The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Mar. 25, 2014
Filed:
Mar. 30, 2012
Marten Van Dijk, Somerville, MA (US);
Kevin D. Bowers, Melrose, MA (US);
Samuel Curry, Andover, MA (US);
Sean P. Doyle, Edmonds, WA (US);
William M. Duane, Westford, MA (US);
Ari Juels, Brookline, MA (US);
Michael J. O'malley, Lowell, MA (US);
Nikolaos Triandopoulos, Arlington, MA (US);
Riaz Zolfonoon, Marlborough, MA (US);
Marten van Dijk, Somerville, MA (US);
Kevin D. Bowers, Melrose, MA (US);
Samuel Curry, Andover, MA (US);
Sean P. Doyle, Edmonds, WA (US);
William M. Duane, Westford, MA (US);
Ari Juels, Brookline, MA (US);
Michael J. O'Malley, Lowell, MA (US);
Nikolaos Triandopoulos, Arlington, MA (US);
Riaz Zolfonoon, Marlborough, MA (US);
EMC Corporation, Hopkinton, MA (US);
Abstract
An improved technique for assessing the security status of a device on which a soft token is run collects device posture information from the device running the soft token and initiates transmission of the device posture information to a server to be used in assessing whether the device has been subjected to malicious activity. The device posture information may relate to the software status, hardware status, and/or environmental context of the device. In some examples, the device posture information is transmitted to the server directly. In other examples, the device posture information is transmitted to the server via auxiliary bits embedded in passcodes displayed to the user, which the user may read and transfer to the server as part of authentication requests. The server may apply the device posture information in a number of areas, including, for example, authentication management, risk assessment, and/or security analytics.