GENERALIZED IDENTITY MODULE
Disclosed, in one general aspect, is a computer network security monitoring method that includes continuously gathering and storing machine-readable identity information records of different types for different individuals, and continuously deriving and storing general-purpose blended identity risk profiles for the individuals based on the continuously gathered machine-readable identity information records of the different types.
1 . A computer network security monitoring method for a processor and a storage device including instructions configured to run on the processor, including:
continuously gathering and storing machine-readable identity information records of a first type for different individuals,
continuously gathering and storing machine-readable identity information records of a second type for different individuals, and
continuously deriving and storing general-purpose blended identity risk profiles for each of a plurality of the individuals based on both the continuously gathered machine-readable identity information records of the first type and the continuously gathered machine-readable identity information records of the second type.
2 . The method of claim 1 wherein the step of continuously gathering and storing machine-readable identity information records of the first type gathers and stores a first type of identity information records from the following types of identity information records: leaked credential information records, leaked personal information records, validated identity information records from an identity validation service, and payment credential information from a payment monitoring service.
3 . The method of claim 2 wherein the step of continuously gathering and storing machine-readable identity information records of the second type gathers and stores a second type of identity information records from the following types of identity information records: leaked credential information records, leaked personal information records, validated identity information records from an identity validation service, and payment credential information from a payment monitoring service.
4 . The method of claim 3 further including a step of continuously gathering and storing further machine-readable identity information records of a third type, and wherein the step of continuously deriving and storing general-purpose blended identity risk profiles for each of a plurality of individuals is further based on the continuously gathered machine-readable identity information records of the third type.
5 . The method of claim 4 wherein the step of continuously gathering and storing machine-readable identity information records of the third type gathers and stores a third type of identity information records from the following types of identity information records: leaked credential information records, leaked personal information records, validated identity information records from an identity validation service, and payment credential information from a payment monitoring service.
6 . The method of claim 1 further including a step of continuously gathering and storing further machine-readable identity information records of a third type, and wherein the step of continuously deriving and storing general-purpose blended identity risk profiles for each of a plurality of individuals is further based on the continuously gathered machine-readable identity information records of the third type.
7 . The method of claim 1 wherein the risk profile includes a numerical blended identity score.
8 . The method of claim 1 further including reconciling records that belong to a same individual for at least one of the information record types.
9 . The method of claim 1 wherein at least some of the information records of the first and second types is obtained from dark internet sources.
10 . The method of claim 1 further including providing access to the general-purpose blended identity risk profiles via an application programming interface.
11 . The method of claim 1 wherein the continuously derived and stored general-purpose blended identity risk profiles reflect relationships between at least some of the individuals for which records are stored.
12 . The method of claim 1 wherein the continuously derived and stored general-purpose blended identity risk profiles reflect professional relationships between at least some of the individuals for which records are stored.
13 . A computer network security monitoring system, including a processor and a storage device including instructions configured to run on the processor, including:
a first identity information gathering interface operative to continuously receive and store machine-readable identity information records of a first type for different individuals,
a second identity information gathering interface operative to continuously receive and store machine-readable identity information records of a second type for different individuals, and
a general-purpose blended identity scoring that is operative to access machine-readable identity information records of the first type gathered by the first identity information gathering interface, operative to access machine-readable identity information records of the second type gathered by the first identity information gathering interface, and operative to derive risk profiles for each of a plurality of the individuals based on both the continuously gathered machine-readable identity information records of the first type and the continuously gathered machine-readable identity information records of the second type.
14 . The apparatus of claim 13 further including a records reconciliation subsystem operative to reconcile records that belong to a same individual for at least one of the information record types.
15 . A computer network security monitoring system, including a processor and a storage device including instructions configured to run on the processor, including:
means for continuously gathering and storing machine-readable identity information records of a first type for different individuals,
means for continuously gathering and storing machine-readable identity information records of a second type for different individuals, and
means for continuously deriving and storing general-purpose blended identity risk profiles for each of a plurality of the individuals based on both the continuously gathered machine-readable identity information records of the first type and the continuously gathered machine-readable identity information records of the second type.