Systems and methods for determination of level of security to apply to a group before display of user data

Patent metadata

Field	Value
Publication number	US-11943253-B2
Application number	US-202217986861-A
Country	US
Kind code	B2
Filing date	Nov 14, 2022
Priority date	Oct 30, 2020
Publication date	Mar 26, 2024
Grant date	Mar 26, 2024

Abstract

Systems and methods are described for using secured groups for simulated phishing campaigns to obfuscate data for levels of privacy based on protected criteria classes. Initially, a group to resolve members of the group based on multiple users matching one or more group criteria is established. It is then determined that at least one criteria of the one or more criteria has been configured as one of multiple protected criteria classes. Responsive to the determination, the group is identified as a secured group. A query of the group is then executed to identify one or more users of the multiple users as members of the group based on the users matching the criteria of the secured group at the time of execution of the group and information of the one or more users resulting from the execution of the secured group is obfuscated in accordance with the protected criteria class.

First claim

What is claimed is:

1. A method comprising:
identifying, by one or more servers, one or more users resulting from execution of a query of a group using one or more criteria of the group, the one or more criteria comprising at least a time range;
determining, by the one or more servers, that a portion of user data of the one or more users is protected based at least on the one or more users meeting the one or more criteria and the portion of user data of the one or more users being protected; and
causing, by the one or more servers responsive to the determination, at least the portion of the user data of the one or more users to be obfuscated while being displayed.

2. The method of claim 1 , wherein the time range includes a start time and an end time.

3. The method of claim 1 , wherein the time range includes an earliest time.

4. The method of claim 1 , wherein the time range includes a latest time.

5. The method of claim 1 , wherein the group is further configured to identify one or more users as members of the group based on the one or more users meeting the one or more criteria of the group.

6. The method of claim 5 , wherein the group is further configured to identify the one or more users as members of the group at time of execution of the query.

7. The method of claim 1 , further comprising obfuscating, by the one or more servers, at least the portion of the user data of the one or more users based at least on a protected criteria class of the user data.

8. A system comprising:
one or more servers comprising one or more processors, coupled to memory, and configured to:
identify one or more users resulting from execution of a query of a group using one or more criteria of the group, the one or more criteria comprising at least a time range;
determine that a portion of user data of the one or more users is protected based at least on the one or more users meeting the one or more criteria and the portion of user data of the one or more users being protected; and
cause, responsive to the determination, at least the portion of the user data of the one or more users to be obfuscated while being displayed.

9. The system of claim 8 , wherein the time range includes a start time and an end time.

10. The system of claim 8 , wherein the time range includes one of an earliest time or a latest time.

11. A method comprising:
identifying, by one or more servers, one or more users resulting from execution of a query of a group using one or more criteria of the group, the one or more criteria comprising at least a number of times an event has one of occurred or not occurred;
determining, by the one or more servers, that a portion of user data of the one or more users is protected based at least on the one or more users meeting the one or more criteria and the portion of user data of the one or more users being protected; and
causing, by the one or more servers responsive to the determination, at least the portion of the user data of the one or more users to be obfuscated while being displayed.

12. The method of claim 11 , wherein the event comprises a user passing or failing a simulated phishing attack.

13. The method of claim 11 , wherein the event is based on involvement of a user with a training campaign.

14. The method of claim 11 , the event comprises an interaction of a user with a simulated phishing communication.

15. The method of claim 11 , wherein the group is further configured to identify one or more users as members of the group based on the one or more users meeting the one or more criteria of the group.

16. The method of claim 15 , wherein the group is further configured to identify the one or more users as members of the group at time of execution of the query.

17. The method of claim 11 , further comprising obfuscating, by the one or more servers, at least the portion of the user data of the one or more users based at least on a protected criteria class of the user data.

18. A system comprising:
one or more servers comprising one or more processors, coupled to memory, and configured to:
identify one or more users resulting from execution of a query of a group using one or more criteria of the group, the one or more criteria comprising at least a number of times an event has one of occurred or not occurred;
determine that a portion of user data of the one or more users is protected based at least on the one or more users meeting the one or more criteria and the portion of user data of the one or more users being protected; and
cause, responsive to the determination, at least the portion of the user data of the one or more users to be obfuscated while being displayed.

19. The system of claim 18 , wherein the event is based on involvement of a user with a training campaign.

20. The system of claim 18 , wherein the event comprises an interaction of a user with a simulated phishing communication.

Assignees

• Knowbe4 Inc

Inventors

• Kras Greg
• Cline Chris

Classifications

• H04L63/1433 Primary

  Vulnerability analysis · CPC title

• H04L63/1483

  service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12) · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• H04L63/14

  for detecting or protecting against malicious traffic · CPC title