Online identity tracking

• US 20060230039A1
• Filed: 01/25/2006
• Published: 10/12/2006
• Est. Priority Date: 01/25/2005
• Status: Abandoned Application

• Current Assignee: MarkMonitor Inc.
• Original Assignee: MarkMonitor Inc.
• Inventors: Shull, Mark, Cooper, Elisa, Bohlman, William
• Application Number:
  US11/339,985
• Publication Number:
  US 20060230039A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Embodiments of the invention provide novel systems, software and methods for gathering information about online entities and for identifying, evaluating and scoring such entities. Merely by way of example, the trustworthiness of an online entity, such as a domain, can be evaluated based information known about other online entities (e.g., the owner of the domain, other domains) associated with that domain. In an aspect of the invention, for example, publicly-available data (and, in some cases, other data) can be obtained and correlated to reveal previously-unknown associations between various online entities, despite, in some cases, the attempts of those entities to obscure such associations. This can facilitate the evaluation of such entities. For instance, if a new domain is registered, there generally is little basis on which to evaluate the trustworthiness of that domain (other than facially-apparent characteristics, such as the domain name itself), since it has not yet begun operating. By ascertaining the domain'"'"'s association with other online entities, however, information known about the reputation and/or behavior of those entities can be used to inform an evaluation of the domain.

Claims

1. A computer system for evaluating an Internet domain registration, the computer system comprising:

a processor;

a database comprising a plurality of records corresponding to a plurality of online entities, each record comprising information about one of the online entities; and

a set of instructions executable by the processor, the set of instructions comprising;

(a) instructions to identify a domain registration of interest, the domain registration comprising a data element comprising information related to the domain of interest;

(b) instructions to search the database for the data element to produce a search result comprising a set of one or more records, one of the set of one or more records corresponding to an online entity;

(c) instructions to associate the domain registration with the online entity;

(d) instructions to identify a second data element in the record corresponding to the online entity;

(e) instructions to search the database for the second data element to produce a search result comprising a second set of one or more records, one of the second set of the one or more records corresponding to a second online entity;

(f) instructions to associate the domain registration with the second online entity; and

(g) instructions to determine whether the domain registration is likely to be trustworthy, based upon information about the first and second online entities.

2. A computer program embodied on a computer readable medium, the computer program comprising a set of instructions executable by one or more computers, the set of instructions comprising:

instructions to maintain a database comprising a plurality of records corresponding to a plurality of online entities, each record comprising information about one of the online entities;

instructions to identify a domain registration of interest, the domain registration comprising a data element comprising information related to the domain of interest;

instructions to search the database for the data element to produce a search result comprising a set of one or more records, one of the set of one or more records corresponding to an online entity;

instructions to associate the domain registration with the online entity;

instructions to identify a second data element in the record corresponding to the online entity;

instructions to search the database for the second data element to produce a search result comprising a second set of one or more records, one of the second set of the one or more records corresponding to a second online entity;

instructions to associate the domain registration with the second online entity; and

instructions to determine whether the domain registration is likely to be trustworthy, based upon information about the first and second online entities.

3. A method of evaluating an Internet domain registration, the method comprising:

maintaining a database comprising a plurality of records corresponding to a plurality of online entities, each record comprising information about one of the online entities;

identifying a domain registration of interest, the domain registration comprising a data element comprising information related to the domain of interest;

searching the database for the data element to produce a search result comprising a set of one or more records, one of the set of one or more records corresponding to an online entity;

associating the domain registration with the online entity;

identifying a second data element in the record corresponding to the online entity;

searching the database for the second data element to produce a search result comprising a second set of one or more records, one of the second set of the one or more records corresponding to a second online entity;

associating the domain registration with the second online entity; and

based upon information about the first and second online entities, determining whether the domain registration is likely to be trustworthy.

4. A method as recited in claim 3, wherein the data element comprises information selected from the group consisting of:

an email address, a physical address, a telephone number, a personal name, a corporate name and an IP address.

5. A method of identifying an online entity, the method comprising:

maintaining in a data store a set of data about a plurality of online entities, wherein the set of data comprises a plurality of data elements, each of the plurality of data elements being related to at least one of the plurality of online entities;

identifying with a computer a first of the plurality of online entities, based on at least part of the set of data;

identifying a first data group, the first data group comprising at least one data element associated with a first of the plurality of online entities;

identifying a second data group, the second data group comprising at least one data element associated with a second of the plurality of online entities;

determining that the first data group and the second data group each comprise at least one common data element; and

based on the at least one common data element, associating the first of the plurality of online entities with the second of the plurality of online entities.

6. A method of identifying an online entity as recited in claim 5, wherein associating the first of the plurality of online entities and the second of the plurality of online entities comprises identifying the first of the plurality of online entities and the second of the plurality of online entities as the same online entity.

7. A method of identifying an online entity as recited in claim 5, wherein associating the first of the plurality of online entities and the second of the plurality of online entities comprises creating a new database record comprising information about the first of the plurality of online entities and information about the second of the plurality of online entities.

8. A method of identifying an online entity as recited in claim 5, wherein the online entity is a person.

9. A method of identifying an online entity as recited in claim 5, wherein the online entity is an Internet domain.

10. A method of identifying an online entity as recited in claim 5, wherein the at least one common data element comprises data selected from the group consisting of a domain name, a hostname, an IP address, a network block, a personal name, a corporate name, an electronic mail address, a physical address and a telephone number.

11. A method of identifying an online entity as recited in claim 5, further comprising:

identifying a third data group, the third data group comprising at least one data element associated with a third of the plurality of online entities;

determining that the second data group and the third data group each comprise at least one common data element; and

based on the at least one common data element, associating the first of the plurality of online entities and the third of the plurality of online entities.

12. A method of identifying an online entity as recited in claim 5, further comprising:

assigning a trust score to the first of the plurality of online entities, based at least in part on information about the second of the plurality of online entities.

13. A method of identifying an online entity, the method comprising:

obtaining an identifier associated with the online entity;

maintaining a set of identifying data compiled from a plurality of data sources, wherein the set of identifying data comprises a plurality of data elements of disparate types;

correlating the plurality of data elements to ascertain a relationship between the plurality of data elements;

searching the set of identifying data to identify one of the plurality of data elements as being associated with the identifier; and

based on the relationship between the plurality of data elements, identifying the online entity.

14. A method as recited in claim 13, wherein the identifier comprises an identifier selected from a group consisting of a domain name, a hostname, an IP address, a network block, a personal name, a corporate name, an electronic mail address, a physical address and a telephone number.

15. A method as recited in claim 13, wherein the at least one of the plurality of data elements comprises information selected from a group consisting of registrar information, WHOIS information, network registration information, domain name service (“

DNS”

) information, Uniform Dispute Resolution Policy (“

UDRP”

) information, trademark information, corporate records information, public records information, information about past illicit activities and enabling party information.

16. A method as recited in claim 13, the method further comprising:

obtaining from a plurality of data sources a plurality of sets of information, each of the plurality of sets of information comprising information useful for identifying an online entity.

17. A computer system comprising one or more computers configured to perform the method recited in claim 13.

18. A computer software program comprising instructions executable by one or more computers to perform the method recited in claim 13.

19. A method of creating an identification database, the method comprising:

harvesting, with one or more computers, data about a plurality of online entities from a plurality of data sources;

storing the harvested data in at least one data store;

identifying with a computer an online entity from at least some of the harvested data;

searching the data store for additional information related to the online entity; and

associating the additional information with the online entity.

20. A method as recited in claim 19, wherein the harvested data comprises a plurality of data elements of disparate types.

21. A method as recited in claim 20, the method further comprising:

correlating the plurality of data elements to ascertain a relationship between the plurality of data elements.

22. A method as recited in claim 21, wherein associating the additional information with the online entity comprises associating the plurality of data elements with the online entity.

23. A method as recited in claim 19, further comprising:

creating in a second data store an association between the online entity and the additional information.

24. A method as recited in claim 19, further comprising:

determining that a second online entity is related to the online entity; and

associating the additional information with the second online entity.