The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 14, 2020

Filed:

Oct. 05, 2016
Applicant:

Microsoft Technology Licensing, Llc, Redmond, WA (US);

Inventors:

Moshe Israel, Ramat-Gan, IL;

Royi Ronen, Tel-Aviv, IL;

Daniel Alon, Tel-Mond, IL;

Tomer Teller, Tel-Aviv, IL;

Hanan Shteingart, Herzelia, IL;

Assignee:
Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); G06F 21/62 (2013.01); H04L 29/08 (2006.01); H04L 12/24 (2006.01); H04L 12/26 (2006.01); G06F 21/55 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
G06F 21/6218 (2013.01); G06F 21/55 (2013.01); G06F 21/566 (2013.01); H04L 41/06 (2013.01); H04L 43/16 (2013.01); H04L 63/1416 (2013.01); H04L 63/1441 (2013.01); H04L 67/22 (2013.01); H04L 67/306 (2013.01); G06F 2221/034 (2013.01);
Abstract

Controlling device security includes obtaining a set of device activity data indicating current device activity on a device and a set of user activity data indicating a current activity state of one or more legitimate users of the device. It is determined whether the indicated current activity state of the users indicates that a legitimate user is in an active state on the device, or that none of the legitimate users is in an active state on the device. A statistical fit of the indicated current device activity on the device, with the indicated current activity state of the one or more legitimate users, is determined, by a comparison with at least one of the models that are generated via supervised learning. A security alert action may be initiated, based on a result of the determination of the statistical fit indicating a compromised state of the device.


Find Patent Forward Citations

Loading…