Systems and methods for providing user interfaces based on actions associated with untrusted emails

Patent metadata

Field	Value
Publication number	US-11930028-B2
Application number	US-202117565519-A
Country	US
Kind code	B2
Filing date	Dec 30, 2021
Priority date	May 8, 2017
Publication date	Mar 12, 2024
Grant date	Mar 12, 2024

Abstract

The present disclosure describes a system that notifies users regarding specific user decisions with respect to solution phishing emails. The system notifies users when users perform specific actions with respect to the untrusted phishing emails. The system pauses execution of these actions and prompts the user to confirm whether to take the actions or to revert back to review the actions. In contrast from anti-ransomware technologies which are entirely in control, the system gives the user autonomy in deciding actions relating to untrusted phishing emails. The system interrupts execution of actions related to untrusted phishing emails in order to give users a choice on whether to proceed with actions.

First claim

What is claimed is:

1. A method comprising:
intercepting, by a device, a request of a user to take an action for an application with respect to a domain;
pausing, by the device, the application;
providing, by the device, a prompt configured to provide training and confirm whether to continue to take the action or revert back to the point in the application at which the user made the request; and
unpausing, by the device, the application responsive to receiving confirmation from the user via the prompt.

2. The method of claim 1 , further comprising providing a user interface of the prompt configured to enable the user to review training related to phishing communications prior to confirmation.

3. The method of claim 1 , wherein the prompt is configured to provide a reminder to the user of aspects of their training related to phishing communications prior to confirmation.

4. The method of claim 3 , wherein the prompt is configured to highlight security threats that the user has been exposed to in training.

5. The method of claim 1 , further comprising preventing access to the domain until the user completes a training module accessed via a user interface of the prompt.

6. The method of claim 1 , further comprising traversing, by the device responsive to the user interacting with the prompt, the user to a different domain to provide training.

7. The method of claim 1 , further comprising reverting, responsive to the confirmation from the user, the application back to the point in the application in which the user made the request.

8. The method of claim 1 , further comprising continuing to take the action, responsive to the confirmation from the user.

9. The method of claim 1 , wherein the domain is one of a trusted domain or an untrusted domain.

10. The method of claim 1 , wherein the prompt is a pop-up message.

11. A system comprising:
one or more processors, coupled to memory and configured to:
Intercept a request of a user to take an action for an application with respect to a domain;
pause the application;
provide a prompt configured to provide training and confirm whether to continue to take the action or revert back to the point in the application at which the user made the request; and
unpause the application responsive to receiving confirmation from the user via the prompt.

12. The system of claim 11 , wherein the one or more processors are further configured to provide a user interface of the prompt to enable the user to review training related to phishing communications prior to confirmation.

13. The system of claim 11 , wherein the prompt is configured to provide a reminder to the user of aspects of their training related to phishing communications prior to confirmation.

14. The system of claim 13 , wherein the prompt is configured to highlight security threats that the user has been exposed to in training.

15. The system of claim 11 , wherein the one or more processors are further configured to prevent access to the domain until the user completes a training module accessed via a user interface of the prompt.

16. The system of claim 11 , wherein the one or more processors are further configured to traverse, responsive to the user interacting with the prompt, the user to a different domain to provide training.

17. The system of claim 11 , wherein the one or more processors are further configured to revert, responsive to the confirmation from the user, the application back to the point in the application in which the user made the request.

18. The system of claim 11 , wherein the one or more processors are further configured to continue to take the action, responsive to the confirmation from the user.

19. The system of claim 11 , wherein the domain is one of a trusted domain or an untrusted domain.

20. The system of claim 11 , wherein the prompt is a pop-up message.

Assignees

• Knowbe4 Inc

Inventors

• Lowry Bret
• Repuspolo Gauvin
• Kras Greg

Classifications

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title

• G06F21/56

  Computer malware detection or handling, e.g. anti-virus arrangements · CPC title

• H04L51/212 Primary

  using filtering or selective blocking · CPC title

• H04L63/1441

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title

• H04L63/1483

  service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12) · CPC title