专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US11425563B2 Method, device, and system of differentiating between a cyber-attacker and a legitimate user 有权
公开(公告)号：US11425563B2
公开(公告)日：2022-08-23
申请号：US17060131
申请日：2020-10-01
申请人： BioCatch Ltd.
发明人： Avi Turgeman , Oren Kedem , Uri Rivner
IPC分类号： H04W12/06 , G06F21/55 , G06F21/31 , G06F3/041 , G06F21/83 , H04L9/40 , H04M1/72403 , G06F21/32
摘要： Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a cyber-attacker. A user utilizes a desktop computer, a laptop computer, a smartphone, a tablet, or other electronic device, to interact with a banking website or application, a retailer website or application, or other computerized service. Input-unit interactions are monitored, logged, and analyzed. Based on several types of analysis of the input-unit interactions, a score is generated to reflect fraud-relatedness or attack-relatedness of the input-unit interactions. Based on the score, the system estimates or determines whether the user is an attacker, and initiates attach-mitigation operations or fraud-mitigation operations.

32. 发明授权

US10970394B2 System, device, and method of detecting vishing attacks 有权
公开(公告)号：US10970394B2
公开(公告)日：2021-04-06
申请号：US15819400
申请日：2017-11-21
申请人： BioCatch Ltd.
发明人： Oren Kedem , Avi Turgeman
IPC分类号： G06Q40/00 , G06F21/56 , G06F21/32 , G06Q20/40 , G06F21/55
摘要： Devices, systems, and methods of detecting a vishing attack, in which an attacker provides to a victim step-by-step over-the-phone instructions that command the victim to log-in to his bank account and to perform a dictated banking transaction. The system monitors transactions, online operations, user interactions, gestures performed via input units, and user engagement with User Interface elements. The system detects that the operations performed by the victim, follow a pre-defined playbook of a vishing attack. The system detects that the victim operates under duress or under dictated instructions, as exhibited in irregular doodling activity, data entry rhythm, typographical error introduction rhythm, unique posture of the user, alternating pattern of listening to phone instructions and performing online operations via a computer, and device orientation changes or spatial changes that characterize a device being used to perform an online transaction while also talking on the phone.

33. 发明授权

US10949757B2 System, device, and method of detecting user identity based on motor-control loop model 有权
公开(公告)号：US10949757B2
公开(公告)日：2021-03-16
申请号：US15368608
申请日：2016-12-04
申请人： BioCatch Ltd.
发明人： Avi Turgeman
IPC分类号： G06F21/00 , G06N5/04 , G06F21/31 , G09G5/08 , G06F21/36 , G06F3/147 , H04W12/06 , G06N20/00 , G06N7/00 , G06N5/00 , H04W12/00
摘要： Device, system, and method of detecting identity of a user based on motor-control loop model. A method includes: during a first session of a user who utilizes a pointing device for interacting with a computerized service, monitoring the pointing device dynamics and gestures of the user; based on the monitored dynamics and gestures, estimating parameters that characterize a sensorimotor control loop model of the user; storing in a database a record indicating that the user is associated with the parameters that characterize the sensorimotor control loop model of the user.

34. 发明授权

US10949514B2 Device, system, and method of differentiating among users based on detection of hardware components 有权
公开(公告)号：US10949514B2
公开(公告)日：2021-03-16
申请号：US15456608
申请日：2017-03-13
申请人： BioCatch Ltd.
发明人： Avi Turgeman , Itai Novick
IPC分类号： G06F21/31 , G06Q30/00 , G06Q20/40 , H04W12/06 , H04L29/06 , H04W12/00
摘要： Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, detecting a possible attacker, and flagging a particular financial transaction or a particular retail transaction as being possibly-fraudulent. The methods include monitoring of user-side input-unit interactions, in general and in response to an interference introduced to user-interface elements. The monitored interactions are analyzed, and enable extraction of hardware-specific features of a computer mouse, a touchpad, a touch-screen, a keyboard, or other input unit. In some methods, detection of different mouse polling rates or different mouse DPI values, across two different usage sessions in the same financial account, enables the method to detect a possibly-fraudulent transaction.

35. 发明授权

US10747305B2 Method, system, and device of authenticating identity of a user of an electronic device 有权
公开(公告)号：US10747305B2
公开(公告)日：2020-08-18
申请号：US16416222
申请日：2019-05-19
申请人： BioCatch Ltd.
发明人： Avi Turgeman
IPC分类号： H04L9/32 , G06F3/01 , G09G5/08 , G06F21/36 , G06F3/0482 , G06F3/0481 , H04W12/06 , G06F3/033 , G06N5/04 , H04L29/06 , H04W12/00
摘要： A method for confirming identity of a user of a mobile electronic device, the method including: receiving touch data from a touch-screen of the mobile electronic device; receiving acceleration data from an accelerometer of the mobile electronic device; correlating between the touch data and the acceleration data; based on the correlating, generating a user-specific trait indicative of said user. The method further includes storing a reference value of the user-specific trait, indicative of said user; in a subsequent usage session of the mobile electronic device, generating a current value of the user-specific trait correlating between touch data and acceleration data; and based on a comparison between the current value of the user-specific trait and the reference value of the user-specific trait, determining whether or not a current user of the mobile electronic device is an authorized user of the mobile electronic device.

36. 发明授权

US10579784B2 System, device, and method of secure utilization of fingerprints for user authentication 有权
公开(公告)号：US10579784B2
公开(公告)日：2020-03-03
申请号：US15675740
申请日：2017-08-13
申请人： BioCatch Ltd.
发明人： Avi Turgeman
IPC分类号： G06F21/32 , G06K9/00 , G06F3/01
摘要： System, device, and method of secure utilization of fingerprints for user authentication. A method includes: capturing a fingerprint that a particular user provides to an electronic device; generating a raw fingerprint signature that corresponds to bodily features of the fingerprint of the particular user; monitoring user interactions of the particular user, during the capturing of the raw fingerprint, via one or more input units of the electronic device; extracting from the monitored user interactions a user-specific characteristic that is user-specific to the interactions of the particular user; generating a user-specific reference fused data-item, by utilizing both: (I) the raw fingerprint signature that was generated, and (II) the user-specific characteristic that was extracted; subsequently, utilizing the reference fused data-item as a reference for user-authentication.

37. 发明授权

US10083439B2 Device, system, and method of differentiating over multiple accounts between legitimate user and cyber-attacker 有权
公开(公告)号：US10083439B2
公开(公告)日：2018-09-25
申请号：US15193057
申请日：2016-06-26
申请人： BioCatch Ltd.
发明人： Avi Turgeman , Oren Kedem
IPC分类号： G06Q20/38 , G06Q20/40 , G06F21/31 , H04L29/06
CPC分类号： G06Q20/382 , G06F21/316 , G06F2221/2133 , G06Q20/40 , H04L63/08 , H04L63/1441 , H04L2463/082 , H04L2463/144
摘要： Devices, systems, and methods of user authentication, as well as automatic differentiation between a legitimate user and a cyber-attacker. A system detects that two different accounts of the same computerized service, were accessed by a single computing device over a short period of time. The system may employ various techniques in order to determine automatically whether a legitimate user accessed the two different account, such as, a husband accessing his own bank account and shortly after that accessing also his wife's bank account, or a payroll company accessing bank accounts of two clients for payroll management purposes. Conversely, the system is able to detect that the same user exhibited the same pattern of interactions when operating the two accounts, a pattern of interactions that does not frequently appear in the general population of legitimate users, thereby indicating that the single user is a cyber-attacker.

38. 发明授权

US10049209B2 Device, method, and system of differentiating between virtual machine and non-virtualized device 有权
公开(公告)号：US10049209B2
公开(公告)日：2018-08-14
申请号：US15275504
申请日：2016-09-26
申请人： BioCatch Ltd.
发明人： Avi Turgeman , Yaron Lehmann
IPC分类号： G06F11/30 , G06F21/55 , G06F9/455 , G06F3/041 , G06F21/31 , G06F21/32 , H04L29/06
摘要： Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a cyber-attacker. An end-user device (a desktop computer, a laptop computer, a smartphone, a tablet, or the like) interacts and communicates with a server of a computerized server (a banking website, an electronic commerce website, or the like). The interactions are monitored, tracked and logged. Communication interferences are intentionally introduced to the communication session; and the server tracks the response or the reaction of the end-user device to such communication interferences. The system determines whether the user is a legitimate human user; or a cyber-attacker posing as a legitimate human user but actually utilizing a Virtual Machine.

39. 发明授权

US09626677B2 Identification of computerized bots, and identification of automated cyber-attack modules 有权
公开(公告)号：US09626677B2
公开(公告)日：2017-04-18
申请号：US15198199
申请日：2016-06-30
申请人： BioCatch Ltd.
发明人： Avi Turgeman , Itai Novick
IPC分类号： H04L29/06 , G06Q20/40 , G01R29/26 , G06F3/0482 , G06F21/31 , G06F21/55 , G06F3/0484 , G06F21/12
CPC分类号： G06Q20/4014 , G01R29/26 , G06F3/0482 , G06F3/04842 , G06F21/121 , G06F21/316 , G06F21/552 , G06F2221/2133 , G06Q20/4016 , H04L63/08 , H04L63/126 , H04L63/1441 , H04L2463/082 , H04L2463/144
摘要： Devices, systems, and methods of detecting whether an electronic device or computerized device or computer, is being controlled by a legitimate human user, or by an automated cyber-attack unit or malware or automatic script. The system monitors interactions performed via one or more input units of the electronic device. The system searches for abnormal input-user interactions; or for an abnormal discrepancy between: the input-unit gestures that were actually registered by the input unit, and the content that the electronic device reports as allegedly entered via such input units. A discrepancy or abnormality indicates that more-possibly a malware or automated script is controlling the electronic device, rather than a legitimate human user. Optionally, an input-output aberration or interference is injected, in order to check for manual corrective actions that only a human user, and not an automated script, is able to perform.

40. 发明授权

US09536071B2 Method, device, and system of differentiating among users based on platform configurations 有权
标题翻译：基于平台配置的用户区分的方法，设备和系统
公开(公告)号：US09536071B2
公开(公告)日：2017-01-03
申请号：US14675767
申请日：2015-04-01
申请人： BioCatch Ltd.
发明人： Avi Turgeman
IPC分类号： G06F7/04 , G06F21/31 , H04W12/06 , G06F3/041 , G06F21/32 , G06F21/55 , H04L29/06
CPC分类号： G06F21/316 , G06F3/041 , G06F21/31 , G06F21/32 , G06F21/554 , G06F2221/2133 , H04L63/0861 , H04L63/102 , H04L63/1408 , H04W12/06
摘要： Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a cyber-attacker. An end-user device interacts and communicates with a server of a computerized server (a banking website, an electronic commerce website, or the like). The interactions are monitored, tracked and logged. User Interface (UI) interferences or irregularities are introduced; and the server tracks the response or the reaction of the end-user to such interferences. The system determines whether the user is a legitimate user, or a cyber-attacker or automated script posing as the legitimate user. The system utilizes classification of users into classes or groups, to deduce or predict how a group-member would behave when accessing the service through a different type of device. The system identifies user-specific traits that are platform-independent and thus can be further monitored when the user switches from a first platform to a second platform.
摘要翻译：检测用户身份的设备，系统和方法，区分计算机化服务的用户和检测网络攻击者。最终用户设备与计算机化服务器（银行网站，电子商务网站等）的服务器进行交互和通信。互动被监控，跟踪和记录。介绍用户界面（UI）的干扰或不规则; 并且服务器跟踪最终用户对这种干扰的响应或反应。系统确定用户是合法用户还是网络攻击者或自动化脚本构成合法用户。系统利用用户对类或组的分类，推断或预测组成员在通过不同类型的设备访问服务时的行为。该系统识别与平台无关的用户特有的特征，因此当用户从第一平台切换到第二平台时可进一步监视该特征。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式