Idm Global, Inc.

Acuant, Inc.

Securify, Inc.

Mcafee, Inc.

Intel Corporation

Security, Inc.

Identitymind Global, Inc.

Kieran Gerard Sherlock

Jose Caldera

Geoffrey Cooper

Luis Filipe Pereira Valente

Robert Allen Shaw

Luis Valente

Bob Shaw

Taher Elgamal

Dan Kolkowitz

Garrett Gafke

Mark Hoy

Derek Patton Pearcy

John Richard Guzik

Safyre Nirvana Anderson

Bin Tang

Neal Jared Reiter

Geoffrey Howard Cooper

A system includes an identity authentication system interface operatively coupled to a computerized network for receiving identity information over the computerized network. An identity authentication tool operatively coupled to the identity authentication system interface that receives, from the identity authentication system interface, a request to authenticate an identity; information pertaining to the user; information pertaining to the user; a collected electronic signature representation of a user; and a private information indicator from the user device. The identity authentication tool determines an indication of whether the user information matches user information stored by the identity authentication tool; and the private information indicator from the user device indicates that the user's private information was verified. An indication that the identity was verified or not verified is output by the identity authentication tool.

Identity management using remote authentication

Systems and methods for managing a reputation score of a user based on successful and failed logins, successful and failed multifactor authentications, and profile changes is described. The method includes receiving, by a server, status information of a user event from one or more computing devices. The status information includes one or more of an indicator of a successful login, an indicator of a failed login, an indicator of a successful multifactor authentication, an indicator of a failed multifactor authentication, an indicator of a profile update, and metadata associated with the user event from the one or more computing devices. The server updates events based on a type of the status information received and storing the events in a data store and determines whether a problematic situation has occurred. A reputation score of the user is updated when the problematic situation is determined.

Identity access management using access attempts and profile updates

A system for combining data from various data providers, certain portions of said data necessary to perform identity related services, said portions of said data combined into a central repository with a secure data structure, said data structure made available to outside parties participating in verification or validation services on at least a part of said portions of said data, storing the results of said services as separate entries in said data structure, resulting after a review in a total score, that can be used as a proofed portable identity verification.

Identity proofing and portability on blockchain

A graphlet is extracted from a relation graph for digital identity verification. The relation graph contains data element nodes collected about access activities, such as user access context, payment instrument, address, device information, etc. The graph can be examined to identify node groups in demarcation areas. Nodes outside of the demarcation areas represent data elements of a user; and the data elements in the demarcation areas may or may not be of the user in general. The system determines a matching score between the nodes outside of the demarcation areas and the nodes in a demarcation area. The nodes in the demarcation area are attributed to the user if the matching score is above a threshold. The nodes attributed to the user are combined as the graphlet showing the data elements of the user and used in user authentication and/or access control via electronic signature.

Systems and methods to authenticate users and/or control access made by users based on enhanced digital identity verification

Systems and methods for assessing and authenticating transactions. Some exemplary embodiments may authenticate transactions based at least in part on a comparison of a newly obtained electronic signature associated with a user with a previously obtained electronic signature associated with the user, where a payment instrument presented for use in the transaction is also associated with the user. Exemplary electronic signatures may comprise any information which may identify the user, such as browser fingerprints, computer fingerprints, IP addresses, geographic IP location information, information associated with a payment, and/or a typing pattern.

Transaction assessment and/or authentication

A controller for user authentication and access control, configured to: store data representing a graph having: nodes representing data elements associated with accesses made using an access token; and links among the nodes representing connections between the data elements identified in details of the accesses. In response to receiving details of an access made using the access token, the controller updates the graph according to the details and identifies a new connection in the graph resulting from update. The controller communicates with an identity service to verify the association of data elements corresponding to the new connection in the graph. Based on a result of the verification, the controller authenticates the user of the access and/or controls the access.

Systems and methods to authenticate users and/or control access made by users on a computer network using identity services

An authentication system for electronic transactions occurring over a computerized network is provided that includes: (a) a transaction authentication system interface operatively coupled to the computerized network for receiving proposed transactions information over the computerized network; and (b) a transaction authentication tool, operatively coupled to the transaction authentication system interface, where the tool includes: an automated anti-fraud analysis component for analyzing transactions information from a plurality of proposed transactions and automatically rejecting a first subset of proposed transactions according to automatic rejection criteria and automatically assigning a second subset of transactions for additional review; and an automated acceptance component for analyzing the second subset of transactions and accepting a third subset of transactions from the second subset based upon automatic accepting criteria.

Enhanced automated acceptance of payment transactions that have been flagged for human review by an anti-fraud system

A controller for user authentication and access control, configured to: store data representing a graph having: nodes representing data elements associated with accesses made using an access token; and links among the nodes representing connections between the data elements identified in details of the accesses. In response to receiving details of an access made using the access token, the controller updates the graph according to the details and determines a plurality of measurements of the graph. After computing a score of the graph based on a weighted average of the measurements, the controller authenticates the user of the access and/or controls the access based on the score.

Systems and methods to authenticate users and/or control access made by users on a computer network using a graph score

A controller for user authentication and access control, configured to: store data representing a graph having: nodes representing data elements associated with accesses made using an access token; and links among the nodes representing connections between the data elements identified in details of the accesses. In response to receiving details of an access made using the access token, the controller updates the graph according to the details and identifies changes in the graph resulting from update. For each of the changes, the controller identifies a set of elements in the graph that are up to a predetermined number of degrees of separate from the change and evaluates the trustworthiness of user identities corresponding to the set of elements identified for the change. Based on the trustworthiness, the controller authenticates the user of the access and/or controls the access.

Systems and methods to authenticate users and/or control access made by users on a computer network based on scanning elements for inspection according to changes made in a relation graph

Systems and methods for assessing and authenticating transactions are disclosed. Some exemplary embodiments may authenticate transactions based at least in part on a comparison of a newly obtained electronic signature associated with a user with a previously obtained electronic signature associated with the user, where a payment instrument presented for use in the transaction is also associated with the user. Exemplary electronic signatures may comprise any information which may identify the user, such as browser fingerprints, computer fingerprints, IP addresses, geographic IP location information, information associated with a payment, and/or a typing patterns.

A method and apparatus for a network monitor internals mechanism, which serves to translate packet data into multiple concurrent streams of encoded network event data, to contribute to enterprise management, reporting, and global mechanisms for aggregating monitors at a centralized aggregation point, and to facilitate rate limiting techniques because such monitors are not in control (i.e. cannot back pressure flow) is provided.

Method and apparatus for rate limiting

User names and user groups serve as the basis of a formal policy in a network. A passive monitor examines network traffic in near real time and indicates: which network traffic is flowing on the network as before; which users or user groups were logged into workstations initiating this network traffic; and which of this traffic conforms to the formal policy definition. In one embodiment of the invention, users and user groups are determined by querying Microsoft&#xae; Active Directory and Microsoft&#xae; Windows servers, to determine who is logged onto the Microsoft&#xae; network. Other sources of identity information are also possible. The identity information is then correlated with the network traffic, so that even traffic that does not bear on the Microsoft&#xae; networking scheme is still tagged with identity

Growing community of inventors

Palo Alto, CA, United States of America

Kieran Gerard Sherlock