Ironvest, Inc.

Kfir Yeshayahu

Avi Turgeman

Erez Zohar

Yaron Dror

Guy Bauman

A user interacts with a remote server via an end-user device, and enters transaction data. A user-facing camera of the end-user device captures a live video feed of the interacting user; which is displayed in real time on the screen of the end-user device while the user is filling-out fields and entering transaction data. The concurrent, real-time, video-feed display of the interacting user, near—or as a background layer behind—the fillable fields of the transaction data, deters at least some cyber-attacks or prevents fraud attempts. Optionally, the screen of the end-user device is also continuously shared, over a secure communication channel, via a locally-installed Screen Sharing Module, with a trusted remote server; which performs continuous biometric authentication of the user, and continuously verifies the integrity of user-provided transaction data against locally-collected data and user interactions. Optionally, a server-side generated QR code or barcode or visual representation, is sent by the trusted remote server and is also displayed on the screen of the end-user device, which is then Screen-Shared back towards the trusted remote server, as an additional security measure.

User authentication and transaction verification via a shared video stream

Systems, and methods of protecting users against cyber-attacks that utilize SIM Swap or Email Hijacking. A method includes: (a) detecting that a user is requested to input his genuine email address into an email address field of an account profile page or an account settings page of a computerized service; (b) inserting, into that email address field of that page, a replacement email address that replaces a genuine email address of the genuine user at that computerized service; and later, (c) automatically monitoring and handling, continuously at a remote server or a remote service, incoming email messages that arrive to that replacement email address of that genuine user and that request the genuine user to perform an elevated-security operation or to reset his credentials for accessing that computerized service.

System, device, and method of protecting users and online accounts against attacks that utilize SIM swap scams

Dynamic multi-party computation for securely utilizing and storing a secret data-item. A method includes: (a) receiving or generating a secret data-item (S); (b) dividing the secret data-item (S) into shares; (c) at a first electronic device, locally encrypting a first share (S-) into a first encrypted share (ES-), by using a private encryption key of the first electronic device as encryption key; (d) at a second, different, electronic device, locally encrypting a second share (S-) into a second encrypted share (ES-), by using a private encryption key of the second electronic device as encryption key; (e) storing the first encrypted share (ES-) and the second encrypted share (ES-) on one or more storage devices; (f) subsequently, dynamically replacing the first encrypted share (ES-) with a replacement encrypted share (ES-B) that is the first share (S-) of the secret data-item encrypted by using a private encryption key of a third electronic device as encryption key.

Growing community of inventors

Tzur Yigal, Israel

Kfir Yeshayahu