Method and Apparatus for an End User Identity Protection Suite

• US 20140115717A1
• Filed: 12/30/2013
• Published: 04/24/2014
• Est. Priority Date: 11/17/2008
• Status: Active Grant

• Current Assignee: HID Global Corporation (Assa Abloy AB)
• Original Assignee: Fabio Santini, Igor Katkov, Sergey Lipin, Vance Bjorn
• Inventors: Bjorn, Vance, Katkov, Igor, Lipin, Sergey, Santini, Fabio
• Granted Patent: US 10,275,602 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

An end user identity protection suite (IPS) is discussed. In one embodiment, the IPS includes a identity validation system to evaluate a security level of at least one identity tool, the identity tool not related to computer security but rather to the user'"'"'s identity. In one embodiment, the IPS further includes a security signal logic to generate a security status signal indicating an overall security state of the user, the security status signal comprising a combination of the security levels of each of the plurality of identity tools.

Claims

1. An end user identity protection suite (IPS) comprising:

a identity validation system to evaluate a security level of at least one identity tool, the identity tool not related to computer security but rather to the user'"'"'s identity; and

a security signal logic to generate a security status signal indicating an overall security state of the user, the security status signal comprising a combination of the security levels of each of the plurality of identity tools.

2. The IPS of claim 1, further comprising:

a secured storage to maintain a plurality of passwords accessible via a single release mechanism;

an individual password evaluator to evaluate the plurality of passwords for strength;

a joint password evaluator to evaluate the plurality of passwords in conjunction; and

the security signal logic using the data from the individual password evaluator and the joint password evaluator to generate the security status signal.

3. The IPS of claim 2, wherein the individual password evaluator utilizes one or more of:

password length, password complexity, and password maturity; and

the joint password evaluator utilizes an evaluation of password commonality across the plurality of passwords.

4. The IPS of claim 2, wherein the single release mechanism comprises one or more of the following:

fingerprint recognition, facial recognition, iris identification, voice recognition, keystroke evaluation, a password, a token, and a smart card.

5. The IPS of claim 1, wherein the security status signal comprises a single color indicator to provide continuous visual feedback to the user indicating the security state of the user.

6. The IPS of claim 5, further comprising:

a plurality of security status signals, one for each of the plurality of applications.

7. The IPS of claim 1, further comprising:

a third party evaluator interface to receive data from an external application regarding an evaluation of a security tool, the third party evaluator interface to generate a security level evaluation for the external application.

8. The IPS of claim 1, further comprising:

a user interface to at least one application, the user interface enabling a user to control the at least one application from the IPS.

9. The IPS of claim 8, wherein the user interface provides a link to the native interface of the at least one application.

10. The IPS of claim 1, further comprising:

an identity display to provide a desktop visual display of the security signal, the desktop visual display visible when the IPS is not an active application.

11. A computer-implemented method for an end user identity protection suite comprising:

analyzing a security level based on at least one security application; and

generating an overall security state value for the user; and

based on the overall security state value, generating a visual display to provide an at-a-glance indicator to the user.

12. The method of claim 11, wherein at least one security application includes one or more of:

encryption, password security, and financial security applications.

13. The method of claim 11, further comprising:

providing an interface to the at least one security application through the end user identity protection suite, to provide a single interface to access security applications.

14. The method of claim 11, wherein the visual display is visible to the user when the end user identity protection suite is not an active application.

15. The method of claim 11, further comprising:

evaluating security of a plurality of stored passwords, the evaluation including evaluating each password separately and jointly; and

generating a security state value for the plurality of stored passwords.

16. The method of claim 15, further comprising:

displaying a security state value for each of the applications evaluated, in addition to the overall security state value.

17. A computer-implemented system for an end user protection suite comprising:

an identity validation system including at least two evaluators, each of which evaluates the security state of an application; and

a security signal logic to generate an overall security state signal based on the security state of the applications, as determined by the identity validation system.

18. The system of claim 17, wherein the evaluators comprise one or more of:

a password evaluator, a third party evaluator interface, and an encryption evaluator.

19. The system of claim 17, further comprising:

the identity validation system to evaluate a security level of at least one identity tool, the identity tool not related to computer security but rather to the user'"'"'s identity.

20. The IPS of claim 17, wherein the overall security state signal comprises one or more of:

a single color indicator to provide continuous visual feedback to the user indicating the security state of the user; and

a plurality of security status signals, one for each of the plurality of applications.