Passive based security escalation to shut off of application based on rules event triggering

Patent metadata

Field	Value
Publication number	US-9794299-B2
Application number	US-201715460951-A
Country	US
Kind code	B2
Filing date	Mar 16, 2017
Priority date	Oct 30, 2015
Publication date	Oct 17, 2017
Grant date	Oct 17, 2017

Abstract

Embodiments of the invention are directed to a system, method, or computer program product for a passive based security escalation to shut off of applications on a mobile device based on rules. As such, the system may identify, via extraction of data, time periods correlating to events that the user may be offline or inactive with respect to his/her mobile device. Once the time periods are identified, rules are created for the level of security escalation required based on the event. Subsequently, a trigger is identified at a time leading up to the event, where the system integrates with the mobile device and requires additional authentication to access one or more applications. Once the offline event starts, the system initiates a shutdown of the functions of one or more applications on the user's mobile device. The system then reinstates the application functionality after the offline event has ended.

First claim

What is claimed is:

1. A system for passive based security escalation implementation, the system comprising:
a memory device with a security application stored thereon;
a communication device in operative communication with a communication device associated with a user device over a network; and
a processing device operatively coupled to the memory device and the communication device, wherein the security application, when executed by the processing device, causes the processing device to:
determine an offline period of time for the user device;
generate a security escalation plan for the user device, wherein the security escalation plan comprises a set of rules for security during the offline period of time, wherein the set of rules for security during the offline period of time comprises rules for initiating a shutdown of one or more applications on the user device; and
integrate, over the network, the security escalation plan into a user application on the user device, wherein the user application, when executed by a processor associated with the user device, causes the processor to implement the security escalation plan.

2. The system according to claim 1 , wherein the security escalation plan further comprises a second set of rules for security before the offline period of time, wherein the second set of rules for security before the offline period of time comprises rules to increase security requirements for accessing the one or more applications on the user device based on a triggering of a time period leading up to the offline period of time.

3. The system according to claim 2 , wherein the security escalation plan further comprises a third set of rules for security after the offline period of time, wherein the third set of rules for security after the offline period of time comprises rules for restoring functionality of the one or more applications on the user device based on a triggering of a time period after the offline period of time.

4. The system according to claim 3 , wherein the third set of rules for security further comprise rules for restoring standard security requirements for the one or more applications on the user device.

5. The system according to claim 1 , wherein determining an offline period of time for the user device is accomplished by the security application further causing the processing device to:
extract historical user data associated with a user from one or more external sources; and
identify, from the historical user data, an indication of the offline period of time for the user device, wherein the indication of the offline period of time comprises one or more events that the user is attending at a future time.

6. The system according to claim 1 , wherein a user may override the shutdown of the one or more applications on the user device via security authorization.

7. A computer program product for passive based security escalation implementation, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:
an executable portion configured for determining an offline period of time for a user device;
an executable portion configured for generating a security escalation plan for the user device, wherein the security escalation plan comprises a set of rules for security during the offline period of time, wherein the set of rules for security during the offline period of time comprises rules for initiating a shutdown of one or more applications on the user device;
an executable portion configured for integrating, over a network, the security escalation plan into a user application; and
an executable portion configured for implementing the security escalation plan.

8. The computer program product according to claim 7 , wherein the security escalation plan further comprises a second set of rules for security before the offline period of time, wherein the second set of rules for security before the offline period of time comprises rules for increasing security requirements for accessing the one or more applications on the user device based on a triggering of a time period leading up to the offline period of time.

9. The computer program product according to claim 8 , wherein the security escalation plan further comprises a third set of rules for security after the offline period of time, wherein the third set of rules for security after the offline period of time comprises rules for restoring functionality of the one or more applications on the user device based on a triggering of a time period after the offline period of time.

10. The computer program product according to claim 9 , wherein the third set of rules for security further comprise rules for restoring standard security requirements for the one or more applications on the user device.

11. The computer program product according to claim 7 , wherein the computer readable program code portions further comprise:
an executable portion configured for extracting historical user data associated with a user from one or more external sources; and
an executable portion configured for identifying, from the historical user data, an indication of the offline period of time for the user device, wherein the indication of the offline period of time comprises one or more events that the user is attending at a future time.

12. The computer program product according to claim 7 , wherein a user may override the shutdown of the one or more applications on the user device via security authorization.

13. A computer-implemented method for passive based security escalation implementation, the method comprising:
determining an offline period of time for a user device;
generating a security escalation plan for the user device, wherein the security escalation plan comprises a set of rules for security during the offline period of time, wherein the set of rules for security during the offline period of time comprises rules for initiating a shutdown of one or more applications on the user device;
integrating, over a network, the security escalation plan into a user application; and
implementing the security escalation plan.

14. The computer-implemented method according to claim 13 , wherein the security escalation plan further comprises a second set of rules for security before the offline period of time, wherein the second set of rules for security before the offline period of time comprises rules for increasing security requirements for accessing one or more applications on the user device based on a triggering of a time period leading up to the offline period of time.

15. The computer-implemented method according to claim 14 , wherein the security escalation plan further comprises a third set of rules for security after the offline period of time, wherein the third set of rules for security after the offline period of time comprises rules for restoring functionality of the one or more applications on the user device based on a triggering of a time period after the offline period of time.

16. The computer-implemented method according to claim 15 , wherein the third set of rules for security further comprise rules for restoring standard security requirements for the one or more applications on the user device.

17. The computer-implemented method according to claim 13 , the method further comprising:
extracting historical user data associated with a user from one or more external sources; and
identifying, from the historical user data, an indication of

Assignees

• Bank Of America

Inventors

• Votaw Elizabeth S
• Jones-Mcfadden Alicia C

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/105 Primary

  Multiple levels of security · CPC title

• G06F21/629

  to features or functions of an application · CPC title

• H04L63/205 Primary

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title