Risk identification based on identified parts of speech of terms in a string of terms

Patent metadata

Field	Value
Publication number	US-9219746-B2
Application number	US-201314014731-A
Country	US
Kind code	B2
Filing date	Aug 30, 2013
Priority date	Aug 30, 2013
Publication date	Dec 22, 2015
Grant date	Dec 22, 2015

Abstract

Systems, methods and apparatuses for analyzing a string of terms (e.g., a search query, text of an email, and the like) are provided. In some examples, a determination is made as to whether one or more terms in the string matches a keyword. If so, various parts of speech of one or more terms in the string of terms may be determined. In some examples, a category of risk of the terms for which the part of speech is identified may also be determined. A risk rating may then be determined for the string of terms based on the relationship between the terms (e.g., the parts of speech) and the category or categories identified. In some examples, one or more additional actions may be implemented based on the risk rating.

First claim

What is claimed is:

1. A method, comprising:
receiving, by a risk identification system including at least one computing device having at least one processor and at least one memory coupled to the processor, a string of terms;
determining, by the at least one computing device of the risk identification system, whether the string of terms includes at least one word matching a keyword of a keyword listing;
responsive to determining that the string of terms includes at least one word matching the keyword, identifying, by the risk identification system, at least a noun and a verb in the string of terms;
identifying, by the at least one computing device of the risk identification system, a category of risk associated with the identified noun and a category of risk associated with the identified verb;
determining, by the at least one computing device of the risk identification system, whether the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are a same category of risk;
responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are the same category, determining, by the risk identification system, a first risk rating of the received string of terms including the identified noun and the identified verb, the first risk rating being based on the identified noun, the identified verb and the same category; and
responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are different categories, determining, by the risk identification system, a second risk rating of the received string of terms including the identified noun and the identified verb, the second risk rating being based on the identified noun, the identified verb, the identified category of risk associated with the noun and the identified category of risk associated with the verb, the second risk rating being different from the first risk rating.

2. The method of claim 1 , further including:
identifying, by the at least one computing device of the risk identification system, an adjective in the string of terms; and
determining, by the risk identification system, a third risk rating of the received string of terms based on the identified noun, identified verb, identified category of risk associated with the noun, identified category of risk associated with the verb and the identified adjective, the third risk rating being different from at least one of the first risk rating and the second risk rating.

3. The method of claim 1 , wherein the categories of risk include at least one of: behavior, information technology sabotage, unauthorized access, and intellectual property theft.

4. The method of claim 1 , further including identifying, by the at least one computing device of the risk identification system, an additional action to implement based on the identified risk rating.

5. The method of claim 4 , wherein the additional action includes altering access to information available to a user associated with the string of terms.

6. The method of claim 1 , wherein the string of terms is input into a user computing device by a user, wherein the user computing device is different from the at least one computing device of the risk identification system.

7. The method of claim 6 , wherein the user is an employee of an entity and the computing device is provided to the user by the entity for use as an employee of the entity.

8. An apparatus, comprising:
at least one processor; and
a memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to:
receive a string of terms;
determine whether the string of terms includes at least one word matching a keyword of a keyword listing;
responsive to determining that the string of terms includes at least one word matching the keyword, identify at least a noun and a verb in the string of terms;
identify a category of risk associated with the noun and a category of risk associated with the verb;
determine whether the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are a same category of risk;
responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are the same category, determine a first risk rating of the received string of terms including the identified noun and the identified verb, the first risk rating being based on the identified noun, the identified verb and the same category; and
responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are different categories, determine a second risk rating of the received string of terms including the identified noun and identified verb, the second risk rating being based on the identified noun, the identified verb, the identified category of risk associated with the noun and the identified category of risk associated with the verb, the second risk rating being different from the first risk rating.

9. The apparatus of claim 8 , further including instructions that, when executed, cause the apparatus to:
identify an adjective in the string of terms and determine a third risk rating of the string of terms based on the identified noun, identified verb, identified category of risk associated with the noun, identified category of risk associated with the verb and the identified adjective, the third risk rating being different from at least one of the first risk rating and the second risk rating.

10. The apparatus of claim 8 , wherein the categories of risk include at least one of:
behavior, information technology sabotage, unauthorized access, and intellectual property theft.

11. The apparatus of claim 8 , further including instructions that, when executed, cause the apparatus to identify an additional action to implement based on the identified risk rating.

12. The apparatus of claim 11 , wherein the additional action includes altering access to information available to a user associated with the string of terms.

13. The apparatus of claim 8 , wherein the string of terms is input into a computing device by a user.

14. The apparatus of claim 13 , wherein the user is an employee of an entity and the computing device is provided to the user by the entity for use as an employee of the entity.

15. One or more non-transitory computer-readable media having computer-executable instructions stored thereon that, when executed, cause at least one computing device to:
receive a string of terms;
determine whether the string of terms includes at least one word matching a keyword of a keyword listing;
responsive to determining that the string of terms includes at least one word matching the keyword, identify at least a noun and a verb in the string of terms;
identify a category of risk associated with the identified noun and a category of risk associated with the identified verb;
determine whether the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are a same category of risk;
responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the

Assignees

• Bank Of America

Inventors

• Blake Adam James
• Langsam Peter J
• Zuhde Jennifer Ann
• Bradley Thomas

Classifications

• G06F40/205

  Parsing · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title

• H04L63/1425

  Traffic logging, e.g. anomaly detection · CPC title

• G06F40/20

  Natural language analysis (semantic analysis of natural language G06F40/30) · CPC title

• G06F17/27

  Physics · mapped topic