The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 25, 2026

Filed:

Sep. 30, 2025
Applicant:

Intuit Inc., Mountain View, CA (US);

Inventors:

Asaf Ben Levy, Sunnyvale, CA (US);

Michael Kalika, Rishon Le-Tzion, IL;

Chad Cloes, Escondido, CA (US);

Francys Scott, San Diego, CA (US);

Kyle Rose, Saint Johns, FL (US);

Lorie Tatsugawa, San Francisco, CA (US);

Itzik Vainsenker, Petah Tikva, IL;

Gleb Keselman, Modiin, IL;

Yaron Yehuda Karni, Tel Aviv, IL;

Guy Belotzerkovsky, Hod Hasharon, IL;

Zach Probst, Atlanta, GA (US);

Marios Leventopoulos, Menlo Park, CA (US);

Assignee:

Intuit Inc., Mountain View, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G06F 9/54 (2006.01);
U.S. Cl.
CPC ...
H04L 63/1425 (2013.01); G06F 9/547 (2013.01); H04L 63/1441 (2013.01);
Abstract

The present disclosure relates to systems and methods for application programming interface (API) mapping to address security and operational challenges in modern software ecosystems. The disclosed system introduces an API map that associates API calls with session identifiers, enabling the construction of detailed API transaction lineages and providing attribution to organizational teams, hardware infrastructure, and customer identities. Telemetry data from API gateways, service meshes, and event buses is captured to construct a central API inventory and identify business flows, such as 'move money' or “file tax.” The system facilitates anomaly detection, blast radius analysis, incident tracing, and fraud behavior investigation, while reducing mean time to detect (MTTD) and mean time to remediate (MTTR). The non-intrusive design integrates session IDs into HTTP headers, ensuring seamless compatibility with existing systems. By leveraging real-time visibility and advanced detection capabilities, the disclosed framework enhances security and operational efficiency in API ecosystems.


Find Patent Forward Citations

Loading…