IP Library Granted Patent US 12,182,279
Granted Patent B2
US 12,182,279 · App. 17/825,643 · Granted Dec 31, 2024

Techniques for providing security-related information

Inventors: Sanjay Umesh Padval (New York, NY); Lauren Joyce Adiova (San Diego, CA); Ritvik Sunil Annam (San Francisco, CA); Kevin Chen (San Francisco, CA); Frederick Wonbae Chung (San Francisco, CA); Walton Lawrence Seymour (New York, NY)
Assignee: VANTA INC.
G06F21/604
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,182,279
App. No.
17/825,643
Granted
Dec 31, 2024
Kind
B2
Abstract

Techniques are described for a computing system to provide security-related information by (a) storing, by the computing system, security-related documents about a service provider; (b) monitoring, by the computing system, services provided by the service provider for a plurality of security-related features, and storing monitoring results; (c) receiving, by the computing system, a request to report security-related information about the service provider; (d) in response to receiving the request, creating a link for accessing the security-related documents and the monitoring results; and (e) in response to a user accessing the link, providing, by the computing system, the user with access to the security-related documents and monitoring results. A system, apparatus, and computer program product for performing this method and similar methods are also described.

Claims (52)

1. A method, performed by a computing system, of providing security-related information, the method comprising:

storing, by the computing system, security-related documents about a service provider;

monitoring, by the computing system, services provided by the service provider for a plurality of security-related features, and storing monitoring results;

receiving, by the computing system, a request to report security-related information about the service provider;

in response to receiving the request, creating a link for accessing the security-related documents and the monitoring results, including associating the link with a security policy that limits use of the link, the security policy being an access point policy;

in response to a user accessing the link, providing, by the computing system, the user with access to the security-related documents and monitoring results, including associating the link with an access point from which the user initially accessed the link; and

subsequent to the user initially accessing the link, refusing access to the link from outside the access point.

2. The method of claim 1 wherein monitoring the services provided by the service provider for the plurality of security-related features includes accessing computing resources of the service provider and confirming whether the services are in compliance with one or more of the plurality of security-related features.

3. The method of claim 2 wherein storing the monitoring results is performed periodically.

4. The method of claim 2 wherein monitoring for the plurality of security-related features includes monitoring the computing resources for security features, including:

access controls and

use of anti-malware software.

5. The method of claim 2 wherein monitoring for the plurality of security-related features includes monitoring the computing resources for data privacy features, including:

deleting customer data upon customers unenrolling and

deleting customer data upon request.

6. The method of claim of claim 2 wherein accessing the computing resources includes accessing a backend of the service provider for compliance with the one or more of the plurality of security-related features.

7. The method of claim of claim 2 wherein accessing the computing resources includes checking for unexpired documents maintained by the service provider.

8. The method of claim 1 wherein:

receiving the request includes receiving an e-mail address that identifies the user; and

creating the link further includes:

associating the link with the received e-mail address; and

sending the link to the received e-mail address.

9. The method of claim 1 wherein:

the security policy is time-limited policy having an expiration; and

the method further comprises refusing access to the link after the expiration.

10. The method of claim 1 wherein providing the user with access to the security-related documents and monitoring results includes:

generating a report page that summarizes the monitoring results and links to the security-related documents; and

sending the report page to the user.

11. A computer program product comprising a non-transitory computer-readable storage medium storing a set of instructions, which, when executed by a computing system, caused the computing system to provide security-related information by:

storing security-related documents about a service provider;

monitoring services provided by the service provider for a plurality of security-related features, and storing monitoring results;

receiving a request to report security-related information about the service provider;

in response to receiving the request, creating a link for accessing the security-related documents and the monitoring results, including associating the link with a security policy that limits use of the link, the security policy being an access point policy; and

in response to a user accessing the link, providing the user with access to the security-related documents and the monitoring results, including associating the link with an access point from which the user initially accessed the link; and

subsequent to the user initially accessing the link, refusing access to the link from outside the access point.

12. The computer program product of claim 11 wherein monitoring the services provided by the service provider for the plurality of security-related features includes accessing computing resources of the service provider and confirming whether the services are in compliance with one or more of the plurality of security-related features.

13. A system comprising:

a network;

a service provider connected to the network; and

one or more computing devices including processing circuitry coupled to memory configured to provide security-related information by:

storing security-related documents about the service provider;

monitoring, via the network, services provided by the service provider for a plurality of security-related features, and storing monitoring results;

receiving, via the network, a request to report security-related information about the service provider;

in response to receiving the request, creating a link for accessing the security-related documents and the monitoring results, including associating the link with a security policy that limits use of the link, the security policy being an access point policy; and

in response to a user accessing the link, providing, via the network, the user with access to the security-related documents and the monitoring results, including associating the link with an access point from which the user initially accessed the link; and

subsequent to the user initially accessing the link, refusing access to the link from outside the access point.

14. The system of claim 13 wherein monitoring the services provided by the service provider for the plurality of security-related features includes accessing computing resources of the service provider via the network and confirming whether the services are in compliance with one or more of the plurality of security-related features.

15. The system of claim 13 wherein:

receiving the request includes receiving an e-mail address that identifies the user; and

creating the link further includes:

associating the link with the received e-mail address; and

sending the link to the received e-mail address.

Assignments (2)
SECURITY INTEREST Recorded May 11, 2026
From: VANTA INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 074622/0557 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 8, 2022
From: PADVAL, SANJAY UMESH; ADIOVA, LAUREN JOYCE; ANNAM, RITVIK SUNIL; CHEN, KEVIN; CHUNG, FREDERICK WONBAE; SEYMOUR, WALTON LAWRENCE
To: VANTA INC.
Reel/Frame 060138/0353 →
Continuity (1)
Related Publication 20230385430A1 · Nov 30, 2023