United Services Automobile Association (usaa)

Thomas Bret Buckingham

Maland Keith Mortensen

Debra Randall Casillas

Gabriel Carlos Fernandez

Bharat Prasad

Richard Andrew Davey

Charles Lee Oakes, Iii

Vijay Jayapalan

Zakery Layne Johnson

Tammy Sanclemente

Michael Frank Morris

John David Row

Christopher Thomas Wilkinson

Sudarshan Rangarajan

Minya Liang

Jonathan Edward Neuse

Gunjan Chandraprakash Vijayvergia

Michael Wayne Lester

John Shelton

Stephen Seyler Aultman

Joseph James Albert Campbell

Sara Teresa Alonzo

Ryan M Johnson

Adam J Leatham

Justin Dax Haslam

Eric J Smith

John Raymond Harris

Anthony Scott Farnsworth

Ross Andrew Thiele

Joshua Samuel Leonard

Karen Marie Moritz

Robert Wilson Barner

Joshua S Kerr

Ruthie D Lyle

Bryan J Osterkamp

Huihui Wu

Donald Nathaniel Holloway, Iii

Alejandra Valles

Brian Christopher Hawes

Robert Aaron Ghavidel

Orlando Coleman

Brady Justice

Sean Thomas

Michael Slaugh

Jennifer Nannery

Cory Landon Newsom

Robert Lawrence

Eric David Schroeder

Peter Steuart Babcock

James T Karras

James Eric McCarty

Justin Ray White

Peter Bradley Sheeran

Angel Ninette Cade

Jeffrey Walton Easley

Lee Adams

Jonathan G Walters

Sumita T Jonak

Kevin Kenneth Fiedler

William Daniel Farmer

Thomas Wayne Schwarz, Jr

Darrius Jones

Hudson Reid Jameson

Celena Dortch

Dustin Starr Trimmier

Soon Fatt Hoo

Qian Zhao

Eric LeRoy

Diego Contreras

Karen M Moritz

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for securing data. One of the methods includes receiving one or more network data packets. The one or more network data packets include a token that identifies stored sensitive data. The one or more network data packets are desanitized, by: identifying and extracting, from the one or more network data packets, the token; requesting, from a distributed file system, the stored sensitive data, based upon the token; and receiving, in response to the request, the stored sensitive data as received stored sensitive data.

Third-party platform for tokenization and detokenization of network packet data

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for receiving location data representative of a location of a mobile device of a user. Determining that a scenario is occurring within an Internet-of-Things (IoT) system at least partially based on the location data, In response, implementing a security/privacy measure to prohibit at least a portion of data transfer from at least one IoT device of the IoT system to an external network.

Hardware-agnostic IoT security

A computer-implemented method includes identifying behavioral characteristics of a user related to operation of a computing device prior to an online account session. The method includes comparing the behavioral characteristics to a behavioral profile previously developed based on prior behavioral characteristics of the user, and determining an appropriate mark difficulty level based on a variation between the behavioral characteristics and the behavioral profile. The method includes selecting, from a plurality of prompts stored in a prompt database, a prompt that comprises instructions to draw a mark having the appropriate mark difficulty level, where other prompts of the plurality of prompts comprise instructions to draw other marks different from the mark, and providing the prompt to the user as part of a logon process for the online account session.

Behavioral profiling method and system to authenticate a user

Techniques are described for managing internet-of-things (IoT) devices, such as managing the storage of data generated by the IoT devices, managing the access, to the data, by users, processes, and/or other entities, managing command and control of the devices, and so forth. In some implementations, an IoT platform is provided for IoT device management, and the IoT platform can be agnostic with respect to providers. For example, the IoT platform may provide one or more common interfaces that enable communications with IoT devices that are manufactured by different device providers. In some implementations, a distributed ledger system (DLS) is employed to facilitate IoT device management. For example, the DLS can act as a gateway and/or overall interface to control access of users, processes, devices, IoT device providers, and/or other entities to the IoT devices and/or to an IoT platform.

Device management and security through a distributed ledger system

The present disclosure provides methods and systems for secure logon. One or more method includes: determining, via authentication information provided by a user of an electronic device, that the user is authorized to access an online account provided by the online account provider; providing the user with a selectable option to enable an expedited logon process by which the user can access the online account by solely providing a particular authentication item of the user; receiving a verification credential in response to a next logon attempt using the expedited logon process; and verifying that the received verification credential matches an assigned verification credential provided to the user for use in conjunction with the next logon attempt using the expedited logon process.

Systems and methods for secure logon

An authentication system includes processing circuitry that is configured to receive an indication of a number of interconnected devices that are in communication with a user device, compare the number of interconnected devices that are in communication with the user device to a threshold, and grant access to an application on the user device in response to the number of interconnected devices meeting or exceeding the threshold.

Authentication systems and methods for interconnected devices

Techniques are described for managing a network through use of a security device that includes, or has access to, a blockchain node. The security device may manage a network of Internet-of-Things (IoT) devices in a home or other environment. The security device may act as an intermediary to manage secure, trusted communications between the IoT device(s) and external service(s). The security device may also provide network security features such as a network firewall. In some implementations, the security device may run a blockchain node, and the blockchain could be used to establish a verifiable home identity. The security device may interact with external resources and/or services, such as utility services, e-commerce services, and so forth, through this secure mechanism.

Distributed ledger for network security management

The disclosure describes a scalable, risk-based authentication system including a plurality of fraud monitoring engines configured to: analyze user data and organization data, and generate a set of risk factors based on the user data and the enterprise data; a risk aggregator in communication with the plurality of fraud monitoring engines configured to: receive the set of risk factors, and transform the set of risk factors into risk indicators; and an authentication engine configured to: receive the risk indicators from the risk aggregator, and generate an authentication plan for a requested activity based on the risk indicators and the requested activity.

Scalable risk-based authentication methods and systems

Techniques provided herein relate to electronic data access requests. An access system receives at least one electronic data action request from a client. At least a portion of the data access authentication information is sourced from a secondary device connected to an intermediary device. The electronic data action request is authenticated based upon the data access authentication information.

Public authentication systems and methods

Methods and systems for multiple channel authentication are described. In one embodiment, a request for an interaction is initiated from within a mobile application. The request may include authentication information and contextual information relating to a current exchange between the mobile application and an organization. The user may be authenticated with the authentication information and the request may be routed to a representative based on the contextual information to continue the exchange.

Methods and systems for multiple channel authentication

Techniques are described for managing devices, such as Internet of Things (IoT) devices, using smart contract(s) on a distributed ledger (e.g., blockchain). Smart contract(s) executing on a distributed ledger may control access to one or more devices in a home or other environment. The smart contract(s) may employ information stored on the distributed ledger and information in a transaction sent to the smart contract(s) to determine whether particular user(s) and/or process(es) may access the device(s), issue commands to the device(s), access data generated by the device(s), and/or control the device(s). The smart contract(s) may provide a secure portal through which user(s) and/or service(s) may access device(s) for command and control of such device(s), and secure access may be based on permission information that is specified or provided by an owner or operator of the device(s) and that is stored on the distributed ledger.

Distributed ledger for device management

Implementations of the present disclosure are directed to providing remote access to electronic documents stored in a server system using a virtual secure room, and include actions of authenticating a user at least partially based on credentials of the user, at least partially in response to authenticating the user, providing a secure connection between a computing device of the user and the server system, transmitting at least one electronic document for display to the user on the computing device, monitoring the user, while the at least one electronic document is displayed to the user on the computing device, and selectively closing the secure connection in response to one or more of at least one activity and at least one state of the user.

Virtual secure rooms

Various embodiments of the present invention generally relate to identity authentication and/or recognition. Some embodiments provide a method for determining when a user may engage in a restricted activity, including engaging in an initial contact with a user via a medium for exchange, receiving a request to engage in an activity, determining an activity trust threshold required for the activity, determining an initial identity trust score for the user, and comparing the initial identity trust score with the activity trust threshold. Based on the comparison, the user is either allowed to engage in the activity, rejected from engaging in the activity, or additional identifying information is collected.

Dynamic risk engine

Implementations of the present disclosure are directed to providing remote access to electronic documents stored in a server system using a virtual secure room, and include actions of authenticating a user at least partially based on credentials the user, at least partially in response to authenticating the user, providing a secure connection between a computing device of the user and the server system, transmitting at least one electronic document for display to the user on the computing device, monitoring the user, while the at least one electronic document is displayed to the user on the computing device, and selectively closing the secure connection in response to one or more of at least one activity and at least one state of the user.

Growing community of inventors

Fair Oaks Ranch, TX, United States of America

Thomas Bret Buckingham