Account vulnerability alerts

Patent metadata

Field	Value
Publication number	US-10102570-B1
Application number	US-201313829912-A
Country	US
Kind code	B1
Filing date	Mar 14, 2013
Priority date	Mar 14, 2013
Publication date	Oct 16, 2018
Grant date	Oct 16, 2018

Abstract

Systems and methods are provided for assessing an account takeover risk for one or more accounts of an individual. The account security procedures for each of a number of services with which the user has an account may be analyzed. Publicly accessible information regarding the user may also be collected and analyzed. The collected information and security procedures may be compared in order to determine one or more vulnerabilities to hostile account takeover of one or more of the analyzed accounts. An alert may be generated regarding a determined takeover risk, which may include suggested actions for remedying the risk.

First claim

What is claimed is:

1. A system for assessing an account takeover risk of one or more online accounts of a user, the account takeover risk indicating likelihood of an unauthorized user determining access credentials of one or more online accounts of the user, the system comprising:
a data store that stores account information associated with a plurality of online accounts, wherein the plurality of online accounts includes two or more online accounts of a user and a plurality of additional online accounts of users other than the user, wherein the two or more online accounts of the user includes a first online account with a first service provider and a second online account with a second service provider; and
a computing device in communication with the data store, the computing device configured to execute software instructions stored in a non-transitory computer readable medium to:
determine, based on account information associated with online accounts with the first service provider of one or more additional users other than the user, at least a first security question identified as being presented by the first service provider to one or more of the additional users previously;
determine, based on account information associated with online accounts with the second service provider of one or more additional users other than the user, at least a second security question identified as being presented by the second service provider to one or more of the additional users previously;
scanning one or more social media networks for publicly accessible data associated with the user responsive to the first security question or the second security question, wherein identification of publicly accessible data responsive to the first security question or the second security question indicates an account takeover risk;
accessing each of the two or more of the plurality of accounts over a network using associated user login credentials of the user associated with the respective accounts;
determining account relationship information comprising a plurality of links between respective of the online accounts, wherein a first link between a first online account and a second online account indicates a common account takeover vulnerability comprising at least one of:
(a) the first online account and second online account are configured to send account authentication messages to a same device or same email address, or
(b) the first online account and second online account share a password,
wherein the account relationship information is generated at least in part by account information obtained via the automated accessing of the two or more of the plurality of accounts over a network using associated user login credentials;

determine one or more vulnerabilities to hostile account takeover of the respective online accounts of the user, wherein the one or more vulnerabilities are determined based at least in part on the account relationship information and any account takeover risk associated with identification of publicly accessible data responsive to the first or second security questions; and electronically provide the user with an alert regarding the determined one or more vulnerabilities; and
electronically provide the user with an alert regarding the determined one or more vulnerabilities;
determine one or more remedial actions taken by the user associated with the determined one or more vulnerabilities;
electronically provide the user via user interface, an indication of the determined remedial actions; and
provide the user with an option to electronically adjust alert settings, including a risk severity setting indicating a severity of determined vulnerabilities.

2. The system of claim 1 , further comprising determining an answer to at least one security question.

3. The system of claim 1 , wherein the one or more vulnerabilities are further determined based on collective information provided by a plurality of individuals that also have accounts with providers of the respective accounts.

4. The system of claim 1 , wherein the publicly accessible data associated with the user is identified at least in part by an automated search for information associated with the user across a plurality of data sources, wherein the information associated with the user includes at least one of a name, a user name or an email address.

5. The system of claim 1 , wherein the one or more vulnerabilities are further determined based at least in part by comparing the account information with information that is accessible to at least one individual that is connected to the user within one or more social network services.

6. The system of claim 1 , wherein determining the one or more vulnerabilities comprises determining that an answer to a security question asked in the password recovery procedure of a first service is available from publicly accessible information on a second service.

7. A method performed by one or more computing systems comprising, the method comprising:
communicating with a data store that stores account information associated with a plurality of online accounts, wherein the plurality of online accounts includes two or more online accounts of a user and a plurality of additional online accounts of users other than the user, wherein the two or more online accounts of the user includes a first online account with a first service provider and a second online account with a second service provider;
determining, based on account information associated with online accounts with the first service provider of one or more additional users other than the user, at least a first security question identified as being presented by the first service provider to one or more of the additional users previously;
determining, based on account information associated with online accounts with the second service provider of one or more additional users other than the user, at least a second security question identified as being presented by the second service provider to one or more of the additional users previously;
scanning one or more social media networks for publicly accessible data associated with the user responsive to the first security question or the second security question, wherein identification of publicly accessible data responsive to the first security question or the second security question indicates an account takeover risk;
accessing each of the two or more of the plurality of accounts over a network using associated user login credentials of the user associated with the respective accounts;
determining account relationship information comprising a plurality of links between respective of the online accounts, wherein a first link between a first online account and a second online account indicates a common account takeover vulnerability comprising at least one of:
(a) the first online account and second online account are configured to send account authentication messages to a same device or same email address, or
(b) the first online account and second online account share a password,
wherein the account relationship information is generated at least in part by account information obtained via the automated accessing of the two or more of the plurality of accounts over a network using associated user login credentials;

determining one or more vulnerabilities to hostile account takeover of the respective online accounts of the user, wherein the one or more vulnerabilities are determined based at least in part on the account relationship information and any account takeover risk associated with identification of publicly accessible data responsive to the first or second security questions;
electronically providing the user with an alert regarding the determined one or more vulner

Assignees

• Consumerinfo Com Inc

Inventors

• Kapczynski Mark Joseph
• Dean Michael John
• Hunt Iii Herbert Harris

Classifications

• G06Q40/02 Primary

  Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) · CPC title

• H04L63/1433

  Vulnerability analysis · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title