Systems and methods to protect against the release of information

• US 9,003,545 B1
• Filed: 06/15/2012
• Issued: 04/07/2015
• Est. Priority Date: 06/15/2012
• Status: Active Grant

• Current Assignee: NortonLifeLock Inc.
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Oliver, Ian
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Sanders, Stephen
• Application Number:
  US13/524,107
• Time in Patent Office: 1,026 Days
• Field of Search: 726/26
• US Class Current: 726/26
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04M 2201/40 using speech recognition speech recognition per se G10L15/00
• CPC Class Codes: H04M 2203/2038 Call context notifications
• CPC Class Codes: H04M 3/20 with means for interrupting existing connections; with means for breaking-in on conversations
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier

Abstract

A computer-implemented method to protect against the release of information is described. The processor monitors for a communication with an unverified number. Upon detection of the communication with an unverified number, the processor monitors the communication for a protected string. Upon detection of a protected string, the processor performs an intervention action.

Claims

1. A computer-implemented method to protect against the release of information, comprising:

monitoring, by a processor of a telephone device of a user, an established communication with an unverified number, the established communication comprising a connected telephone call between the telephone device of the user and a device associated with the unverified number;

monitoring, by the processor, audible information from the established communication for a spoken release of at least a portion of a protected string in during the established communication; and

upon detection of at least a portion of the protected string from the audible information, performing, by the processor, an intervention action, the intervention action preventing the user from providing sensitive information during the established communication.

2. The method of claim 1, further comprising:

determining at least one characteristic about the unverified number.

3. The method of claim 1, wherein monitoring the audible information comprises:

obtaining a digital version of the audible information;

correlating the digital version with the protected string; and

determining that the correlation satisfies a threshold.

4. The method of claim 1, wherein the protected string comprises a sequence of numbers having at least two numbers.

5. The method of claim 1, wherein the protected string comprises a sequence of letters having at least two letters.

6. The method of claim 1, wherein the protected string comprises a sequence of characters having a combination of letters and numbers.

7. The method of claim 1, further comprising:

obtaining reputation information about the unverified number.

8. The method of claim 1, further comprising:

providing reputation information about the unverified number.

9. A computing device configured to protect against the release of information, comprising:

a processor;

memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable by the processor to;

monitor an established communication with an unverified number, the established communication comprising a connected telephone call between the telephone device of the user and a device associated with the unverified number;

monitor audible information from the established communication for a spoken release of at least a portion of a protected string during the established communication; and

upon detection of at least a portion of the protected string from the audible information, perform an intervention action, the intervention action preventing the user from providing sensitive information during the established communication.

10. The computing device of claim 9, wherein the instructions are further executable by the processor to:

determine at least one characteristic about the unverified number.

11. The computing device of claim 9, wherein the instructions to monitor the audible information are further executable by the processor to:

obtain a digital version of the audible information;

correlate the digital version with the protected string; and

determine that the correlation satisfies a threshold.

12. The computing device of claim 9, wherein the protected string comprises a sequence of numbers having at least two numbers.

13. The computing device of claim 9, wherein the protected string comprises a sequence of letters having at least two letters.

14. The computing device of claim 9, wherein the protected string comprises a sequence of characters having a combination of letters and numbers.

15. The computing device of claim 9, wherein the instructions are further executable by the processor to:

obtain reputation information about the unverified number.

16. The computing device of claim 9, wherein the instructions are further executable by the processor to:

provide reputation information about the unverified number.

17. A computer-program product to protect against the release of information, the computer-program product comprising a non-transitory computer-readable storage medium that stores computer executable instructions, the instructions being executable by a processor to:

monitor an established communication with an unverified number, the established communication comprising a connected telephone call between the telephone device of the user and a device associated with the unverified number;

monitor audible information from the established communication for a spoken release of at least a portion of a protected string during the established communication; and

upon detection of at least a portion of the protected string from the audible information, perform an intervention action, the intervention action preventing the user from providing sensitive information during the established communication.

18. The computer-program product of claim 17, wherein the instructions are further executable by the processor to:

determine at least one characteristic about the unverified number.