System and method for creating a list of shared information on a peer-to-peer network

• US 8,909,664 B2
• Filed: 04/10/2008
• Issued: 12/09/2014
• Est. Priority Date: 04/12/2007
• Status: Active Grant

• Current Assignee: Kroll Information Assurance LLC
• Original Assignee: Tiversa Ip, Inc.
• Inventors: Hopkins, Samuel P.
• Primary Examiner(s): Fan, Shiow-Jy
• Application Number:
  US12/082,407
• Publication Number:
  US 20080263013A1
• Time in Patent Office: 2,434 Days
• Field of Search: 707/999.003, 707/3, 707/E17.032, 707/E17.135, 707/763, 705/39
• US Class Current: 707/763
• CPC Class Codes: G06F 16/1837 Management specially adapted to peer-to-peer storage networks topology management mechanisms of peer-to-peer networks H04L67/1042
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

Today information Peer-to-Peer networks sometimes share improper information. Embodiments of the invention solve this problem by creating a list of shared information for analysis. In particular, a method or corresponding apparatus of an example embodiment includes a network node to obtain one or more searches from a Peer-to-Peer network. Next, the network node compares the one or more searches to one or more criteria. After comparing, the network node updates the one or more criteria to include variations of the one or more searches. Further, the network node issues the one or more searches based on the updated criteria. Next, the network node determines resultant information associated with the one or more searches. After determining, the network node creates a list of the resultant information for analysis. Using the list, an operator or software logic can analyze the resultant information to identify patterns and, in turn, identify improper information sharing.

Claims

1. A method comprising:

obtaining one or more searches from one or more messages broadcast on a Peer-to-Peer network;

determining if the one or more obtained searches match one or more criteria, in which the one or more criteria is one of;

a predefined keyword, set of keywords, or a subset of keywords that is indicative of a suspicious individual who is searching for information referring to an individual organization, group, or other identifiable entity;

in response to determining that the one or more obtained searches match the one or more criteria;

updating the one or more criteria to include variations of the one or more obtained searches, the variations of the one or more obtained searches including account punctuation, pluralization, and other variations of the one or more searches,

issuing one or more new searches to the Peer-to-Peer network based on the updated criteria, the one or more new searches being different from the one or more obtained searches,

determining resultant information associated with the one or more new searches, and

creating a list of the resultant information for analysis, the resultant information comprising one or more of;

an organization'"'"'s name, information related to the organization, an individual'"'"'s name, information related to the individual; and

in response to determining that the one or more obtained searches do not match the one or more criteria, monitoring the Peer-to-Peer network for other searches.

2. A method as is claimed in claim 1 wherein comparing the one or more obtained searches to the one or more criteria uses one of the following:

compare, intrastring, fuzzy logic match, or other comparison technique.

3. A method as is claimed in claim 1 is performed by C++ or Visual Basic program code.

4. A method as is claimed in claim 1 wherein issuing the one or more new searches based on the updated criteria further comprises:

sending a TCP/IP packet with the one or more new searches to a network node on the Peer-to-Peer network.

5. A method as is claimed in claim 1 wherein the list is stored in a database, a computer program, memory, or suitable storage device.

6. A method as is claimed in claim 1 further comprising collecting a fee for providing access to the list.

7. A method as is claimed in claim 1 further comprising providing the list of the resultant information to an organization or individual as evidence that access to sensitive or private information is being allowed, via searching the Peer-to-Peer network, resulting in risks to the organization or individual.

8. A network node to execute instructions for computer program code to create a list of searched information on a Peer-to-Peer network, comprising:

a network node containing computer program code configured to;

(1) obtain one or more searches from one or more messages broadcast on a Peer-to-Peer network;

(2) determine if the one or more obtained searches match one or more criteria, in which the one or more criteria is one of;

a predefined keyword, set of keywords, or a subset of keywords that is indicative of a suspicious individual who is searching for information referring to an individual, organization, group, or other identifiable entity;

(3) in response to determining that the one or more obtained searches match the one or more criteria;

update the one or more criteria to include variations of the one or more obtained searches by employing account punctuation, pluralization, and other variations of the searches to update the one or more criteria,

issue one or more new searches to the Peer-to-Peer network based on the updated criteria, the one or more new searches being different from the one or more obtained searches,

determine resultant information associated with the one or more new searches, and

create a list of the resultant information in a database, the resultant information comprising one or more of;

an organization'"'"'s name, information related to the organization, an individual'"'"'s name, information related to the individual; and

(4) in response to determining that the one or more obtained searches do not match the one or more criteria, monitor the Peer-to-Peer network for other searches.

9. A network node as is claimed in claim 8 wherein the network node uses one of the following:

compare, intrastring, fuzzy logic match, or other comparison technique to compare the one or more obtained searches to the one or more criteria.

10. A network node as is claimed in claim 8 wherein the network node creates a list of searched information by using C++ or Visual Basic program code.

11. A network node as is claimed in claim 8 wherein the network node is further configured to send a TCP/IP packet with the one or more new searches to a communications network to determine resultant information.

12. A network node as is claimed in claim 8 wherein the list is stored in a database, a computer program, memory, or suitable storage device.

13. A network node as is claimed in claim 8 wherein the network node is further configured to identify a security risk based on the one or more new searches.

14. A non-transitory carrier medium comprising a computer storage medium having computer readable code for controlling a processor to ensure execution of postprocessing logic for a subject computer program routine, by:

obtaining one or more searches from one or more messages broadcast on a Peer-to-Peer network;

determining if the one or more obtained searches match one or more criteria, in which the one or more criteria is one of;

a predefined keyword, set of keywords, or a subset of keywords that is indicative of a suspicious individual who is searching for information referring to an individual, organization, group, or other identifiable entity;

in response to determining that the one or more obtained searches match the one or more criteria,

updating the one or more criteria to include variations of the one or more obtained searches, the variations of the one or more obtained searches including account punctuation, pluralization, and other variations of the one or more searches,

issuing one or more new searches to the Peer-to-Peer network based on the updated criteria, the one or more new searches being different from the one or more obtained searches,

determining resultant information associated with the one or more new searches, and

creating a list of the resultant information for analysis, the resultant information comprising one or more of;

an organization'"'"'s name, information related to the organization, an individual'"'"'s name, information related to the individual; and

in response to determining that the one or more obtained searches do not match the one or more criteria, monitor the Peer-to-Peer network for other searches.