Cloud-based communication account security

• US 9,680,843 B2
• Filed: 07/22/2014
• Issued: 06/13/2017
• Est. Priority Date: 07/22/2014
• Status: Active Grant

• Current Assignee: Atlassian US, Inc. (Atlassian Corporation)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: De Los Reyes, Gustavo, Subbaraman, Ramesh, Bickford, Jeffrey E., Murynets, Ilona, Wang, Wei
• Primary Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US14/337,808
• Publication Number:
  US 20160028749A1
• Time in Patent Office: 1,057 Days
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

A request is received over a network to resolve a problem relating to a networked user device. The request is accepted in order to provide user service. Based on the request, one of multiple available diagnostic algorithms is selected to analyze user data related to a user'"'"'s account to identify symptoms of the problem and diagnose a cause of the symptoms identified.

Claims

1. A method of providing user service, comprising:

receiving, over a network, a request to resolve a problem relating to a networked user device;

selecting, based on the request and using a processor of a computer, a diagnostic algorithm of a plurality of diagnostic algorithms to analyze user data in a user account to identify symptoms of the problem and diagnose a cause of the symptoms identified;

analyzing, using the diagnostic algorithm selected, the user data related to the user account to identify the symptoms of the problem;

identifying, based at least in part on analyzing the user account, the symptoms of the problem;

diagnosing the cause of the symptoms identified, wherein the diagnostic algorithm selected causes the processor to perform operations for diagnosing the cause of the symptoms identified, the operations comprising

identifying applications that are generating traffic on the networked user device,

determining if each of the applications identified is an authorized application to identify the cause of the symptoms identified,

mapping network connections for the applications that are generating traffic on the networked user device, and

comparing the network connections for the applications that are mapped with preapproved network connections for the networked user device to diagnose unapproved mapped network connections as the cause of the symptoms identified;

searching to identify a solution to resolve the cause of the symptoms; and

providing, via the networked user device, a user using the networked user device with the solution to resolve the problem diagnosed, wherein the solution to resolve the cause of the symptoms identified is based at least in part on diagnosis of the unapproved mapped network connections as the cause of the symptoms identified.

2. The method of claim 1, wherein the diagnostic algorithm selected analyzes user data stored by a service provider separate from the networked user device.

3. The method of claim 1, wherein the diagnostic algorithm selected further identifies symptoms of malware and diagnoses malware as the cause of the symptoms identified.

4. The method of claim 1, wherein the diagnostic algorithm selected further determines a probability that an application installed on the networked user device is an unapproved application and diagnoses the unapproved application as the cause of the symptoms identified.

5. The method of claim 1, wherein the diagnostic algorithm selected further identifies unauthorized communications as the cause of the symptoms identified and diagnoses an application responsible for sending the unauthorized communications as the cause of the symptoms identified.

6. The method of claim 1, wherein the diagnostic algorithm selected further determines a probability that a login for an application has been compromised and diagnoses a compromised login as the cause of the symptoms identified.

7. The method of claim 1, wherein the diagnostic algorithm selected further identifies an amount of traffic volume involving the networked user device as a symptom identified, and diagnoses an application responsible for traffic as the cause of the symptom identified.

8. The method of claim 1, wherein the diagnostic algorithm selected further identifies communication addresses to which communications are sent or from which communications are received by the networked user device as the symptoms identified and diagnoses an application responsible for traffic to or from the communication addresses as the cause of the symptoms identified.

9. The method of claim 1,

wherein the request is received from a preinstalled application that automatically identifies initial symptoms which warrant resolution using one of the plurality of diagnostic algorithms, and

wherein the diagnostic algorithm selected is selected based on the initial symptoms received from the preinstalled application.

10. The method of claim 1,

wherein the request is received from the user using the networked user device, the request comprising initial symptoms provided by the user, and

wherein the diagnostic algorithm selected is selected based on the initial symptoms provided by the user.

11. The method of claim 1, wherein the user data is stored in a cloud and includes records of communications to and from the networked user device for a period.

12. The method of claim 10, wherein natural language processing is used to extract and identify keywords from the user as the initial symptoms.

13. The method of claim 12, wherein the initial symptoms provided by the user are different from the symptoms identified by the diagnostic algorithm selected.

14. The method of claim 1, further comprising:

identifying other devices which are vulnerable to the cause diagnosed, and

notifying users using the other devices of the cause diagnoses and the solution to the cause diagnosed.

15. A tangible computer readable storage medium that stores a computer program that, when executed by a processor, causes a computer apparatus to perform operations comprising:

receiving, over a network, a request to resolve a problem relating to a networked user device;

selecting, based on the request, a diagnostic algorithm of a plurality of diagnostic algorithms to analyze user data in a user account to identify symptoms of the problem and diagnose a cause of the symptoms identified;

analyzing, using the diagnostic algorithm selected, the user data related to the user account to identify the symptoms of the problem;

identifying, based at least in part on analyzing the user account, the symptoms of the problem;

diagnosing, using the diagnostic algorithm selected, the cause of the symptoms identified, wherein diagnosing the cause of the symptoms identified comprises

identifying applications that are generating traffic on the networked user device,

determining if each of the applications identified is an authorized application to identify the cause of the symptoms identified,

mapping network connections for the applications that are generating traffic on the networked user device, and

comparing the network connections for the applications that are mapped with preapproved network connections for the networked user device to diagnose unapproved mapped network connections as the cause of the symptoms identified;

searching to identify a solution to resolve the cause of the symptoms; and

providing, via the networked user device, a user using the networked user device with the solution to resolve the problem diagnosed, wherein the solution to resolve the cause of the symptoms identified is based at least in part on diagnosis of the unapproved mapped network connections as the cause of the symptoms identified.

16. A computer apparatus comprising:

a processor; and

a memory that stores instructions that, when executed by the processor, cause the processor to perform operations comprising

receiving, over a network, a request to resolve a problem relating to a networked user device,

selecting, based on the request, a diagnostic algorithm of a plurality of diagnostic algorithms to analyze user data in a user account to identify symptoms of the problem and diagnose a cause of the symptoms identified,

identifying, based at least in part on analyzing the user account, the symptoms of the problem,

diagnosing, using the diagnostic algorithm selected, the cause of the symptoms identified, wherein diagnosing the cause of the symptoms identified comprises

identifying applications that are generating traffic on the networked user device,

determining if each of the applications identified is an authorized application to identify the cause of the symptoms identified,

mapping network connections for the applications that are generating traffic on the networked user device, and

comparing the network connections for the applications that are mapped with preapproved network connections for the networked user device to diagnose unapproved mapped network connections as the cause of the symptoms identified,

searching to identify a solution to resolve the cause of the symptoms, and

providing, via the networked user device, a user using the networked user device with the solution to resolve the problem diagnosed, wherein the solution to resolve the cause of the symptoms identified is based at least in part on diagnosis of the unapproved mapped network connections as the cause of the symptoms identified.