Granted Patent B2

US 12,694,104 · App. 18/902,885 · Granted Jul 28, 2026

Inventor: Jonathan J. Thompson (Carmel, IN)

Assignee: AS0001, Inc.

G06F21/554G06F2221/034

Abstract

Claims (59)

1 . A method of improving cybersecurity protections across a plurality of entities, the method comprising:

analyzing, by one or more processing circuits, incident data corresponding with a cybersecurity incident utilizing a cybersecurity model to generate one or more verified intelligences corresponding to at least one cybersecurity threat;

determining, by the one or more processing circuits, that at least one of the one or more verified intelligences corresponds to at least one of the plurality of entities;

configuring or re-configuring, by the one or more processing circuits, at least one security tool of the at least one of the plurality of entities;

generating, by the one or more processing circuits, a decentralized identity passport for the at least one of the plurality of entities;

attaching or embedding, by the one or more processing circuits, a plurality of proof of controls to the decentralized identity passport, the plurality of proof of controls corresponding to one or more cybersecurity protection actions implemented by the at least one of the plurality of entities;

recording, by the one or more processing circuits, the plurality of proof of controls;

validating, by the one or more processing circuits, one or more cybersecurity protections of the at least one of the plurality of entities; and

recording, by the one or more processing circuits, a validation of the one or more cybersecurity protections on a distributed ledger or data source as a new exchange linked to the decentralized identity passport.

2 . The method of claim 1 , wherein the one or more verified intelligences comprise at least one of threat indicators, vulnerability patches, or mitigation strategies corresponding to the at least one cybersecurity threat, and wherein firmographic data, identified security gaps, and existing protection guards correspond to an entity profile of each of the plurality of entities.

3 . The method of claim 1 , further comprising:

decoding, by the one or more processing circuits, the one or more verified intelligences into one or more data formats of the at least one of the plurality of entities, wherein decoding the one or more data formats comprises translating the one or more verified intelligences into formats compatible with the at least one security tool of the at least one of the plurality of entities.

4 . The method of claim 1 , wherein the cybersecurity model comprises at least one of heuristic analysis, pattern identification, anomaly identification, or threat projections, and wherein the cybersecurity model is executed by the one or more processing circuits in response to the cybersecurity incident.

5 . The method of claim 1 , wherein configuring comprises:

automatically generating and applying, by the one or more processing circuits, patches or updates to the at least one security tool.

6 . The method of claim 1 , further comprising:

monitoring, by the one or more processing circuits, environmental data of a plurality of computing systems of the plurality of entities with the decentralized identity passport; and

in response to determining at least one of the plurality of entities out of compliance with a cybersecurity parameter, issuing, by the one or more processing circuits, an alert to at least one of the plurality of entities comprising a recommendation to update the one or more cybersecurity protection actions.

7 . The method of claim 1 , further comprising:

identifying, by the one or more processing circuits, a plurality of first level configurations corresponding to at least one of an operational or security action performed on a plurality of computing systems of the at least one of the plurality of entities;

encrypting or tokenizing, by the one or more processing circuits, the plurality of first level configurations; and

recording, by the one or more processing circuits, the plurality of first level configurations on the distributed ledger or data source.

8 . The method of claim 7 , further comprising:

providing, by the one or more processing circuits, a recovery key to the at least one of the plurality of entities, the recovery key configured to allow recovery of the encrypted or tokenized plurality of first level configurations by the at least one of the plurality of entities;

receiving, by the one or more processing circuits, the recovery key;

providing, by the one or more processing circuits, the plurality of first level configurations from the distributed ledger or data source based on decrypting or detokenizing the plurality of first level configurations using the recovery key; and

regenerating, by the one or more processing circuits, the recovery key based on a detection of a potential compromise or at predefined intervals.

9 . The method of claim 7 , wherein the plurality of first level configurations correspond to system-level operations or security actions performed on the plurality of computing systems, and wherein a plurality of second level configurations correspond to secondary or maintenance operations or security actions on the plurality of computing systems.

10 . The method of claim 9 , wherein the plurality of first level configurations comprise at least one of network settings, security tool settings, access control lists, endpoint protection settings, or encryption keys.

11 . The method of claim 9 , wherein the plurality of first level configurations correspond to cryptographic proof of provenance obtained by the one or more processing circuits directly from the at least one of the plurality of entities and programmatically, wherein the plurality of second level configurations correspond to a validation by one or more authorized entities, wherein a plurality of third level configurations correspond to documented evidence of an action, and wherein a plurality of fourth level configurations correspond to commitments made by the at least one of the plurality of entities.

12 . The method of claim 11 , wherein identifying further comprises:

acquiring and verifying, by the one or more processing circuits, the cryptographic proof of provenance based on one or more digital signatures and transaction records stored within the distributed ledger or data source; and

generating, by the one or more processing circuits, the cryptographic proof of provenance for the plurality of first level configurations.

13 . The method of claim 11 , further comprising:

updating, by the one or more processing circuits, at least one of the plurality of second level configurations, the plurality of third level configurations, or the plurality of fourth level configurations, in response to an update in the operational or security action performed on the plurality of computing systems of the at least one of the plurality of entities.

14 . A response system for improving cybersecurity protections across a plurality of entities, the response system comprising:

one or more processing circuits comprising memory and at least one processor configured to:

analyze incident data corresponding with a cybersecurity incident utilizing a cybersecurity model to generate one or more verified intelligences corresponding to at least one cybersecurity threat;

determine that at least one of the one or more verified intelligences corresponds to at least one of the plurality of entities;

configure or re-configure at least one security tool of the at least one of the plurality of entities;

identify a plurality of first level configurations corresponding to at least one of an operational or security action of the at least one of the plurality of entities;

encrypt or tokenize the plurality of first level configurations;

record the plurality of first level configurations;

validate one or more cybersecurity protections of the at least one of the plurality of entities; and

record a validation of the one or more cybersecurity protections on a distributed ledger or data source as a new exchange linked to a decentralized identity passport.

15 . The response system of claim 14 , wherein the one or more verified intelligences comprise at least one of threat indicators, vulnerability patches, or mitigation strategies corresponding to the at least one cybersecurity threat, and wherein firmographic data, identified security gaps, and existing protection guards correspond to an entity profile of each of the plurality of entities.

16 . The response system of claim 14 , the one or more processing circuits comprising the memory and the at least one processor are further configured to:

decode the one or more verified intelligences into one or more data formats of the at least one of the plurality of entities, wherein decoding the one or more data formats comprises translating the one or more verified intelligences into formats compatible with the at least one security tool of the at least one of the plurality of entities.

17 . The response system of claim 14 , wherein the cybersecurity model comprises at least one of heuristic analysis, pattern identification, anomaly identification, or threat projections, and wherein the cybersecurity model is executed by the one or more processing circuits in response to the cybersecurity incident.

18 . The response system of claim 14 , wherein configuring comprises automatically generating and applying patches or updates to the at least one security tool.

19 . A non-transitory computer readable medium (CRM) comprising one or more instructions stored thereon and executable by one or more processors to:

analyze incident data corresponding with a cybersecurity incident utilizing a cybersecurity model to generate one or more verified intelligences corresponding to at least one cybersecurity threat;

determine that at leeast one of the one or more verified intelligences corresponds to at least one of a plurality of entities;

configure or re-configure at least one security tool of the at least one of the plurality of entities;

identify a plurality of first level configurations corresponding to at least one of an operational or security action of the at least one of the plurality of entities;

encrypt or tokenize the plurality of first level configurations;

record the plurality of first level configurations;

validate one or more cybersecurity protections of the at least one of the plurality of entities; and

record a validation of the one or more cybersecurity protections on a distributed ledger or data source as a new exchange linked to a decentralized identity passport.

Assignments (1)

Continuity (5)

References Cited (224)