Client Security Scoring

• US 20140201841A1
• Filed: 03/30/2012
• Published: 07/17/2014
• Est. Priority Date: 03/30/2012
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Deshpande, Nikhil M., Zmudzinski, Krvstof, Gardner, Danald S.
• Application Number:
  US13/976,511
• Publication Number:
  US 20140201841A1
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing

Abstract

Methods, apparatuses and techniques for security evaluation. A security profile of a client device is evaluated. The security profile is based on hardware and software security mechanism utilization of the client device. A security score is generated based on the security profile. The security score is provided to a service provider.

Claims

1. A method comprising:

evaluating a security profile of a client device, wherein the security profile is based on hardware and software security mechanism utilization of the client device;

generating a security score based on the security profile; and

providing the security score to a service provider.

2. The method of claim 1 wherein the security score is provided by an independent third party not affiliated with the client device or the service provider.

3. The method of claim 1 wherein the security score is generated by an independent third party not affiliated with the client device or the service provider.

4. The method of claim 1 wherein the hardware utilization comprises determining whether the client device is utilizing embedded hardware security mechanisms.

5. The method of claim 1 wherein the security profile comprises a geographical location history of the client device.

6. The method of claim 1 wherein the security profile comprises an evaluation of current client transaction requests with historical client transaction requests.

7. The method of claim 1 wherein the security profile comprises a comparison of a current client transaction with calendar activities corresponding to a user of the client device.

8. The method of claim 1 wherein evaluating a security profile of a client device, wherein the security profile is based on hardware and software utilization of the client device is performed by an agent resident on the client device.

9. The method of claim 8 wherein the agent is protected by a hardware security mechanism.

10. The method of claim 1 wherein evaluating a security profile of a client device, wherein the security profile is based on hardware and software utilization of the client device is performed by a third party entity coupled with the client device.

11. A non-transitory computer-readable medium having stored there on instructions that, when executed by one or more processors, cause the one or more processors to:

evaluate a security profile of a client device, wherein the security profile is based on hardware and software utilization of the client device;

generate a security score based on the security profile; and

provide the security score to a service provider.

12. The medium of claim 11 wherein the security score is provided by an independent third party not affiliated with the client device or the service provider.

13. The medium of claim 11 wherein the security score is generated by an independent third party not affiliated with the client device or the service provider.

14. The medium of claim 11 wherein the hardware utilization comprises determining whether the client device is utilizing embedded hardware security mechanisms.

15. The medium of claim 11 wherein the security profile comprises a geographical location history of the client device.

16. The medium of claim 11 wherein the security profile comprises an evaluation of current client transaction requests with historical client transaction requests.

17. The medium of claim 11 wherein the security profile comprises a comparison of a current client transaction with calendar activities corresponding to a user of the client device.

18. The medium of claim 11 wherein evaluating a security profile of a client device, wherein the security profile is based on hardware and software utilization of the client device is performed by an agent resident on the client device.

19. The medium of claim 18 wherein the agent is protected by a hardware security mechanism.

20. The medium of claim 11 wherein evaluating a security profile of a client device, wherein the security profile is based on hardware and software utilization of the client device is performed by a third party entity coupled with the client device.

21. An apparatus comprising:

a memory to store instructions;

a processor coupled with the memory, the processor to execute instructions stored in the memory, the instructions to cause the apparatus to receive from a client device hardware and software utilization information, to evaluate the information from the client device and to generate a security score based on the information, the apparatus further to provide the security score to one or more service providers.

22. The apparatus of claim 21 wherein the apparatus corresponds to an independent third party not affiliated with the client device or the service provider.

23. The apparatus of claim 21 wherein the hardware utilization comprises determining whether the client device is utilizing embedded hardware security mechanisms.

27. The apparatus of claim 21 wherein evaluating a security profile of a client device, wherein the security profile is based on hardware and software utilization of the client device is performed by an agent resident on the client device.

29. The apparatus of claim 21 wherein evaluating a security profile of a client device, wherein the security profile is based on hardware and software utilization of the client device is performed by a third party entity coupled with the client device.

24-26. -26. (canceled)

28. (canceled)