Implementing trust policies

• US 20060212925A1
• Filed: 03/02/2006
• Published: 09/21/2006
• Est. Priority Date: 03/02/2005
• Status: Abandoned Application

• Current Assignee: MarkMonitor Inc.
• Original Assignee: MarkMonitor Inc.
• Inventors: Shull, Mark, Shraim, Ihab, Bura, Christopher J., Bohlman, William
• Application Number:
  US11/368,329
• Publication Number:
  US 20060212925A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

Embodiments of the present invention provide methods, systems, and software for implementing trust policies. Such policies may be implemented in a variety of ways, including at one or more border devices, client computers, etc. In accordance with various embodiments, a communication between a client computer (and/or application) and an online entity may be monitored and/or otherwise detected. The online entity may be identified, and/or one or more trust scores associated with the online entity may be obtained. Based on the trust scores, as well, perhaps as the nature of the communication, an action (such as allowing the communication, blocking the communication, quarantining the communication, warning a user, administrator, etc.) may be taken. In some cases, a trust policy may be consulted to determine what action should be taken with respect to a given communication.

Claims

1. A method comprising:

receiving, at a computer, a trust score score evaluating a trustworthiness of an online entity;

consulting, with the computer, at least one trust policy; and

determining an action to take based at least in part on the trust policy and the trust score; and

taking the action with respect to a communication associated with the online entity.

2. The method of claim 1, wherein determining the action to take comprises comparing the trust score to one or more values associated with the trust policy.

3. The method of claim 1, wherein the trust score is one of a plurality of trust scores for the online entity.

4. The method of claim 3, wherein the plurality of trust scores comprises one or more scores selected from a group consisting of:

a trust score evaluating the likelihood of the online entity to engage in fraudulent behavior, a trust score evaluating the likelihood of the online entity to transmit unwanted communications, a trust score evaluating the likelihood of the online entity to engage in cybersquatting, and a trust score evaluating the likelihood of the online entity to engage in trademark abuse.

5. The method of claim 3, wherein the trust score is a first trust score of the plurality of trust scores, the first trust score evaluating the trustworthiness of the online entity in a first category of behavior, the method further comprising:

receiving, at the computer, a second trust score of the plurality of trust scores evaluating the trustworthiness of the online entity in a second category of behavior.

6. The method of claim 1, wherein the action comprises blocking the communication.

7. The method of claim 6, wherein blocking the communication comprises blocking a communication received from the online entity.

8. The method of claim 6, wherein blocking the communication comprises blocking a communication addressed to the online entity.

9. The method of claim 1, wherein the action comprises quarantining the communication.

10. The method of claim 9, further comprising transmitting a notification indicating the communication was quarantined.

11. The method of claim 1, wherein the action comprises allowing the communication.

12. The method of claim 1, wherein the action comprises transmitting a warning to a recipient of the communication.

13. The method of claim 1, wherein the communication comprises a communication received from the online entity.

14. The method of claim 1, wherein the online entity is an intended recipient of the communication.

15. The method of claim 1, wherein the computer is a client computer.

16. The method of claim 1, wherein the computer is a border device.

17. A trust authentication system comprising:

a data store including one or more trust policies; and

a first software component on a computer, configured to monitor communications associated with one or more client applications for a communication with an online entity;

a second software component on the computer, configured to obtain one or more trust scores associated with an online entity; and

a third software component on the computer, configured to take an action with respect to the communication with the online entity, based on at least one of the one or more trust scores associated with the online entity and at least one of the one or more trust policies.

18. The trust authentication system of claim 17, wherein the first, second and third software components execute on a border device separate from a client computer executing the one or more client applications.

19. The trust authentication system of claim 17, wherein the first, second and third software components execute on a client computer executing the one or more client applications.

20. The trust authentication system of claim 17, wherein the first and second software components are incorporated within a monitoring agent.

21. The trust authentication system of claim 17, wherein the third software component comprises a policy agent.

22. The trust authentication system of claim 17, wherein at least one of the software components is integrated within at least one of the one or more client applications.

23. The trust authentication system of claim 17, wherein at least one of the software components is integrated within an operating system of the computer.

24. The trust authentication system of claim 17, wherein the first, second and third software components are integrated within an application program separate from the one or more client applications.

25. The trust authentication system of claim 17, wherein at least one of the software components is incorporated within a software program configured to operate in conjunction with at least one of the one or more client applications.

26. The trust authentication system of claim 25, wherein the software program is selected from the group consisting of:

a toolbar, a plug-in, and an extension.

27. The trust authentication system of claim 17, further comprising a quarantine area to store quarantined communications, wherein the action comprises quarantining the communication in the quarantine area.

28. A trust authentication system comprising a processor and instructions executable by the processor to:

monitor communications associated with one or more client applications for a communication with an online entity;

obtain one or more trust scores associated with an online entity; and

take an action with respect to the communication with the online entity, based on at least one of the one or more trust scores associated with the online entity.

29. A trust authentication system comprising a processor and instructions executable by the processor to:

monitor a plurality of communications associated with a plurality of client computers;

identify an online entity other than one of the client computers, the online entity being associated with one of the plurality of communications;

obtain one or more trust scores associated with the online entity; and

take an action with respect to the one of the plurality of communications, based on at least one of the one or more trust scores associated with the online entity.

30. The trust authentication system of claim 29, wherein the processor is incorporated within a border device.

31. A software program embodied on a computer readable medium, the software program comprising instructions executable by a computer to:

receive a trust score evaluating a trust of an online entiy;

based on the trust score, take an action with respect to a communication associated with the online entity.

32. A software program embodied on a computer readable medium, the software program comprising instructions executable by a computer to:

monitor communications associated with one or more client applications for a communication with an online entity;

obtain one or more trust scores associated with an online entity;

consult at least one trust policy; and

take an action with respect to the communication with the online entity, based on at least one of the one or more trust scores associated with the online entity.

33. A software program embodied on a computer readable medium, the software program comprising instructions executable by a computer to:

monitor a plurality of communications associated with a plurality of client computers;

identify an online entity other than one of the client computers, the online entity being associated with one of the plurality of communications;

obtain one or more trust scores associated with the online entity; and

take an action with respect to the one of the plurality of communications, based on at least one of the one or more trust scores associated with the online entity.

34. A system comprising:

means for monitoring communications associated with one or more client applications for a communication with an online entity;

means for obtaining one or more trust scores associated with an online entity;

means for consulting at least one trust policy; and

means for taking an action with respect to the communication with the online entity, based on at least one of the one or more trust scores associated with the online entity and the at least one trust policy.