System and Method for Risk Assessment of an Asserted Identity

• US 20120123821A1
• Filed: 11/16/2010
• Published: 05/17/2012
• Est. Priority Date: 11/16/2010
• Status: Abandoned Application

• Current Assignee: Raytheon Company (Rtx Corporation)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Rickman, Dale M.
• Application Number:
  US12/947,437
• Publication Number:
  US 20120123821A1
• Time in Patent Office: Days
• US Class Current: 705/7.28
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: G06Q 40/08 Insurance

Abstract

A system for providing a risk assessment for an asserted identity comprising an identity database, a first risk database, a second risk database, an identity module that receives the asserted identity and searches the identity database to retrieve one or more known identities and calculates a probability score for each retrieved known identity, a correlator module that receives each retrieved known identity and respective probability score from the identity module, the correlator module further comprising an identity risk sub-module that searches the first and the second risk databases to retrieve respective first and second risk scores for each known identity, and an assessment module that receives the probability score and the first and second risk scores associated with each of the known identities from the correlator module and calculates a final risk score therefrom to thereby provide a risk assessment for the asserted identity.

Claims

1. A method for providing a risk assessment for an asserted identity, the method comprising the steps of:

searching an identity database to retrieve one or more known identities based on the asserted identity;

calculating a probability score for each retrieved said known identity;

searching a first risk database to retrieve a first risk score for each said known identity;

searching a second risk database to retrieve a second risk score for each said known identity; and

calculating a final risk score based on said probability score and said first and second risk scores associated with each of said known identities thereby providing a risk assessment for the asserted identity.

2. The method of claim 1, wherein the step of calculating a probability score further comprises the steps of:

searching open source data to retrieve information on each retrieved said known identity; and

adjusting said probability score for each respective said known identity based on the retrieved information.

3. The method of claim 2, wherein said first database is a watchlist database comprised of watchlist names each having a watchlist risk score, and wherein said first risk score is said watchlist risk score.

4. The method of claim 3, wherein said second database is an identity history database comprised of identity names each having a history risk score, and wherein said second risk score is said history risk score.

5. The method of claim 4, further comprising, wherein the asserted identity includes behavior information, the steps of:

searching a pattern risk database to retrieve a behavior risk score based on said behavior information; and

adjusting said final risk score based on said behavior risk score.

6. The method of claim 1, wherein the asserted identity includes a desired entitlement, and wherein the step of calculating a final risk score further comprises the steps of:

searching an entitlement risk database to retrieve an entitlement scaling factor based on said desired entitlement; and

adjusting said final risk score based on said entitlement scaling factor.

7. The method of claim 1, wherein the step of calculating a final risk score further comprises the steps of:

searching an environmental factor database to retrieve an environmental scaling factor; and

adjusting said final risk score based on said environmental scaling factor.

8. A method for providing a risk assessment for an asserted identity, the method comprising the steps of:

searching an identity database to retrieve one or more known identities based on the asserted identity;

searching open source data to retrieve information on each retrieved said known identity;

calculating a probability score for each retrieved said known identity based on the asserted identity and said retrieved information;

searching a first risk database to retrieve a first risk score for each said known identity;

searching a second risk database to retrieve a second risk score for each said known identity; and

calculating a final risk score based on said probability score and said first and second risk scores associated with each of said known identities thereby providing a risk assessment for the asserted identity.

9. The method of claim 8, wherein the asserted identity includes a desired entitlement, and wherein the step of calculating a final risk score further comprises the steps of:

searching an entitlement risk database to retrieve an entitlement scaling factor based on said desired entitlement; and

adjusting said final risk score based on said entitlement scaling factor.

10. The method of claim 9, wherein the step of calculating a final risk score further comprises the steps of:

searching an environmental factor database to retrieve an environmental scaling factor; and

adjusting said final risk score based on said scaling factor.

11. The method of claim 10, wherein said first database is a watchlist database comprised of watchlist names each having a watchlist risk score, and wherein said first risk score is said watchlist risk score.

12. The method of claim 11, wherein said second database is an identity history database comprised of identity names each having a history risk score, and wherein said second risk score is said history risk score.

13. The method of claim 12, wherein the asserted identity includes an assigned workflow, and wherein the step of calculating a final risk score is performed in accordance with a risk calculation rule selected pursuant to said assigned workflow.

14. The method of claim 8, further comprising, wherein the asserted identity includes behavior information, the steps of:

searching a pattern risk database to retrieve a behavior risk score based on said behavior information; and

adjusting said final risk score based on said behavior risk score.

15. A system for providing a risk assessment for an asserted identity comprising:

an identity database;

a first risk database;

a second risk database;

an identity module that receives the asserted identity and searches said identity database to retrieve one or more known identities and calculates a probability score for each retrieved said known identity;

a correlator module that receives each retrieved said known identity and respective probability score from said identity module, said correlator module further comprising;

an identity risk sub-module that searches said first and said second risk databases to retrieve respective first and second risk scores for each said known identity; and

an assessment module that receives said probability score and said first and second risk scores associated with each of said known identities from said correlator module and calculates a final risk score therefrom thereby providing a risk assessment for the asserted identity.

16. The system of claim 15, further comprising an entitlement risk database, and wherein the asserted identity includes a desired entitlement, said assessment module being further operable to search said entitlement risk database to retrieve an entitlement scaling factor based on said desired entitlement and adjust said final risk score based on said entitlement scaling factor.

17. The system of claim 15, further comprising an environmental factor database, and wherein said assessment module is further operable to search said environmental factor database to retrieve an environmental scaling factor and adjust said final risk score based on said environmental scaling factor.

18. The system of claim 15, wherein said first database is a watchlist database comprised of watchlist names each having a watchlist risk score, and wherein said first risk score is said watchlist risk score.

19. The system of claim 18, wherein said second database is an identity history database comprised of identity names each having a history risk score, and wherein said second risk score is said history risk score.

20. The system of claim 15, further comprising a rules database, and wherein the asserted identity includes an assigned workflow, said assessment module being further operable to retrieve a risk calculation rule from said rules database selected pursuant to said assigned workflow and calculate said final risk score in accordance with said risk calculation rule.

21. The system of claim 15, wherein said correlator module further comprises a pattern risk sub-module in communication with a pattern risk database, and wherein the asserted identity includes behavior information, said pattern risk sub-module operable to search said pattern risk database to retrieve a behavior risk score based on said behavior information and adjust said final risk score based on said behavior risk score.