Managing access to user profile information via a distributed transaction database

• US 10,530,786 B2
• Filed: 10/17/2018
• Issued: 01/07/2020
• Est. Priority Date: 05/15/2017
• Status: Active Grant

• Current Assignee: Forcepoint LLC
• Original Assignee: Forcepoint LLC
• Inventors: Ford, Richard A.
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US16/162,655
• Publication Number:
  US 20190052647A1
• Time in Patent Office: 447 Days
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06N 5/04 Inference or reasoning models
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A method, system and computer-usable medium for generating a user behavior profile, comprising: monitoring user interactions between a user and an information handling system; converting the user interactions and the information about the user into electronic information representing the user interactions; generating a unique user behavior profile based upon the electronic information representing the user interactions and the information about the user; storing information relating to the unique user behavior profile within a user behavior profile repository; and, storing information referencing the unique user behavior profile in a user behavior blockchain.

Claims

1. A computer-implementable method for generating a cyber behavior profile, comprising:

monitoring electronically-observable user behavior, the electronically-observable user behavior comprising a behavior exhibited by a user that is observed through the use of at least one of an electronic device, a computer system and a software application executing on the computing system;

converting the electronically-observable user behavior user into electronic information representing the user interactions;

generating a user behavior profile based upon the electronic information representing the electronically-observable user behavior;

storing information relating to the user behavior profile within a user behavior profile repository; and

,

storing information referencing the user behavior profile in a user behavior distributed transaction database so as to allow the user behavior profile to be accessed via using the information referencing the user behavior profile, the information referencing the user behavior profile comprising an address for referencing the user behavior profile within the user behavior profile repository; and

,

reconfiguring the user behavior profile stored within the user behavior repository such that the address for referencing the user behavior profile no longer provides access to the user behavior profile.

2. The method of claim 1, further comprising:

reconfiguring the user behavior profile stored within the user behavior repository such that the information referencing the user behavior profile no longer provides access to the user behavior profile.

3. The method of claim 1, wherein:

the user behavior profile is based upon at least one of an authentication factor and a user identity factor.

4. The method of claim 1, wherein:

the information referencing the user behavior profile is stored within a user profile block of the user behavior distributed transaction database.

5. The method of claim 4, wherein:

the user profile block comprises a transaction payload; and

,

the transaction payload includes the address for referencing the user behavior profile within the user behavior profile repository.

6. The method of claim 4, wherein:

the transaction payload comprises executable code, the executable code enabling access to the user behavior profile.

7. A system comprising:

a processor;

a data bus coupled to the processor; and

a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for;

monitoring electronically-observable user behavior, the electronically-observable user behavior comprising a behavior exhibited by a user that is observed through the use of at least one of an electronic device, a computer system and a software application executing on the computing system;

converting the electronically-observable user behavior user into electronic information representing the user interactions;

generating a user behavior profile based upon the electronic information representing the electronically-observable user behavior;

storing information relating to the user behavior profile within a user behavior profile repository; and

,

storing information referencing the user behavior profile in a user behavior distributed transaction database so as to allow the user behavior profile to be accessed via using the information referencing the user behavior profile, the information referencing the user behavior profile comprising an address for referencing the user behavior profile within the user behavior profile repository; and

,

reconfiguring the user behavior profile stored within the user behavior repository such that the address for referencing the user behavior profile no longer provides access to the user behavior profile.

8. The system of claim 7, wherein:

reconfiguring the user behavior profile stored within the user behavior repository such that the information referencing the user behavior profile no longer provides access to the user behavior profile.

9. The system of claim 8, wherein:

the user behavior profile is based upon at least one of an authentication factor and a user identity factor.

10. The system of claim 7, wherein:

the information referencing the unique cyber behavior profile is stored within a user profile block of the user behavior distributed transaction database.

11. The system of claim 10, wherein:

the user profile block comprises a transaction payload; and

,

the transaction payload includes the address for referencing the user behavior profile within the user behavior profile repository.

12. The system of claim 10, wherein:

the transaction payload comprises executable code, the executable code enabling access to the user behavior profile.

13. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

monitoring electronically-observable user behavior, the electronically-observable user behavior comprising a behavior exhibited by a user that is observed through the use of at least one of an electronic device, a computer system and a software application executing on the computing system;

converting the electronically-observable user behavior user into electronic information representing the user interactions;

generating a user behavior profile based upon the electronic information representing the electronically-observable user behavior;

storing information relating to the user behavior profile within a user behavior profile repository; and

,

storing information referencing the user behavior profile in a user behavior distributed transaction database so as to allow the user behavior profile to be accessed via using the information referencing the user behavior profile, the information referencing the user behavior profile comprising an address for referencing the user behavior profile within the user behavior profile repository; and

,

reconfiguring the user behavior profile stored within the user behavior repository such that the address for referencing the user behavior profile no longer provides access to the user behavior profile.

14. The non-transitory, computer-readable storage medium of claim 13, wherein:

reconfiguring the user behavior profile stored within the user behavior repository such that the information referencing the user behavior profile no longer provides access to the user behavior profile.

15. The non-transitory, computer-readable storage medium of claim 14, wherein:

the user behavior profile is based upon at least one of an authentication factor and a user identity factor.

16. The non-transitory, computer-readable storage medium of claim 14, wherein:

the information referencing the unique cyber behavior profile is stored within a user profile block of the user behavior distributed transaction database.

17. The non-transitory, computer-readable storage medium of claim 16, wherein:

the user profile block comprises a transaction payload; and

,

the transaction payload includes the address for referencing the user behavior profile within the user behavior profile repository.

18. The non-transitory, computer-readable storage medium of claim 16, wherein:

the transaction payload comprises executable code, the executable code enabling access to the user behavior profile.

19. The non-transitory, computer-readable storage medium of claim 13, wherein the computer executable instructions are deployable to a client system from a server system at a remote location.

20. The non-transitory, computer-readable storage medium of claim 13, wherein the computer executable instructions are provided by a service provider to a user on an on-demand basis.