna Raju et al. · 2022 [cited by applicant]
US 20220286419A1 · Stetzer et al. · 2022 [cited by applicant]
EP 3582468 · 2019 [cited by applicant]
WO WO2016164844A1 · 2016 [cited by applicant]
Abu-Nimeh et al., “A Comparison of Machine Learning Techniques for Phishing Detection,” eCrime '07: Proceedings of the anti-phishing working groups 2nd annual eCrime researchers summit, 2007, pp. 60-69, ACM Digital Libr… [cited by applicant]
Final Office Action on U.S. Appl. No. 15/829,721 DTD Feb. 20, 2020. [cited by applicant]
Final Office Action on U.S. Appl. No. 15/829,721 DTD Apr. 17, 2019. [cited by applicant]
Final Office Action on U.S. Appl. No. 15/829,721 DTD Jul. 20, 2018. [cited by applicant]
Non-Final Office Action on U.S. Appl. No. 15/829,721 DTD Nov. 15, 2019. [cited by applicant]
Non-Final Office Action on U.S. Appl. No. 15/829,721 DTD Dec. 20, 2018. [cited by applicant]
Non-Final Office Action on U.S. Appl. No. 17/099,089 DTD Jan. 25, 2021. [cited by applicant]
Non-Final Office Action on U.S. Appl. No. 17/361,185 DTD Feb. 22, 2022. [cited by applicant]
Notice of Allowance on U.S. Appl. No. 15/829,721 DTD Oct. 9, 2020. [cited by applicant]
Notice of Allowance on U.S. Appl. No. 17/099,089 DTD May 7, 2021. [cited by applicant]
Notice of Allowance on U.S. Appl. No. 17/361,185 DTD Mar. 22, 2022. [cited by applicant]
Palka et al., “Dynamic phishing content using generative grammars,” Software Testing, Verification and Validation Workshops (ICSTW), 2015 IEEE Eighth International Conference, Date of Conference: Apr. 13-17, 2015,IEEE X… [cited by applicant]
US Office Action on U.S. Appl. No. 15/829,721 DTD Feb. 23, 2018. [cited by applicant]
US Office Action on U.S. Appl. No. 17/361,185 DTD Oct. 26, 2021. [cited by applicant]