Risk identification

• US 9,667,644 B2
• Filed: 12/18/2015
• Issued: 05/30/2017
• Est. Priority Date: 08/30/2013
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Blake, Adam James, Langsam, Peter J., Zuhde, Jennifer Ann, Bradley, Thomas
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): MURPHY, JOSEPH B
• Application Number:
  US14/974,191
• Publication Number:
  US 20160105457A1
• Time in Patent Office: 529 Days
• CPC Class Codes: G06F 40/20 Natural language analysis semantic analysis of natural language G06F40/30
• CPC Class Codes: G06F 40/205 Parsing
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

Systems, methods and apparatuses for analyzing a string of terms (e.g., a search query, text of an email, and the like) are provided. In some examples, a determination is made as to whether one or more terms in the string matches a keyword. If so, various parts of speech of one or more terms in the string of terms may be determined. In some examples, a category of risk of the terms for which the part of speech is identified may also be determined. A risk rating may then be determined for the string of terms based on the relationship between the terms (e.g., the parts of speech) and the category or categories identified. In some examples, one or more additional actions may be implemented based on the risk rating.

Claims

1. An apparatus, comprising:

at least one processor; and

a memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to;

parse a string of terms into a plurality individual terms;

determine whether the plurality of individual terms includes at least one term matching a keyword of a keyword listing;

responsive to determining that the plurality of individual terms includes at least one term matching the keyword, determine a part of speech of the at least one term matching the keyword;

responsive to determining that the part of speech of the at least one term is one of;

a noun and a verb, identify the other of the noun and the verb in the plurality of individual terms;

identify a category of risk associated with the noun and a category of risk associated with the verb;

determine whether the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are a same category of risk;

responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are the same category, determine a first risk rating of the string of terms including the identified noun and the identified verb, the first risk rating being based on the identified noun, the identified verb and the same category; and

responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are different categories, determine a second risk rating of the string of terms including the identified noun and identified verb, the second risk rating being based on the identified noun, the identified verb, the identified category of risk associated with the noun and the identified category of risk associated with the verb, the second risk rating being different from the first risk rating.

2. The apparatus of claim 1, further including instructions that, when executed, cause the apparatus to:

identify an adjective in the string of terms and determine a third risk rating of the string of terms based on the identified noun, identified verb, identified category of risk associated with the noun, identified category of risk associated with the verb and the identified adjective, the third risk rating being different from at least one of the first risk rating and the second risk rating.

3. The apparatus of claim 1, wherein the categories of risk include at least one of:

behavior, information technology sabotage, unauthorized access, and intellectual property theft.

4. The apparatus of claim 1, further including instructions that, when executed, cause the apparatus to identify an additional action to implement based on the identified risk rating.

5. The apparatus of claim 4, wherein the additional action includes altering access to information available to a user associated with the string of terms.

6. The apparatus of claim 1, wherein the string of terms is input into a computing device by a user.

7. The apparatus of claim 6, wherein the user is an employee of an entity and the computing device is provided to the user by the entity for use as an employee of the entity.

8. A method, comprising:

parsing, by a risk identification system including at least one computing device having at least one processor and at least one memory coupled to the processor, a string of terms into a plurality of individual terms;

determining, by the at least one computing device of the risk identification system, whether the plurality of individual terms includes at least one term matching a keyword of a keyword listing;

responsive to determining that the plurality of individual terms includes at least one term matching the keyword, determining a part of speech of the at least one term matching the keyword;

responsive to determining that the part of speech of the at least one term is one of;

a noun and a verb, identify the other of the noun and the verb in the plurality of individual terms;

identifying, by the at least one computing device of the risk identification system, a category of risk associated with the identified noun and a category of risk associated with the identified verb;

determining, by the at least one computing device of the risk identification system, whether the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are a same category of risk;

responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are the same category, determining, by the risk identification system, a first risk rating of the string of terms including the identified noun and the identified verb, the first risk rating being based on the identified noun, the identified verb and the same category; and

responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are different categories, determining, by the risk identification system, a second risk rating of the string of terms including the identified noun and the identified verb, the second risk rating being based on the identified noun, the identified verb, the identified category of risk associated with the noun and the identified category of risk associated with the verb, the second risk rating being different from the first risk rating.

9. The method of claim 8, further including:

identifying, by the at least one computing device of the risk identification system, an adjective in the string of terms; and

determining, by the risk identification system, a third risk rating of the received string of terms based on the identified noun, identified verb, identified category of risk associated with the noun, identified category of risk associated with the verb and the identified adjective, the third risk rating being different from at least one of the first risk rating and the second risk rating.

10. The method of claim 8, wherein the categories of risk include at least one of:

behavior, information technology sabotage, unauthorized access, and intellectual property theft.

11. The method of claim 8, further including identifying, by the at least one computing device of the risk identification system, an additional action to implement based on the identified risk rating.

12. The method of claim 11, wherein the additional action includes altering access to information available to a user associated with the string of terms.

13. The method of claim 8, wherein the string of terms is input into a user computing device by a user, wherein the user computing device is different from the at least one computing device of the risk identification system.

14. The method of claim 13, wherein the user is an employee of an entity and the computing device is provided to the user by the entity for use as an employee of the entity.

15. One or more non-transitory computer-readable media having computer-executable instructions stored thereon that, when executed, cause at least one computing device to:

parse a string of terms into a plurality of individual terms;

determine whether the plurality of individual terms includes at least one term matching a keyword of a keyword listing;

responsive to determining that the plurality of individual terms includes at least one term matching the keyword, determine a part of speech of the at least one term matching the keyword;

responsive to determining that the part of speech of the at least one term is one of;

a noun and a verb, identify the other of the noun and the verb in the plurality of individual terms;

identify a category of risk associated with the identified noun and a category of risk associated with the identified verb;

determine whether the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are a same category of risk;

responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are the same category, determine a first risk rating of the string of terms including the identified noun and the identified verb, the first risk rating being based on the identified noun, the identified verb and the same category; and

responsive to determining that the identified category of risk associated with the identified noun and the identified category of risk associated with the identified verb are different categories, determine a second risk rating of the string of terms including the identified noun and the identified verb, the second risk rating being based on the identified noun, the identified verb, the identified category of risk associated with the noun and the identified category of risk associated with the verb, the second risk rating being different from the first risk rating.

16. The one or more non-transitory computer-readable media of claim 15, further including instructions that, when executed, cause the at least one computing device to:

identify an adjective in the string of terms; and

determine a third risk rating of the string of terms based on the identified noun, identified verb, identified category of risk associated with the noun, identified category of risk associated with the verb and the identified adjective, the third risk rating being different from at least one of the first risk rating and the second risk rating.

17. The one or more non-transitory computer-readable media of claim 15, wherein the categories of risk include at least one of:

behavior, information technology sabotage, unauthorized access, and intellectual property theft.

18. The one or more non-transitory computer-readable media of claim 15, further including instructions that, when executed, cause the at least one computing device to identify an additional action to implement based on the identified risk rating.

19. The one or more non-transitory computer-readable media of claim 18, wherein the additional action includes altering access to information available to a user associated with the string of terms.

20. The one or more non-transitory computer-readable media of claim 15, wherein the string of terms is input into a computing device by a user, and wherein the user is an employee of an entity and the computing device is provided to the user by the entity for use as an employee of the entity.