Systems and methods for increasing security sensitivity based on social influence

Patent metadata

Field	Value
Publication number	US-10007791-B2
Application number	US-201414546885-A
Country	US
Kind code	B2
Filing date	Nov 18, 2014
Priority date	Nov 18, 2014
Publication date	Jun 26, 2018
Grant date	Jun 26, 2018

Abstract

Systems, methods, and non-transitory computer-readable media can provide a set of security features capable of being enabled by a user associated with an online service. In some implementations, it can be determined that at least one security feature in the set has yet to be enabled by the user. A communication can be provided to the user. In some instances, the communication can indicate that a quantity of social connections associated with the user has already enabled the at least one security feature. One or more options to enable the at least one security feature can be provided to the user.

First claim

What is claimed is:

1. A computer-implemented method comprising:
providing, by a computing system, a set of security features associated with protection of online accounts of users of a social networking service, and capable of being enabled by the users;
determining, by the computing system, that at least one security feature in the set has yet to be enabled by a user;
determining, by the computing system, for each respective social connection in a set of social connections associated with the user within the social networking system, whether the respective social connection has already enabled the at least one security feature, wherein the at least one security feature includes at least one of a login notification security feature, a login approval security feature, and a trusted contacts security feature;
calculating, by the computing system, a quantity of social connections who have already enabled the at least one security feature;
providing, by the computing system, a communication to the user indicating that the quantity of social connections associated with the user has already enabled the at least one security feature, wherein the quantity of social connections is identified in the communication to the user indicating that the quantity of social connections associated with the user has already enabled the at least one security feature; and
providing, by the computing system, to the user one or more options to enable the at least one security feature.

2. The computer-implemented method of claim 1 , wherein the quantity of social connections includes at least one of an integer count of social connections or a percentage of social connections.

3. The computer-implemented method of claim 2 , wherein the quantity of social connections indicates a lower-bound amount of social connections.

4. The computer-implemented method of claim 2 , wherein the quantity of social connections indicates a limited amount of social connections.

5. The computer-implemented method of claim 2 , wherein the quantity of social connections indicates at least one of a numeric amount of social connections or a proportional amount of social connections.

6. The computer-implemented method of claim 1 , wherein the quantity of social connections indicates an ambiguous amount of social connections.

7. The computer-implemented method of claim 1 , wherein the communication provides an identifier for at least one social connection, associated with the user, who has already enabled the at least one security feature.

8. The computer-implemented method of claim 1 , wherein the quantity of social connections corresponds to zero, and wherein the communication includes a message suggesting that the user be first among all of the user's social connections to enable the at least one security feature.

9. The computer-implemented method of claim 1 , wherein the quantity of social connections corresponds to all of the user's social connections, and wherein the communication includes a message informing the user that only the user, among all of the user's social connections, has yet to enable the at least one security feature.

10. The computer-implemented method of claim 1 , wherein the communication provides a social descriptor that describes at least one of the social connections, associated with the user, who has already enabled the at least one security feature.

11. The computer-implemented method of claim 10 , wherein the social descriptor provides information about the at least one of the social connections, and wherein the information is associated with at least one of a location, a gender, a workplace, a job title, an educational institution, a residence, a hometown, a language, a group, or an organization.

12. The computer-implemented method of claim 1 , further comprising:
determining a security vulnerability for an account of the user at the social networking service.

13. The computer-implemented method of claim 1 , wherein the communication satisfies one or more privacy settings of the social connections, associated with the user, who have already enabled the at least one security feature.

14. The computer-implemented method of claim 13 , wherein the one or more privacy settings prevent security information associated with the social connections from being released in the communication to the user.

15. A system comprising:
at least one processor; and
a memory storing instructions that, when executed by the at least one processor, cause the system to perform:
providing a set of security features associated with protection of online accounts of users of a social networking service, and capable of being enabled by the users;
determining that at least one security feature in the set has yet to be enabled by a user;
determining for each respective social connection in a set of social connections associated with the user within the social networking system, whether the respective social connection has already enabled the at least one security feature, wherein the at least one security feature includes at least one of a login notification security feature, a login approval security feature, and a trusted contacts security feature;
calculating a quantity of social connections who have already enabled the at least one security feature;
providing a communication to the user indicating that the quantity of social connections associated with the user has already enabled the at least one security feature, wherein the quantity of social connections is identified in the communication to the user indicating that the quantity of social connections associated with the user has already enabled the at least one security feature; and

providing to the user one or more options to enable the at least one security feature.

16. A non-transitory computer-readable storage medium including instructions that, when executed by at least one processor of a computing system, cause the computing system to perform:
providing a set of security features associated with protection of online accounts of users of a social networking service, and capable of being enabled by the users;
determining that at least one security feature in the set has yet to be enabled by a user;
determining for each respective social connection in a set of social connections associated with the user within the social networking system, whether the respective social connection has already enabled the at least one security feature, wherein the at least one security feature includes at least one of a login notification security feature, a login approval security feature, and a trusted contacts security feature;
calculating a quantity of social connections who have already enabled the at least one security feature;
providing a communication to the user indicating that the quantity of social connections associated with the user has already enabled the at least one security feature, wherein the quantity of social connections is identified in the communication to the user indicating that the quantity of social connections associated with the user has already enabled the at least one security feature; and
providing to the user one or more options to enable the at least one security feature.

Assignees

• Facebook Inc

Inventors

• Kramer Adam
• Das Sauvik

Classifications

• G06F2221/034

  Test or assess a computer or a system · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title