Method and apparatus for determining a threat using distributed trust across a network

Patent metadata

Field	Value
Publication number	US-10728275-B2
Application number	US-201815922695-A
Country	US
Kind code	B2
Filing date	Mar 15, 2018
Priority date	Mar 15, 2017
Publication date	Jul 28, 2020
Grant date	Jul 28, 2020

Abstract

A system and method are disclosed wherein a risk score is generated by interrogating multiple sources of information across a network. The information is aggregated, such that every network action for individuals and organizations are turned into a unique behavioral model, which can be used as a unique identifier (“fingerprint”). This fingerprint is in turn used by a personalized Trust Guardian System to block, modify and/or allow network actions.

First claim

The invention claimed is:

1. A method comprising the steps of:
receiving, at a device including a trust guardian system, a request from an unknown requestor;
sending, from the device's trust guardian system, at least one query about the unknown requestor to at least one other trust guardian system associated with a trusted source;
receiving, at the device's trust guardian system, response information from the trusted source about the unknown requestor;
analyzing, at the device's trust guardian system, the response information to determine risk level associated with responding to the unknown requestor's request;
generating a risk graph for the unknown requestor, wherein the risk graph includes a visual representation of risk;
determining a response to be sent to the unknown requestor;
determining, when the response is to be sent, a plurality of communication parameters used to provide the response; and
modifying at least one communication parameter of the plurality of communication parameters to change response speed and allow further investigation about the unknown requestor.

2. The method of claim 1 further comprising the step of sending the response using response parameters that are the same as the request's communication parameters, when the risk of sending the response is low.

3. The method of claim 1 , wherein modifying the at least one communication parameter is performed without alerting the unknown requestor, when the risk of sending the response is high.

4. The method of claim 1 further comprising redirecting the request without alerting the unknown requestor.

5. The method of claim 1 further comprising redirecting the request to a control node, without alerting the unknown requestor, to investigate and gather additional information about the unknown requestor.

6. The method of claim 1 further comprising sending a false response to the request when the risk is high.

Assignees

• Trust Networks Inc
• Lyft Inc

Inventors

• Adams Mark
• Meacham Daniel
• Meacham Simon

Classifications

• H04L9/50 Primary

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L67/63

  Routing a service request depending on the request content or context · CPC title

• H04W12/67

  Risk-dependent, e.g. selecting a security level depending on risk profiles · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title