IP Library Granted Patent US 9,356,919
Granted Patent B1
US 9,356,919 · App. 13/927,559 · Granted May 31, 2016

Automated discovery of knowledge-based authentication components

Inventors: Erez Yakoel (Kidron, IL); Lior Nudelman (Petach Tikva, IL); Boris Kronrod (Netanya, IL); Ram Reuveni (Katzrin, IL)
Assignee: EMC Corporation
H04L63/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,356,919
App. No.
13/927,559
Granted
May 31, 2016
Kind
B1
Abstract

Methods, apparatus and articles of manufacture for automated discovery of knowledge-based authentication components are provided herein. A method includes analyzing entity-related information to identify one or more individuals within the entity for exclusion from one or more authentication requirements in connection with one or more operations associated with the entity, wherein said analyzing is based on one or more pre-defined parameters, and querying an agent of the entity to approve each of the one or more individuals identified within the entity for exclusion from the one or more authentication requirements.

Claims (68)

1. A method comprising:

analyzing weighted entity-related information to identify one or more individuals within the entity for exclusion from one or more authentication requirements in connection with one or more operations associated with the entity,

wherein said weighted entity-related information comprises at least (i) organizational information pertaining to the entity comprising a set of multiple position titles and individuals associated therewith within the entity, (ii) resource information pertaining to the entity comprising an allocation of resources to individuals within the entity, and (iii) communication information within the entity comprising communication events between individuals within the entity, and

wherein said analyzing is based on a distinct weight applied to each item of (i) the organizational information, (ii) the resource information, and (iii) the communication information, wherein a higher weight attributed to a first item of information indicates that additional consideration is to be given for exclusion of the individual associated with the first item of information than is to be given for an individual associated with a second item of information with a lesser weight attributed thereto;

querying an agent of the entity to approve each of the one or more individuals identified within the entity for exclusion from the one or more authentication requirements; and

generating a list of one or more individuals within the entity for exclusion from the one or more authentication requirements based on (i) said analyzing and (ii) said querying;

wherein said analyzing, said querying and said generating are carried out by at least one computing device.

2. The method of claim 1 , further comprising:

receiving input from the agent, wherein said input comprises one or more individuals within the entity pre-identified by the entity for exclusion from the one or more authentication requirements in connection with one or more operations associated with the entity.

3. The method of claim 2 , wherein said analyzing comprises analyzing the weighted entity-related information to identify one or more individuals for exclusion from the one or more authentication requirements not pre-identified by the entity.

4. The method of claim 1 , wherein said analyzing comprises analyzing the allocation of resources to individuals within the entity to identify one or more individuals granted access to one or more pre-defined resources.

5. The method of claim 1 , further comprising:

obtaining feedback from the agent based on the one or more individuals identified within the entity for exclusion from the one or more authentication requirements.

6. The method of claim 5 , further comprising:

removing at least one individual from the one or more individuals identified within the entity for exclusion from the one or more authentication requirements based on the feedback from the agent.

7. The method of claim 5 , further comprising:

updating the distinct weight applied to each item of (i) the organizational information, (ii) the resource information, and (iii) the communication information based on the feedback from the agent.

8. The method of claim 1 , wherein said analyzing comprises identifying each of the individuals associated with a pre-defined sub-set of the multiple position titles for exclusion from the one or more authentication requirements.

9. An article of manufacture comprising a non-transitory processor-readable storage medium having processor-readable instructions tangibly embodied thereon which, when implemented, cause a processor to carry out steps comprising:

analyzing weighted entity-related information to identify one or more individuals within the entity for exclusion from one or more authentication requirements in connection with one or more operations associated with the entity,

wherein said weighted entity-related information comprises at least (i) organizational information pertaining to the entity comprising a set of multiple position titles and individuals associated therewith within the entity, (ii) resource information pertaining to the entity comprising an allocation of resources to individuals within the entity, and (iii) communication information within the entity comprising communication events between individuals within the entity, and

wherein said analyzing is based on a distinct weight applied to each item of (i) the organizational information, (ii) the resource information, and (iii) the communication information, wherein a higher weight attributed to a first item of information indicates that additional consideration is to be given for exclusion of the individual associated with the first item of information than is to be given for an individual associated with a second item of information with a lesser weight attributed thereto;

querying an agent of the entity to approve each of the one or more individuals identified within the entity for exclusion from the one or more authentication requirements; and

generating a list of one or more individuals within the entity for exclusion from the one or more authentication requirements based on (i) said analyzing and (ii) said querying.

10. The article of manufacture of claim 9 , wherein said analyzing comprises analyzing the allocation of resources to individuals within the entity to identify one or more individuals granted access to one or more pre-defined resources.

11. The article of manufacture of claim 9 , wherein said analyzing comprises identifying each of the individuals associated with a pre-defined sub-set of the multiple position titles for exclusion from the one or more authentication requirements.

12. An apparatus comprising:

a memory; and

at least one processor coupled to the memory and configured to:

analyze weighted entity-related information to identify one or more individuals within the entity for exclusion from one or more authentication requirements in connection with one or more operations associated with the entity,

wherein said weighted entity-related information comprises at least (i) organizational information pertaining to the entity comprising a set of multiple position titles and individuals associated therewith within the entity, (ii) resource information pertaining to the entity comprising an allocation of resources to individuals within the entity, and (iii) communication information within the entity comprising communication events between individuals within the entity, and

wherein said analyzing is based on a distinct weight applied to each item of (i) the organizational information, (ii) the resource information, and (iii) the communication information, wherein a higher weight attributed to a first item of information indicates that additional consideration is to be given for exclusion of the individual associated with the first item of information than is to be given for an individual associated with a second item of information with a lesser weight attributed thereto;

query an agent of the entity to approve each of the one or more individuals identified within the entity for exclusion from the one or more authentication requirements; and

generate a list of one or more individuals within the entity for exclusion from the one or more authentication requirements based on (i) said analyzing and (ii) said querying.

13. A method comprising:

analyzing weighted entity-related information to identify one or more terms for exclusion from use in a user query in connection with one or more authentication operations associated with the entity,

wherein said weighted entity-related information comprises multiple types of communication information within the entity, and

wherein said analyzing is based on a distinct weight applied to each of the multiple types of communication information within the entity, wherein a higher weight attributed to a first type of communication information indicates that additional consideration is to be given for exclusion of a term associated with the first type of communication information than is to be given for a term associated with a second type of communication information with a lesser weight attributed thereto;

analyzing one or more language sources to identify one or more synonyms for each of the one or more terms identified for exclusion;

querying an agent of the entity to approve each of the one or more terms identified for exclusion from use in a user query in connection with one or more authentication operations associated with the entity; and

generating a list of one or more terms for exclusion from use in a user query in connection with the one or more authentication operations based on (i) said analyzing steps and (ii) said querying step;

wherein said analyzing entity-related information, said analyzing one or more language sources, said querying and said generating are carried out by at least one computing device.

14. The method of claim 13 , further comprising:

obtaining feedback from the agent based on the one or more terms identified for exclusion from use in a user query in connection with one or more authentication operations associated with the entity.

15. The method of claim 14 , further comprising:

modifying the one or more terms identified for exclusion from use in a user query in connection with one or more authentication operations associated with the entity based on the feedback from the agent.

16. The method of claim 14 , further comprising:

updating the distinct weight applied to each of the multiple types of communication information based on the feedback from the agent.

17. An article of manufacture comprising a non-transitory processor-readable storage medium having processor-readable instructions tangibly embodied thereon which, when implemented, cause a processor to carry out steps comprising:

analyzing weighted entity-related information to identify one or more terms for exclusion from use in a user query in connection with one or more authentication operations associated with the entity,

wherein said weighted entity-related information comprises multiple types of communication information within the entity, and

wherein said analyzing is based on a distinct weight applied to each of the multiple types of communication information within the entity, wherein a higher weight attributed to a first type of communication information indicates that additional consideration is to be given for exclusion of a term associated with the first type of communication information than is to be given for a term associated with a second type of communication information with a lesser weight attributed thereto;

analyzing one or more language sources to identify one or more synonyms for each of the one or more terms identified for exclusion;

querying an agent of the entity to approve each of the one or more terms identified for exclusion from use in a user query in connection with one or more authentication operations associated with the entity; and

generating a list of one or more terms for exclusion from use in a user query in connection with the one or more authentication operations based on (i) said analyzing steps and (ii) said querying step.

18. The article of manufacture of claim 17 , further comprising:

obtaining feedback from the agent based on the one or more terms identified for exclusion from use in a user query in connection with one or more authentication operations associated with the entity.

19. The article of manufacture of claim 18 , further comprising:

modifying the one or more terms identified for exclusion from use in a user query in connection with one or more authentication operations associated with the entity based on the feedback from the agent.

20. An apparatus comprising:

a memory; and

at least one processor coupled to the memory and configured to:

analyze weighted entity-related information to identify one or more terms for exclusion from use in a user query in connection with one or more authentication operations associated with the entity,

wherein said weighted entity-related information comprises multiple types of communication information within the entity, and

wherein said analyzing is based on a distinct weight applied to each of the multiple types of communication information within the entity, wherein a higher weight attributed to a first type of communication information indicates that additional consideration is to be given for exclusion of a term associated with the first type of communication information than is to be given for a term associated with a second type of communication information with a lesser weight attributed thereto;

analyze one or more language sources to identify one or more synonyms for each of the one or more terms identified for exclusion;

query an agent of the entity to approve each of the one or more terms identified for exclusion from use in a user query in connection with one or more authentication operations associated with the entity; and

generate a list of one or more terms for exclusion from use in a user query in connection with the one or more authentication operations based on (i) said analyzing steps and (ii) said querying step.

Assignments (10)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (045455/0001) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC)
Reel/Frame 061753/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (040136/0001) Recorded Apr 26, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061324/0001 →
RELEASE OF SECURITY INTEREST Recorded Nov 3, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL, L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 058216/0001 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 29, 2016
From: EMC CORPORATION
To: EMC IP HOLDING COMPANY LLC
Reel/Frame 040203/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040134/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 040136/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 29, 2013
From: YAKOEL, EREZ; NUDELMAN, LIOR; KRONROD, BORIS; REUVENI, RAM
To: EMC CORPORATION
Reel/Frame 031109/0853 →