System for and method of protecting device in computing environment

Abstract

To provide a system for and a method of protecting a device and data in a computing environment.SOLUTION: A system 100 according to the present invention has a security system connected to a client device so as to be able to communicate therewith. The security system receives an input corresponding to biological characteristics from a user of the client device to thereby authenticate the user of the client device using the received biometric authentication. In response to authentication of the user, the security system allows the user to access to the data in the client device.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] [CROSS REFERENCE TO RELATED APPLICATIONS] This application is a joint venture of the International Business Machines Corporation, filed on July 17, 2019, entitled "Devices in a Computing Environment." Systems and Methods for Protecting Devices or Securing Devices In A Computing Environ No. 62 / 875,242, entitled "U.S. Provisional Patent Application No. 62 / 875,242," also entitled "U.S. ... The patent application was filed on July 16, 2020, entitled "Protecting Devices in a Computing Environment" Systems and Methods for Security Ring Devices in a Computing Environment) This application claims priority to U.S. Patent Application Serial No. 16 / 931,215, entitled "Compounds for a Nonprovisional Composition of a Polymeric Material," which is hereby incorporated by reference in its entirety. No. 6,399,413, filed on Dec. 13, 2003, the contents of which are hereby incorporated by reference in their entireties. do. [Background technology]

[0002] As technology becomes more integrated into our daily lives, people are increasingly using the devices and (e.g. stored on the device and / or accessible online) For example, people may tend to store confidential or personal information on their own data. devices to be aware of the potential risks associated with storing such information on their devices. may store their data without their consent and / or transmit, disclose and / or or otherwise permit third parties to access their data. However, this exposes the device and data to a variety of threats. Summary of the Invention

[0003] The disclosed embodiments protect devices and data in a computing environment. The system is communicatively coupled to a client device. The security system includes a security system that Receive input from a user (e.g., a VoicedIn entry) corresponding to a biometric feature. The security system is configured to receive biometric authentication (e.g., Voic edIn entries) to authenticate users of client devices. The security system may then use the received biometrics (e.g. VoiceIn In response to authentication of a user via a The device is configured to allow access to the data.

[0004] In some embodiments, the disclosed security system includes a computing device and and networked devices from threats, as well as to For example, it may be configured to protect against unauthorized access, analysis, etc. during transmission. Depending on the circumstances, your security system may be vulnerable to intrusions, bad actors, malware and / or data theft. Diversion targets that attract and / or capture harm are identified as non-exclusive lists of potential threats. When the security system is properly attracted to these Threats are physically and / or computationally separate from the operating environment of the device and / or data. into an isolated environment (e.g., a testing or "conversion environment"), which , and protect client devices that are potential targets for threats. In this transformational environment, These threats may be intended and / or potentially exploited when deployed in the client environment. The device is examined and / or analyzed to determine its possible actions. or analysis of the threat, the consequences of using the threat, and / or neutralizing the threat. Actions taken to protect the data subject may include, but are not limited to, the following: For example, one or more client devices, a central repository and / or a distribution platform The information will be reported to the network, user, administrator, authority, etc. [Brief description of the drawings]

[0005] These and other features, aspects and advantages of the present disclosure will become apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: This will become better understood upon reading the detailed description. Reference numbers represent like parts.

[0006] [Figure 1] FIG. 1 is a block diagram illustrating a system for securing devices and data in a computing environment according to an aspect of the present disclosure.

[0007] [Diagram 2] 2 shows a flowchart depicting example machine-readable instructions that may be executed by the example security system of FIG. 1 to implement a facial recognition process, according to an aspect of the present disclosure.

[0008] [Figure 3A] 2 shows a flowchart depicting example machine-readable instructions that may be executed by the example security system of FIG. 1 to implement data protection and authentication, according to an aspect of the present disclosure. [Figure 3B]2 shows a flowchart depicting example machine-readable instructions that may be executed by the example security system of FIG. 1 to implement data protection and authentication, according to an aspect of the present disclosure.

[0009] [Figure 4A] 1 illustrates an exemplary dashboard for protecting devices and data in a computing environment, according to an aspect of the present disclosure. [Figure 4B] 1 illustrates an exemplary dashboard for protecting devices and data in a computing environment, according to an aspect of the present disclosure. [Figure 4C] 1 illustrates an exemplary dashboard for protecting devices and data in a computing environment, according to an aspect of the present disclosure. [Figure 4D] 1 illustrates an exemplary dashboard for protecting devices and data in a computing environment, according to an aspect of the present disclosure.

[0010] The drawings are not necessarily to scale. Where appropriate, similar or identical reference numerals , used to refer to similar or identical computing. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] The list of threats to the security of your devices and / or data is vast and never-ending. Therefore, the disclosed security system and method can be adapted to address known threats. Not only do they constantly monitor the proactively seeks information about unknown threats, including, among other threats: Espionage attempts, spyware attacks, phishing and vishing is known to be employed in a variety of ways by bad actors. The methodology actively seeks out signs of such threats and, if necessary, responds to such threats. The security system and method provide reports and / or patches to address the and any related devices and / or data. Protect.

[0012] Alternatively or additionally, the security system and method may include a network connection and and / or configured to operate in the absence of mains power. For example, The device may include a client device's Software designed to scan software and / or hardware As a non-limiting example, software and / or hardware may be installed. , smart speakers, devices connected to the Internet of Things (IoT), logistics extended sleep periods and / or Devices that are configured for passive and / or on-demand operation offer certain advantages. Therefore, the security system may be configured to detect one or more of the software on the client device. Threat detection even when software or hardware components are not running at full capacity and / or continue to provide analytics even if the device is turned off or taken offline. When turned on, power may be drawn from an auxiliary power source (such as a backup battery).

[0013] The disclosed systems and methods provide people and businesses with the ability to real-timely analyze their data and devices. It gives you the power to proactively protect in real time (e.g. on active networks) With so much data and so many devices in use, hackers The attack surface for cybercriminals is now open, and the search for data and devices is taking place at a rapid pace throughout the day. The problem comes from the fact that devices and data are being moved across multiple different systems. In light of advances in connectivity, such as the emergence of IoT and 5G communications, which provide constant and faster connectivity, If an individual or entity owns a device, server, laptop, or integrated platform, How you protect your system or the data on your device is important. This would ensure that the risk of data theft is reduced, but the alternative is to make it more difficult for hackers to Therefore, the disclosed system and method Prevent access to information or devices with the intent to harm a person or organization. It is structured as follows.

[0014] The disclosed systems and methods provide data, for example, multi-factor authentication, connectivity Protect data and devices regardless of personal, client device and / or business Easy-to-use solutions tailored to business system-specific and common threats Use strategic platform and / or dashboard integrations to streamline customization Customize and comply with various business systems, regulatory environments, etc. By analyzing user, device and / or data behavior to ensure Protect your devices and data with tools built to protect them in real time The disclosed system and method solves problems faced by organizations, reduces costs and streamlines operations. People and engineers to anticipate new innovations to improve system protection and processes It also provides data analytics that give context to the business in helping customers. do.

[0015] Hackers are extremely knowledgeable and have access to past cybersecurity defenses. The reality is that in order to do so, every effort is made to investigate personal information. Large-scale data breaches of personal data and personal devices have exposed most of the personal information (e.g. , name, social security number, phone number, email address, account number, password, etc.) , which has been sold on the dark web at least 25 times.

[0016] The disclosed system and method provides a socially aware method for protecting against racial and sexual bias. We also provide solutions. IoT sensors in smart ecosystems are used by individuals and The system monitors devices and their activities in real time. Regardless of the social impact of the data, the capture of that data and how it is used The user can be informed about whether or not the device can be used.

[0017] One aspect of the disclosed security system and method is to transmit and receive data to and from any device. and / or protection of data transmission. In one example, a user may Commands can be used to take actions (such as calls, messaging applications, web surfing, etc.) For example, a security system may initiate one or more security Voice commands may be recognized via a security function.

[0018] For example, the first security feature is to whitelist incoming voice commands while transmitting them. Generate noise and / or otherwise scramble the voice and / or text The second security feature may be to encrypt the data and / or Attacks on its transmission (e.g., log intrusions) may be detected. These and other The security features may involve one or more components of the client device (for example, For example, input devices such as keyboards, talk-to-text software, biometric scanners, etc. via a web browser or other application programming interface (API) ) may be integrated.

[0019] The voice commands may be generated by the client's voice and / or variations thereof (e.g., pitch These may then be further analyzed to identify unique characteristics (such as volume, tempo, rhythm, etc.) When a voice command is received, one or more of the identified features may be It is used as a comparison with the corresponding features of the incoming voice command to verify the code. For example, intonation is called a prosodic feature of English. , a term used to refer to all variations in pitch, volume, tempo and rhythm. All of these features relate to intonation, stress and rhythm. These characteristics of Ianto's voice were analyzed and memorized during the enrollment session. can be generated and used for the later verification process.

[0020] In some embodiments, the unique features used to verify the voice command may be unique to a potential attacker. To make the endeavor even more tedious, changes are possible.

[0021] In some embodiments, the frequency or other characteristics of the client's voice are altered during transmission. The frequency can be adjusted over time to make an attacker's efforts more difficult. The receiving system must use the ACK to verify the authentication request. , one or more Identifying and verifying voice and / or other biometric data using numerical identification technology .

[0022] Another aspect of the disclosed security system and method is to anonymously identify client devices. This can be done by any number of technical techniques. For example, data (e.g., client data, associated with a client device) Data, etc.) is broken down and scattered into one or more bits (e.g., cubic can be allocated to a single group (a set of tokens) and / or distributed on the blockchain. be.

[0023] In some embodiments, the security system may provide new security certificates and credentials. Dynamically creates a password and login credentials stored in the Secure Note function. Reuse secrets that allow end users to remember information such as license keys. Have users update their passwords. This can be done periodically or continuously, or at the In some embodiments, the data may be stored in a block. The blockchain can be distributed across the blockchain, so no repository can operate independently. The complete certificate is not accessible.

[0024] In some embodiments, the client device may provide each connected device with a hashed identifier or The data is anonymized by assigning an address to the smartphone and Assigned to an accessory (e.g., a headset connected via Bluetooth, etc.) The MAC address that is sent to the client device is hashed. When you make a request to access the device, the hashed identifier is verified and the assigned manufacturer's This provides a separate layer of protection beyond the authentication method used by the client device. If the client device is not protected by a strict security software, data from the client device is temporarily encrypted and The test environment may be a convex environment. Alternatively, or in addition, the device operation in a conversion environment is In some embodiments, unknown devices can be observed in a transformed environment. It is possible.

[0025] In some embodiments, the data and / or transmission may be accessed by a system and / or data. Lack of encryption certificate and / or validation of encryption certificate to access the data. The security system and method include a missing encryption certificate and / or a missing Detects encryption certificate validation that

[0026] In some embodiments, the security system and method may include detecting a malfunction of one or more IoT connected devices. It is used to identify threats to the service and / or acts to mitigate those threats. In one embodiment, the IoT environment is scanned to scan devices and / or data traffic. Agents in the precinct (e.g. AI-powered Ethical Agents, etc.) The agent may be software and / or hardware driven. The Company will not tolerate any connection or attempted connection to its network and / or devices from unauthorized sources. It can scan for threats such as

[0027] In some embodiments, the IoT device is kept in a passive mode of operation waiting for commands. This is because the breach (e.g., resulting from data leakage from one or more IoT devices) Unauthorized transmissions can access IoT devices and associated data before they are identified (through a trusted third-party service) In an embodiment, IoT connected devices (e.g., buildings, forwarding information, support Near Field Communication (NFC) enabled smart devices, biometric sensors, and other sensors (such as sensors for electric vehicles, electric vehicle charging station sensors, ultrasonic sensors, etc.) The disclosed security system and method are authorized to capture relevant security information. It scans the sensors to identify the expected (for example, Identify whether the company is using (e.g., restricted, authorized, other) technologies and connections Such devices may provide data access in an authorized and / or recognized manner. If someone tries to extend the use beyond the intended purpose, the security system will prevent such an attempt and and / or routing the command and / or associated data to a transformation environment for further processing. Security systems protect IoT devices from malware, outdated files, and The software and firmware may also be scanned.

[0028] In addition, client devices may contain software and / or Or the hardware is connected to a Universal Serial Bus (US B) It may be provided by direct communication with a compatible device, etc.

[0029] The security system and method include a system for detecting a user's identity (such as a person with limited access restrictions or a person with limited access restrictions) The IPS also detects open networks and / or systems (which provide unauthorized access). If the client device is running on such an open system, (portion sent from and / or directed to the client device) Or all data traffic is routed to a diversion environment for further processing. In this way, all data sent from the client device is encrypted. and / or otherwise isolated from the threat and / or the threat is not detected on the client device The transmission of commands and other data through the diversion environment is isolated from harmful data. This allows users to allows access to the full functionality of the desired network and / or

[0030] In a connected environment, existing and / or dedicated receivers, sensors and / or other A component (e.g., hardware) can transmit any type of wave or transmission (e.g., It can be used to detect a wide variety of different wavelengths (e.g., microwave pulses, lasers, ultrasound, etc.). Photonics is usually based on light-emitting diodes (LEDs), superluminescent diodes (SLDs), They use semiconductor-based light sources such as diodes and lasers. Other light sources include single photon sources, fluorescent These include lamps, cathode ray tubes (CRTs) and plasma screens. The origin of the signal can be identified, as well as any signature associated with the signal. Non-limiting examples of components include thermal sensors, laser sensors, and photodiodes. , light dependent resistors (LDR), pressure sensors, current sensors, voltage sensors, and power sensors. can be done.

[0031] In some embodiments, the security system may include a photonic filter (e.g., a polarizing filters, etc.), as well as being programmed to detect the photons being filtered. Analysis of the captured photons determines the type of filter, as well as the One or more characteristics of the filter based on (e.g., the system on which it operates, the intent, As a result, the security system may detect the presence of a plurality of different sensors, such as a sensor, a sensor for detecting a plurality of sensors ... and other sensors. The variation circuit may be configured to detect a variation circuit running on a third-party device. For example, The security system detects infrastructure that supports variational circuits. This can lead to knowledge of the existence, operation and / or implementation of variational circuits. The variation circuit may be used to generate a variation circuit and / or a data transmission from the variation circuit. The information can be programmed into the security system based on the received information.

[0032] In some embodiments, such components may be implemented in silicon-based systems or devices. For example, silicon may be generally configured to detect biological receptors. The recognition by the analyte is converted into an electrical signal that can be related to the concentration of the analyte by further processing. These techniques are used in biosensors, which are devices that can detect specific analytes by measuring the amount of light emitted by the analyte. Such biosensors detect biological elements (e.g., DNA, RNA, The system is composed of a physicochemical transducer element and a readout system for post-processing of the signal. Depending on the transduction principle, biosensors are electrochemical, mechanical, acoustic, calorimetric, etc. Among these, optical biosensors have multiple capabilities. In addition to its functionality, it offers the advantages of extremely high sensitivity, direct real-time and label-free operation. The information is analyzed as it is received and / or provided to a remote computer for analysis. The results are sent to the computing platform, where they are then displayed to the user of the connected device. users, and / or administrators (e.g., for specific areas of interest in the area) may be shared with other parties (who may be responsible for the

[0033] In some embodiments, a system or device that operates in or creates an adiabatic environment. In an embodiment, the sensor detects chemical species carried by environmental particles and evaluates the detected species. The device may be configured to capture and / or analyze environmental particles to identify Alternatively or additionally, the intercepted data and / or threats may be analyzed and / or or routed to a conversion environment for mitigation. is the vertical flow of air through the atmosphere. As the air rises, it expands and cools. As it descends, it contracts and becomes warm. Adiabatic changes are usually accompanied by a change in temperature. Therefore, the energy efficiency of an environment depends on the properties in the environment that result from adiabatic processes (e.g. air speed of movement, pressure and / or pressure changes, temperature fluctuations, etc.) are monitored and evaluated. will be done.

[0034] Data can be protected in a variety of ways to protect it from manipulation. In an embodiment, a security system may be implemented by implementing one or more of the disclosed techniques. This provides protection against Insecure Object Direct Reference (IDOR) vulnerabilities. Security flaws can be targeted by bad actors, and this can occur when an attacker modifies parameters in a request. By changing the value of one or more of the Thus, the security system may be able to gain access to the system. A system password (e.g., a generic password) may be provided or may be changed automatically. and then send the updated password to the end user and / or You may update the device with the password.

[0035] In some implementations, attacks and / or suspicious activity can be detected. Non-limiting examples include reverse engineering commands, caller ID spoofing, These include chatting, tracing chat, and SIM hacking. The command attempts to reverse engineer the password prompt command. In this example, any attempt to reverse normal or expected behavior may be A command is detected, which may include, by way of non-limiting example, a data disruption command. ,Detection of data traffic content,Detection of data traffic increase,Baseline Abnormal behavior on client devices compared to data (e.g., through AI monitoring) This can be achieved by several techniques, such as identifying the Examples of traces include email, voice calls, conference calls, video calls and Instagram. Encrypted and / or AI intrusion detection for mobile devices via messaging apps The data communications platform is responsible for the creation, sending and / or receipt of messages. The security system may be vulnerable to attacks during messaging sessions. Detect and / or exploit chatbots, regular bots, before and / or during the application. Alternatively or additionally, it may be possible to detect and / or block suspected The malicious activity is routed to a diversion environment where the attacker is informed of the attack. In order to lure them in, they use fake passwords (not just fake ones, but old passwords that have been changed) It is possible for an attacker to reveal his or her identity or intentions. Once identified, response actions can be monitored and analyzed to generate mitigation procedures.

[0036] These technologies for monitoring, analyzing and responding to threats include viruses and / or or malware Short Message Service (SMS) communications, emails and and / or any associated links or attachments. For example, a hacker may target a particular application (e.g., one that is popular and exhibits vulnerabilities) Attacking users' personal or financial data, or anything else linked to it This allows for the use of codes within text or SMS messages to target different communities. For example, sending a text message is a cheap and The hacker must enter a specific password to deliver the code. App Store (e.g. Apple Apps Store, Google Play There is no need to comply with and / or invade the Store.

[0037] In some embodiments, various types of attacks are identified, including, but not limited to, spearfishing, ping, increased authentication inputs, abnormal patterns (e.g., transmission characteristics, command requests, other aspects For example, privileged access escalation can occur over a period of time (for example, Extraordinary time delays (e.g., days, weeks, hours, etc.) can be a problem, especially in automated systems. It may refer to an attack intended to identify vulnerabilities in a targeted device / system. The detection of types of lateral movement and possible blocking of related signals Attempt to identify abuse of exchange services.

[0038] In some embodiments, an attacker may use unusual transmission characteristics to obscure the intent of the data. Data may be transmitted to a target device using a signal having a signal The signal can be transmitted at a higher or lower power frequency, which Devices can identify the data (or malicious data) being transmitted on the signal. Therefore, the system may use one or more filters to may be used to block and / or identify such frequencies, which may include additional The frequencies may be routed to a conversion environment for processing. It can come from a variety of sources, including satellite communications, WAN / LAN, etc. As cellular systems evolve (e.g., from one generation of cellular transmission to the next generation of cellular transmission), The frequencies and / or ranges of potential threats associated with the characteristics of the In either case, the use of the transformation environment is This can be employed to mitigate the effect of the signal being transmitted, rather than being completely blocked. may be filtered, analyzed and / or modified prior to transmission and / or reception. do.

[0039] In some embodiments, the disclosed security system and method includes: Detect, investigate and / or log computing activities. For example, Cloud Computing, Fog Computing and / or Engineering It is possible to integrate technologies and techniques such as edge computing. The law incorporates multiple devices networked over multiple communication paths, Each device can be opened up to a variety of attacks. Multi-tier computing, including multi-tier architectures and / or multi-tiered architectures, , Clients where application processing and / or data management functions are physically separated For example, fog computing (e.g., Fogging is the process of using excess computing power to perform computation, storage, and / or communication locally. Edge devices that may have computing capabilities (e.g., external to the devices they directly communicate with) A computing architecture that uses networked devices in a Non-limiting examples include industrial controllers, switches, routers, embedded servers and and video surveillance cameras. Edge computing is By bringing the data closer to the source, the internet devices and This aims to optimize web applications. The use of remote communication channels between the servers is minimized, reducing latency and bandwidth usage. However, the use of such alternatives reduces the network entry point. The growing number of internet and / or connected devices creates an attractive opportunity for attacks. Once such a network is identified, the security system can blocking a number of signals, preventing the transmission of one or more data types, and and / or route traffic through a diversion environment for additional processing. The government may respond with a number of mitigating measures, including:

[0040] In some implementations, client data may be collected regarding instances of oversharing. This is done by scanning potential traffic or transmission patterns with consent. from given data (e.g., over a network) and / or in different environments Agents (e.g., social networks) to explore client data The analysis will be conducted by adopting the following technologies: Such a survey could be targeted.

[0041] As used herein, "agent" refers to an AI agent, such as, but not limited to, AI agents such as the Defiant and / or the Detective For example, an AI agent can be any one or more of the following: It can access and explore any number of data environments, powered by AI agents. Defiant is a bad actor that is trying to scam people into buying and selling data, typically for nefarious purposes. The Dark Web is a place where malicious software is sold and / or distributed with malicious intent. um and Site-like locations. Agents send information to security systems (for example, a central computing platform) and Update your entire solution to protect your client devices, data, and more. The agent is intended for a variety of environments and can be created and / or modified as needed. Various capabilities that can be implemented (e.g., as new threats emerge, additional information is sought, etc.) There may be multiple agents designed with

[0042] Agent Detective serves a similar purpose to Agent Defiant. However, Agent Detective can still detect malicious sources, such as Go to the source (where the data is traded that is not identified as such) and create a complete solution. The information is then brought back to the security system for updating. Again, multiple agents likely to be deployed.

[0043] In some embodiments, AI-powered agents may conduct "undercover" operations to investigate criminals. Client Data (e.g., Social Security number or date of birth, etc.) Data identified as being disclosed and / or security systems tagged, hashed, or otherwise marked or encrypted by Search the World Wide Web (WWW) to continuously scan for It is possible.

[0044] In some embodiments, the agent may be a client device and / or a client Repeated or serious inquiries into customer data (hacking attacks, cyber security, etc.) The specific entity (e.g., individual, company, etc.) conducting the communication (including the person, company, etc.) The queries can be directed to specific individual clients, types of data, Once identified, the entity may focus on a group and / or a specific device. , surveyed, or otherwise identified, and signals emanating from a particular entity may be Can be locked, responded to (such as with an auto-reply), and / or The identity information is provided to users and / or administrators and / or law enforcement authorities for further processing. The information may be provided to the relevant authorities.

[0045] Another aspect of the disclosed security system and method is a client device, a system Look for hidden features in systems and / or software (e.g. mobile applications) In some embodiments, the functionality includes silently monitoring activity, and / or are hidden in a way that siphons data. If such functionality is identified and if data and / or user information or devices are compromised, The security system must be able to provide a reliable and secure solution to end users, administrators and / or authorities (e.g., the FCC, In some embodiments, device components, logs and / or or connected devices and networks (e.g., home or business Wi-Fi i) On a new device (including a new client, starting a recently started device, A scan for the IP address, IP address, IP address of the device, etc. is performed.

[0046] In some embodiments, the security system may incorporate other protection solutions (e.g. third-party filters, antivirus software, etc.) to disclose The security system scans the identified protection solutions and identifies the firewalls used. Record firmware, software and hardware versions and update these versions. If an update is identified, the security The system may automatically download and / or update the version. The user / administrator may be notified that a new application is available.

[0047] In some embodiments, the security system is configured to monitor so-called "quiet frequencies." These frequencies may originate from long and short distances and / or may be and are typically reserved for government applications (e.g., military, law enforcement, etc.). For example, Q-band is a frequency band in the microwave region of the electromagnetic spectrum. In common usage, this range is 33 to 50 GHz. corresponds to the recommended frequency band of operation for WR22 waveguides. These frequencies are The Q band is in the EHF range of the radio spectrum. The Q band is primarily used for satellite communications, terrestrial microwave communications, and the QUIET satellite radar. It is used for radio astronomy research, such as telescopes. It is also used for automobile radar and for detecting features on the Earth's surface. These quiet frequencies are also used in radars to detect the presence of radio waves. If so, it is identified and routed to a conversion environment as disclosed herein. It can be done.

[0048] The conversion or testing environment presented herein is a client device and a confidential data to transmit and receive data and / or run software while isolating the data from threats A computing environment that mimics a device or platform for The environments are constantly running, and at any given time, any number of transition environments may exist. For example, a given client device may have, among other non-limiting features: A single dedicated network that traffics, analyzes, executes, encrypts, and filters data. It may have a conversion environment.

[0049] Some exemplary conversion environments are directed to a particular device, i.e., a particular individual or entity. masquerading as a device used by a public entity (e.g., a hospital, financial institution, government agency, etc.) Once in the converted environment, the mynah , by deploying mimicked systems (ransomware, malware, etc.) ) attacks, so the security system must be able to access the hacker's information in the transformation environment. By doing so, the security system can obtain information about the hacker. and / or monitor and analyse how and for what purposes it is used; Determine what systems are affected by the hackers or by the information they steal. This analysis can identify unique data associated with the hacker, And the client device (and / or cloud computing platform) Vulnerabilities in the platform, network, router, hardware, etc. are identified. Patches are generated for client devices, users, administrators and / or authorities. A hacker may also create a hacker profile, provide filters, and / or generate reports. , and / or it may also be possible to identify a unique signature associated with the hacker. Alternatively, or in addition, data from a threat, once analyzed and / or mitigated, may be Once the data is stored, it can be "shredded" and discarded. This involves removing the data from its original location ( This may include returning the data to the cloud (if known), but it may also involve placing it on the dark web. In some cases, the data may be discarded.

[0050] In some embodiments, local antivirus software is installed on the infected computer. Virtual machines are used to hide the presence of ransomware that may be beyond the reach of the For example, ransomware binaries may be distributed across networks (and / or It is transmitted across the network to detect the presence of ransomware on the target device. By using an environment, the file is sent to an endpoint in a simulated environment. and monitor the ransomware's actions.

[0051] In some embodiments, the security system may require the user to grant such access. Unless you choose to do so, your device or application will not be able to access the speech recognition software. access and / or receive records from users and / or client devices; Prevent people from believing in the information.

[0052] In some embodiments, the verification tool (such as voice authentication) may be periodically (e.g., at regular intervals) at regular, irregular intervals, or upon receipt of a trigger such as the identification of a possible threat Updates may require separate voice verification or may use alternative technologies (passwords, other biometrics, etc.). In some embodiments, the security system may use a user ID, password, or other input. If the user is connected to a well-known network (for example, a home or business Wi-Fi network), Identifying the particular environment in which it operates (such as identifying routers that can be The security system may then use the user's voice enrollment password to verify the user. turn (e.g., characteristics of the user's speech) and / or environmental features (e.g., GPS location place devices in the environment, record background noise, and connect to devices known to be in the environment. Compare the results (follow-up recognition, etc.).

[0053] In some embodiments, the security system is adapted to prevent juice-jacking. For example, juicejacking is a method to hack a device (e.g., via USB) This attack involves connecting to a charging port that can also transmit data (through a USB cable). Once connected, hackers can install viruses or malware on your device. and / or connected devices (e.g., smartphones, tablets, or other Data can be secretly copied from one computing device to another. The security system and method identify when an attempt to access data is made. The access is blocked and the user is notified that a request to access the data is being made. The request may be routed through a transformation environment for further processing.

[0054] In some embodiments, malware or other malicious content may be transmitted to client devices. reside on the device and / or may compromise the data and / or functionality of the client device In an embodiment, the malicious payload may be previously distributed as malware. (For example, known malware, malware identified by an agent, or other (as disclosed herein) and / or or by recognizing unusual behavior of Thus, the download may be blocked and / or redirected to a diversion environment for further processing. Routed to.

[0055] Once a malicious payload is downloaded and executed on the client device, Security systems work to detect malicious data after it has been exploited. , unusual activity (e.g., deactivation without user request and / or authorization) data transmission) and / or malware results in being on the list of malicious data Identification of the client device and / or Once identified, the security system can The system performs further execution of the malware (for example, finalizing the affected component). , final transmission of data, disconnection from the network, etc.) and / or to route the software and / or traffic to a diversion environment for further processing. is designed to.

[0056] In some implementations, third-party sources may attempt to access data without authorization. In this case, the security system will recognize this attempt and disable the feature (for example, (The data connection may cause the client device to enter "safe" mode, etc.) A third-party source may take screenshots of the client device's display. If a user takes a photograph, a notice will be provided to the user, administrator and / or authorities and their access will be restricted. Blocked, filtered, or otherwise prevented.

[0057] In some embodiments, the security system recognizes trends in user behavior and therefore may detect and respond to unusual Unusual actions and / or traffic (e.g., routing to a diversion environment) This allows users to be identified and investigated (e.g., by a trusted make connections (between devices), recognize patterns (e.g., user behavior), AI tools to identify relevant individuals and locations (within organizations, families, etc.) It can be implemented by tracking and / or applying When an unusual event occurs, the security system assesses the risk and takes measures to mitigate the risk. The system may then determine an appropriate action to take.

[0058] In some implementations, specific tasks (e.g., accessing data, editing documents, etc.) Once authenticated, the user and / or client device is a process that is run for a limited time (e.g., to start and / or complete a task). The time frame for which access to the platform can be granted can be dynamically determined (e.g., For example, random number generators, AI modules, etc.) may vary but may be configured for a specific task. or the actions required for an authenticated user to accomplish that specific task. A task may require updates or other layers to ensure that the task has complete access. This may result in the authorization of access being revoked for a particular system and / or data. A user may have many users who can be given access to a database, but may limit the degree of access. This can be particularly useful for business clients (e.g., corporations, governmental bodies, etc.) who want to

[0059] In some embodiments, a risk assessment is performed on the user and / or client device. Certain activities may pose greater risks and therefore Identification of such activity will be reported to management (while lower risk (Some activities may go unreported.) Based on a specific risk assessment, The system generates a solution and then performs a validation check (according to the user's preferences). by reporting critical situations and / or automatically implementing solutions In some embodiments, the solution may include: Training may be included, and users (or administrators) may be asked to provide notify users of the risks and provide guidance on how to avoid / mitigate such risks A plan for this may be provided.

[0060] In some implementations, once a user logs in and access is verified, the security system The system may use passwords, logged in factor authentication, and / or other forms of logged access. Log-in access information to ensure that hackers cannot access such information. It is configured to dump immediately after.

[0061] If an account is deleted (e.g., credentials are revoked, access expires, or the user is If an account is disabled (for violation of rules or otherwise), it will automatically be added to the Account List. Such invalid accounts may be forwarded to the Any attempt to access or misuse the account will be subject to action (for example, Blocking data traffic, filtering transmissions, and routing traffic through diversion environments ing, etc.) and / or a report is sent to an administrator.

[0062] In some embodiments, the monitoring list may include specific users, devices and / or data. Therefore, anything on the list can be accessed and / or launched. If so, a report may be generated and / or measures may be taken to mitigate the risk. do.

[0063] Security systems are further designed to identify risks associated with behavior. For example, security systems can be designed to identify areas where an organization may be vulnerable. are designed and implemented with appropriate mitigation strategies and / or required support from end users. Generate training to enhance system security behavior. For example, specific to a client device, a specific end user, a specific database, etc. Drill down into violations to identify patterns of violations and take action against those types of violations. Build tools to support cybersecurity initiatives, including developing cybersecurity plans.

[0064] In some embodiments, the information may be related to a client device or a particular user (e.g., The audit feature (identified by login, login credentials, etc.) can be used. For example, users who require near-constant access to sensitive data may be User accounts and and / or associated client devices, by way of non-limiting example, behavioral trends. , geographic mobility, external data stores (e.g., third-party and / or unauthorized sites) Such monitoring may be periodically or constantly scanned for access to the This is done in real time, so users and / or administrators can track activity It is also possible to view the occurrences as they occur. By monitoring, the security system can detect threats as disclosed herein. Once identified, appropriate measures can be taken.

[0065] To respond to monitoring and data collection to determine the effectiveness of the security program Metrics are generated. Metrics can be based on advanced (e.g. individual user, client device for reports (which may identify devices, databases, networks, etc.) For example, advanced reports can be generated for a particular The effectiveness of specific countermeasures, attacks, other related information, and responses (e.g., threats are mitigated Was confidential information leaked? Was the relevant authorities notified? Was any information leaked? Was any information leaked? Was any information leaked? systems, users may be provided with learned mitigation techniques, etc.

[0066] In some embodiments, the security system may include a user and / or client device. access information that requires a signed privacy and / or consent form. Many users find such forms to be long and I find it complicated and difficult to interpret. The security system is a form It scans the text, identifies important text, and presents the text in a more user-friendly way. This is structured to provide a summary of the legal terms and conditions, including a more easily understood format. By way of non-limiting example, forms may be scanned using AI. The language may then be compared to a list and a common interpreted document may be accessed. For this, the AI ​​module will identify all relevant industry regulations, laws and compliances. The system is programmed to perform one or more of the following:

[0067] One component of this analysis is the use and sale or sharing of user data by third parties. the intent of the third party and / or other strategies that may provide access to the data to third parties Therefore, the form is related to whether the user opts in to such access. The portion that allows the user to opt out or opt in is presented to the user for consideration.

[0068] In some embodiments, the client device may access information from an open source and / or The security system may be accessed from any source, including socially generated materials. It scans for words, images, graphics, available metadata, etc. and stores this information (e.g. For example, compare the post to known sources (such as those that identify it as false, misinformation, etc.) and / or apply AI modules to identify patterns or is configured to identify keywords that, when identified as problematic, prompt the user to A warning is provided as to the nature of the problem.

[0069] Thus, by implementing the systems and methods disclosed herein, Security systems protect devices and provides uninterrupted protection of user and data, which is a natural fit for changing client behavior, bad actors’ adaptability, and / or the protection of devices, data and / or networks for individuals, businesses and governments. It responds to the ubiquitous and evolving uses of networks.

[0070] Advantageously, the disclosed system and method allows end users to Allows you to operate your device and / or access your data. In other words This would require the use of transformative environments and constant detection and updating efforts by AI agents. The system and method thus allows for the identification of both devices and data, both known and unknown. Protect against potential threats, current or emerging.

[0071] By running on a separate computing platform (e.g. AI Use of agents, performing related analysis on remote servers, and / or the use of the device and / or associated individual's transformation environment), known, unknown, and / or New and emerging threat profiles are constantly updated. Provides up-to-date security as new threats and / or new mitigation techniques are identified to client devices and / or a central platform (periodically and / or or in response to one or more conditions being met).

[0072] As used herein, the terms "first" and "second" refer to different components of the same type. may be used to enumerate components or elements, and thus not necessarily in any particular order. does not imply.

[0073] As used herein, the term "circuit" or "circuit configuration" refers to a The term "microprocessor," "digital signal processor (DSP)," Software and the like, including their discrete and / or integrated components Any analog and / or digital components, parts and / or combinations thereof Includes tal components, power and / or control elements.

[0074] As used herein, "control circuit," "control circuitry," and / or "controller" The term refers to digital and / or analog circuits, discrete circuits and / or integrated circuits. , microprocessors, digital signal processors (DSPs) and / or other logic circuits and / or any related software, hardware and / or firmware. The control circuit or control circuitry may include one or more components that form part or all of the controller. The circuit board may be positioned on one or more circuit boards and may be used for welding processes, power supplies or wire supplies. To control devices such as power supplies, and / or any other type of welding related system. It is used for this purpose.

[0075] As used herein, the term "memory" refers to both volatile and non-volatile memory devices. , and / or other storage devices.

[0076] Before turning to the drawings, which show in detail certain disclosed embodiments, it is to be understood that the present disclosure is It is understood that the present invention is not limited to the details or methodology set forth in the drawings. It should also be understood that the terminology used herein is for descriptive purposes only. It should also be understood that these and other aspects should not be construed as limiting.

[0077] Referring to Figure 1, protecting devices and data in a computing environment 1 illustrates a system 100 for detecting a user's identity. The system 100 includes a security system 102. 10, a plurality of client devices 104, and a plurality of data sources 106. The source 106 delivers, transmits, or otherwise transmits data to the client device 104. Any device, component, application, etc. that may be provided The data sources 106 may include cloud-based data sources 106A, server-based data sources 106B, and other client devices 106C. The data source 106 may transmit data to the client device 104 over a network (e.g., For example, local area networks (LANs), wide area networks (WANs), wireless networks, Local Area Network (WLAN), Metropolitan Area Network ( MAN), cellular networks (e.g., 4G, 5G, etc.), etc. The security system 102 may be coupled to a client via a communication device 108. Intercepting outbound and inbound data from the client device 104 In some embodiments, the security system 102 may be configured to In some embodiments, the client device 104 may be embodied in Each of the devices 104 may include a separate security system 102. In an embodiment, a group of client devices 104 share a single security system. The user may be a member of system 102.

[0078] The communication device 108 includes a data source 106 and a client device 104. (a) a device that is designed or implemented to provide or facilitate communication between two or more devices; Any device, component, sensor, antenna or other element that In some embodiments, the security system 102, the client device 104, and data source 106, respectively, security system 102, client device Each of the data sources 104 and 106 may be configured to communicate with each other. It may include a communication device 108.

[0079] The security system 102 includes processing circuitry including a processor 110 and a memory 112. The processor 110 may be embodied as or include such processing circuitry. Multichip or multichip processors, digital signal processors (DSPs), for specific Application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) ), or other programmable logic devices, discrete gate or transistor logic, discrete Hardware components or components designed to perform the functions described herein. A general purpose processor may be a microprocessor. or any conventional processor, controller, or microcontroller. The processor 110 may be a DSP or a microprocessor. combination of microprocessors, multiple microprocessors, one or more microprocessors in conjunction with a DSP core A combination of computing devices, such as a processor, or any other such configuration. In some embodiments, certain processes and methods may be implemented as This may be performed by function specific circuitry.

[0080] The memory 112 (e.g., a memory, a memory unit, a storage device) may include any of the memory devices described in this disclosure. Data and / or information to complete or facilitate the various processes, layers and circuits to be or one or more devices for storing computer code (e.g., RA M, ROM, EPROM, EEPROM, optical disk storage device, magnetic disk storage device or other magnetic storage devices, flash memory, hard disk storage devices, or any other The memory 112 may include a volatile memory or a non-volatile memory. and a database component, Object code components, script components, or Any other type to support the various activities and information structures described. According to an exemplary embodiment, the memory 112 may include a processor. 110 via a processing circuit and capable of carrying out the processes described herein. Computer code for execution (e.g., by a processing circuit or processor 110) Includes do.

[0081] The system 100 may be used in a variety of applications, including, but not limited to, healthcare, financial, military, or other related applications. is a leading provider of a wide range of computing solutions for various industries, including defense, avionics, and quantum systems. For example, networked devices may be used to Any person or entity trafficking in the Security Systems you disclose can benefit from the protection of their data and devices provided by the Additionally, the system 100 may be configured to allow a user of the client device 104 to This may allow the device 104 to operate "normally" while still allowing various computer Protect users from known, unknown, and / or potential or emerging threats in the computing environment. Protect users.

[0082] The memory 112 may store various engines or systems of circuits. The path may include hardware, memory, and / or software configured or operable to perform various functions. Other components may be included in the implementation. The present invention can be implemented on a computer system.

[0083] The memory 112 is shown to include an enrollment engine 114. The security engine 114 enrolls the user in the security system 102. Any device, component, processor, script or other software designed or implemented in accordance with this Agreement The enrollment engine 114 may be a user or application. The security system 102 allows a user to submit an application form on his / her client device 104. downloading, establishing a website associated with the security system 102; The enrollment may be configured to occur by raising the The engine 114 receives registration information (e.g., name, address, billing information, device information) from the user. The device may be configured to receive the following information:

[0084] The enrollment engine 114 receives the enrollment information from the user on their individual client device 10. 5. The In entry is a voice or text message that is designed or implemented to be used to authenticate a user. It may be or include voice prompts, visual prompts, etc. dIn entries are recorded and captured from users via their client devices 104. A VoicedIn entry may be recorded or otherwise received by a user. [low, high, fast, slow], laugh, talk, shout, (e.g., enrollment (used for) moving the client device 104 in a circle clockwise, counterclockwise, VoicedIn entries may be received by moving the Once captured by the client device 104, the client device 104 The cedIn entry may be provided to the enrollment engine 114. The event engine 114 processes the VoiceIn entry (e.g., , SDK, etc.) to hash the

[0085] The enrollment engine 114 generates a VoiceIn It may be configured to select certain parts / characteristics / aspects / etc of an entry. For example, The enrollment engine 114 authenticates the user (and thus provides the user with access to various data). To provide access to the pitch, frequency, intonation, stress, Others use a subset of the VoicedIn entries (e.g., a subset of syllables) The system may be configured to compare the recorded information with subsequent records.

[0086] Although described as a VoicedIn entry in this specification, the enrollment entry Other forms of input may be provided by the user to the client device 114 for transmission. It is noted that the enrollment engine 114 may be provided to the The client device 104 receives a facial image of the user by capturing the facial image of the user. Similarly, the enrollment enrollment may be configured to receive FaceIn input. The gin 114 enables the client device 104 to capture a fingerprint scan of the user's finger. It is also configured to receive FingerprintIn input from the user by The enrollment engine 114 performs the same procedure as for the VoicedIn entry described above. Similarly, we hash the FaceIn / FingerprintIn entries and The hash value may be used to authenticate the user. In addition to the ceIn and / or FingerprintIn inputs, the Footprint In entries may also be received. For example, FootprintIn may be The security system will notify parents of this date ( themselves) in addition to or as an alternative to encryption as disclosed herein. and to prevent governments or other entities from accessing this data (and provides the option to prevent this (and vice versa).

[0087] The memory 112 is shown to include a target engine 116. Engine 116 identifies known or potential risks in the computing environment. Any device, component, processor, script or other device designed or implemented to The target engine 116 may be a program or application. It may be a manager of generated targets that is constructed to represent the user. The target engine 116 may manage multiple targets that are generated. Each of these sites is subject to data intrusions, bad actors, and malware that may involve or compromise users' data. malware, or other entity / software / program / etc. (collectively, "Threats") Each target may be generated to attract or capture a threat. The type of action the threat actor is expected to perform (e.g., access to financial data, confidential information, Analyze files (offloads, copies of emails or text messages, etc.) To this end, threats can be monitored in a safe diversion or testing environment (e.g., within the target engine 116). The target engine may be transferred to a third party (such as a third party, a third party, or external to the security system 102). 116 is a report that describes each action of a threat that is identified and corresponds to a managed target. It may be designed or implemented to generate ports.

[0088] The memory 112 is shown to include an encryption engine 118. 18 provides that any device, component, or other device that is designed or implemented to encrypt a variety of data It may be a component, processor, script or application. Jin 118 may be configured to encrypt data using a variety of encryption protocols. The encryption engine 118 may provide talk-to-text functionality (e.g., on the native keyboard or function of the device 104 or on the client device 104 third-party keyboard or function) to encrypt The encryption engine 118 may be configured to perform the talk-to-text function. For example, generating, generating, or providing white noise during transmission of voice input by a user. The encryption engine may be configured to encrypt the data by implementing the encryption engine or by introducing it otherwise. Engine 118 provides talk-to-text functionality (e.g., using an artificial intelligence engine) Encryption is achieved by scrambling, mixing, or otherwise encoding text. The encryption engine 118 may be configured to encrypt advertisement (e.g., ad) logs. The device may be configured to detect logging intrusions.

[0089] The encryption engine 118 receives the address associated with the client device 104. The method may be configured to encrypt, encode, or hash s. In this case, the encryption engine 118 may be configured to enroll a client associated with the user. Associated with each of the devices 104 are a Bluetooth MAC address, an IP address, The encryption engine 11 may be configured to hash a cryptographic address or other address. 8 is not affected (e.g., unless the client device 104 has changed ownership or The location of the client device 104 (unless the client device 104 has been abandoned) During the entire validity period, the manufacturer information may be transferred, modified, or replaced with the generated hash. The encryption engine 118 may be configured to replace missing encryption certificates and The encryption certificate may be configured to detect missing or corrupted encryption certificate validation. The optimization engine 118 generally performs optimization of data, devices, or other aspects of the system 100. The device may be configured to monitor the encryption certificate.

[0090] The memory 112 is shown to include a frequency manager engine 120. The manager engine 120 detects a frequency corresponding to the client device 104; Any device designed or implemented to control, output, modify, or otherwise manage It may be a device, component, processor, script or application. The frequency manager engine 120 distributes the frequencies in real time (e.g., The device 104 is configured to manage the location of the mobile device 104 (as the mobile device 104 moves from location to location). The frequency manager engine 120 may be configured to determine the unique frequency (e.g., For example, a frequency manager may be configured to detect a frequency band (e.g., a frequency band in an environment having a frequency band). The engine 120 is designed to detect "quiet frequencies" that use power from longer distances. The frequency manager engine 120 may be configured to "Spoofing" (e.g., non-harmful frequencies, or frequencies typically used from non-harmful sources) Higher power frequencies are used to simulate or imitate signals with is configured to detect whether a power frequency is being used, or whether a lower power frequency is being used. Good too.

[0091] The frequency manager engine 120 is configured to detect and report harmful 5G frequencies without interrupting service. The frequency manager engine 120 may be configured to detect and block , to generate a modified frequency signal (e.g., from a user to a client device). from the client device 104 to the security system 102, The device may be configured to modify, adjust, or otherwise change the frequency of the voice transmission. For example, corresponding frequency manager engines on different devices or components re-adjusts the frequency (e.g., reverses the adjustment made by the frequency manager engine 120) A modified frequency signal for authenticating a user may be used to authenticate the user.

[0092] The memory 112 is shown to include an algorithmic scanning engine 122. The rhythm scanning engine 122 monitors and adjusts the algorithms used by other devices. Any device designed or implemented to adjust, modify, identify, or otherwise scan It may be a service, component, processor, script or application. The algorithm scanning engine 122 scans the algorithms, performs algorithm validation, algorithm verification, and The system may be configured to scan the system for viability or defects, or otherwise. In some embodiments, the algorithmic scanning engine 122 may include a processor that may be configured to read and write the algorithm used to identify a person. The algorithm scanning engine 122 may be configured to scan the algorithm. The inputs used by the algorithm are intended to target a particular race, gender, etc. Scanning algorithms to identify whether the content is malicious or unintentionally targeted The algorithmic scanning engine 122 may be configured to The input used corresponds to an expired record, an arrest without a conviction, and The algorithm is used to distinguish between those that imply racial inequality and those that correspond to it. Therefore, the algorithmic scanning engine 122 may be configured to scan the , may be configured to prevent algorithmic bias with respect to race, gender, etc. In some cases, the algorithmic scanning engine 122 may provide a link to an algorithm for identifying a person. A gender-neutral, non-transitive ... The device may be configured to detect voice, face, iris, and other artificial biometric data.

[0093] In some embodiments, the algorithmic scanning engine 122 may include a social media app. The application may collect biometric data of the user (e.g., a photograph, video or audio recording, fingerprint, whether the personal information (e.g. fingerprint scan, iris scan, other biometrics, etc.) was detected and / or altered; For example, the algorithm may be configured to identify whether a user's facial image Above, distorted or otherwise modified images are still algorithmically identifiable. The marker holding the target may be captured.

[0094] In some embodiments, the algorithmic scanning engine 122 may be configured to detect specific characteristics or characteristics of a user. markers (e.g., social, physical, behavioral, etc.) are assigned to an individual by a third party To build dossiers regarding digital social engineering Such dossiers may be configured to detect whether the The user's persona or data may be sold to a party interested in exploiting it. be.

[0095] The memory 112 is shown to include a data manager engine 124. The Data Manager Engine 124 may manage data rights, access, privileges, or other data Any device, component, or process designed or implemented to manage any aspect of data It may be a database, script or application. 124 provides that native language speech recognition software is provided to registered users (e.g., their clients) Receive any records (pertaining to the client device 104 or other client device 104) The data manager engine 124 may be configured to prevent the The registered option allows the voice recognition software to share recordings. Unless you select this option or modify your settings accordingly, the voice recognition software will not record your You may block the reception.

[0096] The data manager engine 124 receives data from the client device 104. , monitor oversharing across systems in contact with the client device 104; The data manager may be configured to identify, detect, or otherwise check for any The data engine 124 is configured to process the data for each client device 104, data, network, etc. For example, the threat model may be configured to Specific to a particular device, data, incident, entity, and / or user This is because each is different, provides different functions, is exposed to different threats, and / or may be accessible to different users and / or networks, thus Inevitably, different systems, devices, data and / or users face different threats. This is due to the fact that it is presented.

[0097] Data Manager Engine 124 is a website, app, interface Hardware that is configured to read third-party privacy documents, The data manager engine 124 may provide such a function for the user. You must read and understand the Third Party Privacy Statement before accepting the privacy agreements contained in such statements. may be configured to extract, aggregate, or otherwise analyze.

[0098] Data Manager Engine 124 ensures that VoicedIn entries are secure. The VoicedIn entry is configured to be maintained at the client device 104. The data manager engine 124 may be configured to To determine the primary environment in which the user is primarily located (e.g., car, home, bedroom, workplace, etc.) The data manager engine 124 may be configured to generate an environment list corresponding to the environment. (for example, a Wi-Fi or other network access point that is compatible with the environment) The data manager engine 1 may be configured to hold the 24 Updates VoicedIn entries (e.g., every 30 minutes / hourly / daily, etc.) The environment and VoicedIn entries may be configured to request The data manager engine 124 is configured to authenticate the user based on the This is also fine.

[0099] Data Manager Engine 124 is a tool to detect and track news, posts and websites that are misinformation. parsing such content, and parsing the parsed content The data manager may be configured to detect the content of the data by comparing it with other content. The manager engine 124 may be configured to detect leakage of IoT sensor data. good.

[0100] The memory 112 is shown to include a scan engine 126. may be communicatively coupled to the client device 104 or otherwise One or more devices, components, entities, etc. that may be within range of the device 104 Any device, component, or method designed or implemented to scan a The scanning engine 12 may be a program, a processor, a script or an application. 6 is IoT sensor (e.g., smart city, electric vehicle charging station sensor) sensors (such as ultrasonic sensors and sensors used for biometric scanning) to detect malware, outdated files, The device may be configured to scan for firmware and software.

[0101] The scanning engine 126 uses a designated ethical agent to detect malware. The scan engine 126 may be configured to extract power from the connected IoT sensors. On the devices (e.g., client device 104) and software in the system The hidden functionality may be configured to search for hidden functionality that may compromise the end user's privacy. To the extent that there is a risk, the scanning engine 126 will notify the end user and the FCC. The scanning engine 126 may be configured to 04 or to the network to which the client device 104 is connected) configured to detect (and notify end users of) unauthorized or covert device connections; The scanning engine 126 may scan the [IP / URL] of the browser and the app for malware. The scanning engine 126 may be configured to scan for espionage, spam, and other malicious software. It may be configured to detect fraud, phishing and vishing.

[0102] The memory 112 is shown to include a privacy engine 128. The engine 128 may be configured to determine data access rights or other privacy settings for the client device 104. Any device that is designed or implemented to manage, handle, or otherwise process It may be a device, component, processor, script or application. Privacy Engine 128 has been updated to address the Insecure Direct Object Reference (IDOR) vulnerability. The IDOR vulnerability involves an attacker being able to By simply changing the meter value, a malicious user can gain access to another user's account. The privacy engine 128 is a system Provide (or automatically change) a system-wide password and end Send to the user and / or update the user's client device 104 with this password. The privacy engine 128 may be configured to update the privacy settings of the end user. Reverse engineering and reverse programming to guess or determine passwords The device may be configured to detect the

[0103] The privacy engine 128 determines the privacy policy or policies associated with the application. or other third-party collected data (for example, what types of data are collected) how often the data is collected, what is being done with the data, where the data is stored, to determine the owner of the data and the rights holders to the data, etc. The privacy engine 128 may then inform the user about the application according to this information. may be configured to provide the option to opt in or out of the The privacy engine 128 may be configured to provide a fraud reporting option. .

[0104] In some embodiments, the privacy engine 128 detects or identifies seductive servers. The captivating server may be configured to include a single computer, a computer group, loop, or other computing devices collectively located on a network. It may be or include the following: Seductive servers are narcissistic, highly It may be characterized by heightened risk aversion and extreme information asymmetry. The server receives data or other information from the network to which it is connected, often The data can be collected without paying the data. The data can be collected by the attractive server without paying the Privacy Engine 128 The system may be configured to detect attractive servers connected to the network. Ibashi Engine 128 detects and detects the access to data on the network by the seductive servers. It may be configured to limit or block access.

[0105] The privacy engine 128 is configured to detect caller ID spoofing. The privacy engine 128 may also provide a trace chat or chat trace feature. Such functionality may be configured to implement email, voice calls, conference calls, etc. , encryption for mobile devices via video calls and instant messengers / The privacy engine 128 may be configured for an AI intrusion detection communication platform. Detect chatbots, regular bots, and end chat or messaging sessions The privacy engine 128 may be configured to detect / block intrusions before / during Detects screenshots from external sources (and creates a screenshot The method may be configured to:

[0106] The privacy engine 128 may be configured to prevent SIM hacking. The image engine 128 may be configured to read and write text (e.g., at the client device 104). and configured to scan email for links to viruses or malware The privacy engine 128 may be configured to block interception of SMS messages. For example, intercepting SMS messages may be configured to Signaling System 7 (also known as Common Channel Signaling System 7) This is possible due to vulnerabilities in a set of telephony signaling protocols used by The privacy engine 128 identifies potential threats that may attempt to expose these vulnerabilities. In addition, such threats may intercept SMS messages from the client device 104. The control unit 10 may be configured to prohibit the user from

[0107] FIG. 2 illustrates an example security system of FIG. 1 for implementing a face recognition process, according to an embodiment of the present disclosure. 2 is a flowchart illustrating example machine-readable instructions 200 that may be executed by the security system 102. The example instructions 200 may be implemented in the memory 112 and / or one or more databases. The data source 106 and the processor 110 of the security system 102 An exemplary instruction 200 is described below with reference to the system of FIG. Specifically, the method includes a computer for collecting and managing biometric data of a person. computer software or hardware to collect and manage a person's biometric data Downloadable mobile application, digital to secure network For the purposes of controlling access and physical access, physiological characteristics, i.e. race and sex The present invention represents software for authenticating and verifying a person based on another characteristic.

[0108] As disclosed herein, the security system 102 may include algorithmic scanning. The input used by the algorithm (via engine 122) is a unique Intended or unintentional targeting of a species, sex, or other These inputs may include personal attributes (e.g. , skin, eye and hair color or type, body shape, etc.), environmental characteristics (e.g., clothing, geography, location, ambient noise, speech patterns, colloquial expressions, etc.), and / or government records or public Shared records (e.g., expunged records, arrests without convictions, and racial and / or or sexual inequality), and the race of the individuals being monitored. It is used to draw certain conclusions such as economic status, regional economic condition, etc. Thus, the algorithmic scanning engine 122 may be able to detect race, gender, economic status, The algorithm may be configured to prevent bias of the algorithm with respect to other

[0109] For example, with regard to the use of facial recognition by law enforcement agencies, we may need to amend the records and / or A security system may be used to update the The system ensures that expunged records, arrests without convictions, etc. are properly removed from individuals' profiles. Additionally, racial and / or sexual equality implications may be considered in the use of AI models. may be mitigated by

[0110] In some embodiments, an algorithmic scanning engine 122 (e.g., Secure software and / or hardware, such as FPGAs, configured to implement The software collects, transmits, stores, and / or otherwise processes inputs for the algorithms. Such systems can be integrated into systems that use algorithmic scanning engines. Engine 122 will identify implementations of such algorithms and provide information to administrators and authorities. , and / or the behavior of the algorithm may be automatically modified by the server, processor, Transmission components (eg, routers, cellular towers, satellites, etc.) may also be included.

[0111] In block 202, a face image is captured by a camera, a display, and an application. In block 204, the image is sent to a security system (such as In block 206, the image is provided as a captured image. The face is analyzed by the security system to determine one or more characteristics of the face. is characterized by one or more structural features (e.g., shape, contour, size, arrangement, etc.) as well as It may correspond to aesthetic features (e.g., color, tone, etc.). The system takes into account several factors (e.g., image quality, lighting, age, posture, etc.) First, the image quality is evaluated to determine whether it is sufficient for identification. If so, the method returns to block 202 to recapture the image.

[0112] If the image quality is of sufficient quality, the method proceeds to block 210 and modifies one or more characteristics. For example, these characteristics may be compared to a database of false positives in block 212A. The known positive data is compared to the unknown positive data in block 212B and the unknown positive data in block 212C. The data is then compared to known negative data and / or known negative data in block 212D. In block 214, the comparison results are cross-referenced. In block 216, the security The system determines whether the characteristic data matches any of the data in the database. For example, a certain confidence threshold must be exceeded for a positive identification to occur. If the confidence threshold is not reached, the method returns to block 202 to If the confidence threshold is exceeded, a positive identification report is generated in block 218. For example, the report contains details from each database comparison. A statistical analysis may be performed to determine which factors contributed to the positive identification. This allows reports to be generated even if positive identification is not achieved, Details of the comparison are reported to inform management why distinctions were not achieved.

[0113] 3A and 3B are diagrams illustrating an example security system of FIG. 1 for implementing data protection and authentication. 1 is a flowchart illustrating example machine-readable instructions 300 that may be executed by the security system 102. The example instructions 300 may be executed by the memory 112 and / or one or more databases. The data source 106 and the processor 110 of the security system 102 An exemplary instruction 300 is described below with reference to the system of FIG. In some embodiments, the instructions 300 are executed in a quantum computing environment. and / or generated from a quantum computing platform, associated with a form, transmitted by the platform, and / or The method is configured to provide protection against threats stored in a form.

[0114] Blocks 302 represent ongoing actions that are continually performed during each step. Specifically, the security system constantly monitors for threats, as shown in block 304. Detect intrusions and analyze known and unknown data, devices, network traffic and and / or configured to scan for any known or unknown anomalous events. In block 306, the identified threats are encrypted and / or stored for further processing. As disclosed herein, the continuous monitoring action is not limited to any particular process and / or component. The disclosed systems and methods identify threats and / or provide solutions. It is constantly used to

[0115] In some embodiments, a user may have access to a protected client device and / or data. If the user wishes to access the system, then in block 308 the user may Provide biometric data (or other verification data) to enroll in the service. In the check 310, the security system receives biometric data (e.g., a marker), as well as other data that may be present in the environment (e.g., ambient conditions, network signals, etc.) At block 312, the enrollment Data extracted during the process may not be used for purposes other than those intended by the data owner. To determine whether If the data is used elsewhere, block 314 In block 316, the data and third party uses are identified. Reports detailing the use of third-party services will be provided to users and / or administrators. .

[0116] If no third-party data usage is detected, then in block 318, The security system breaks the data down and scatters the pieces into a cryptographic sequence of qubits. In some embodiments, this involves storing qubits in a secure and scalable block. This is achieved by distributing the data across the entire blockchain. In some implementations, the data These modifications can be applied to the data. for the entire ownership of the device (for example, until the password expires or the device is replaced) Examples of data that may be retained include personal data, passwords, Device identifiers (ISN, mac address, etc.) and location and time data, but not limited to These are some of the reasons why.

[0117] In some embodiments, at block 320, the data on the blockchain is encrypted using a quantum computer. This may involve transferring data to a cloud environment, on a server and / or in a hybrid or quantum storage or transmission system. Options such as storing device-specific data further clutter the device. In some embodiments, in block 322, the original data is It can be replaced by one or more etc.

[0118] Continuing with reference to FIG. 3B, once the data is protected, at block 324, The security system may receive a data access request from a user. In this case, the security system determines whether the request is authorized. For example, the request is authenticated (e.g., the requester has provided proper credentials). If so, then in block 328 the data qubits are randomized in different sequences. At block 340, access to the authentication data is restricted, such as by time limiting. provided according to (and / or according to updated authentication requirements during access). For example, some people working remotely on personal devices are more vulnerable to threats. The disclosed security system may, for example, To build a threat model for data, we analyze devices and data (highly connected devices) and / or network) to enroll the device The device / data is then assessed for threats (outdated software / files) Firmware) are identified and a threat model / assessment is provided to management, and Mitigation measures may be implemented (either dynamically or with guidance provided to administrators).

[0119] If the request is not authorized, the method proceeds to block 342 and In block 344, the request and associated data are routed to the conversion environment. It is implemented in a converted environment that is configured to mimic the intended target environment. This allows data to be viewed in a test environment separate from the client device. This adds another layer of protection against possible threats. Next, block 34 6, the data and / or device associated with the unauthenticated request (known and unknown) and unknown devices) are available for further analysis by the authenticated data / device owner. Retained in the conversion environment unless required.

[0120] As set forth in block 348, the security system may is implemented continuously before, during and after any process to detect threats, as shown in block 350. Threat monitoring, intrusion detection, known data, unknown data, devices, network traffic and / or continue to scan for any known or unknown anomalous events, thus At step 352, the identified threats are encrypted and / or diverted for further processing. In some embodiments, the data and / or the device are provided to the transformation environment. Once encrypted, the encryption is removed from the data and / or device. The data and / or devices being transmitted remain protected from threats during transmission and the data and and / or the device may be enabled to mimic normal operation in a transformed environment.

[0121] 4A-4D are diagrams illustrating a method for protecting devices and data in a computing environment. 4A shows an example dashboard for shall notify users or administrators of the availability of devices and / or As shown in block 400, the method presents a view that may provide information about the data. The auditor / user / administrator enters the Resolution Dashboard where all the dashboards Auditors can see a full view of the port utilities from the AI ​​monitoring system. The displayed warnings provide a list of potential threats. As detailed in 02, when you click to open it, the auditors will be able to see the connected items, to name a few. Complete analysis of all potential impacts across multiple categories including quality, vulnerability points, and automation You can see the complete report.

[0122] As shown in Figure 4C and detailed in 404, the auditor may provide his / her own You can post your notes as feedback. As you type, the AI ​​will Generates a recommended solution to stop the problem and the auditor can click to approve This allows you to delegate the use of APIs or prerequisite machine learning actions. As shown in FIG. 4D and detailed at 406, the auditor Users can post their own notes as feedback for later review. As the data loads, the AI ​​generates recommended solutions to stop the threat, and the auditor You can submit it for approval by clicking Vendor tools, such as relevant machine learning actions, are launched.

[0123] In some embodiments, the data is processed via a quantum computer or using a quantum system. Quantum systems are generated, analyzed, stored, and / or transmitted by Some calculations are performed more quickly than on classical computing platforms, and / or The software is expected to run on a computing platform with different characteristics. It follows the principles inherent to science.

[0124] In some embodiments, quantum systems present unique detection problems. The quantum computing system identifies systems that use quantum processing technology and / or hardware. A quantum computer may be configured to perform calculations that are theoretically impossible with a classical computer. It is not possible to perform impossible functions, i.e., it alters the Church-Turing thesis. However, quantum computers can do many things that are much easier than classical computers. It may be possible for a system to do this much faster and more efficiently than a traditional computer.

[0125] In some embodiments, the security system may be a quantum system or other type as described. It performs a basic topology discovery scan for the system. For example, a security system After the system has completed scanning the device (or network, etc.), the system Dynamically collects information about all connected devices, their IP addresses on the network, and other parameters. Information (e.g., energy usage, estimates of energy usage over time, identified devices A system architecture diagram showing the network (and other devices) that may require connection to the Build.

[0126] In an embodiment, a client device acts as a quantum system and can communicate with an external quantum system. If a ion trap type system tries to access this client device, It may be possible to detect quantum computing systems and devices. Protection of data transmissions from systems, transactions, execution, etc. must be ensured. Therefore, end user behavior can be analyzed by using quantum mechanics in traffic and access logs. It can be determined by analysis.

[0127] In some embodiments, the security system is based on a trapped ion quantum computer. By running the parameterized circuit and feeding the results to a classical optimizer, etc. Therefore, we detect the superconducting architecture and clarify the convergence of the quantum circuit to the target distribution. Particle swarm optimization and classical optimization strategies, both of which rely on quantum hardware and classical optimization strategies, In some embodiments, the security system may use Bayesian optimization and / or Bayesian optimization. The system detects external overlaps.

[0128] To detect quantum operators, the detection device must have a short (quantum) coherence time and For example, randomized quantum gates can be implemented with a limited circuit depth. It is used to secure data on security systems. It ensures that variations can be unique. In some embodiments, different angles are used to capture sensitive data (e.g., client The Quantum Computing System (APC) will be stored in the Quantum Computing System until it is uninstalled. The use of a filtering architecture provides an additional layer of security.

[0129] When a hacker or malicious / anomalous event is detected and captured, the data , is destroyed by an irreversible conversion process. In other words, if you change the state of the data Once this process is complete, the data is destroyed and cannot be restored to its previous state. Any modified data will be permanently dumped from the system or, if discovered, is returned to its original location.

[0130] In some embodiments, the security system detects data in a reversible state and determines whether it is operational. If the vulnerability is introduced within the application architecture or the client device, It is designed to destroy data by changing its state.

[0131] In some embodiments, the physical scan may include a whole body quantification ( For example, information related to 4D, 5D, 3D capture and / or images For example, current airport security uses air blowing to In some embodiments, the scanning includes: Using biometric characteristics (e.g., eyes, Can identify 3D printer images / objects that are intended to mimic fingerprints, etc. can.

[0132] In some embodiments, the security system may include, but is not limited to, monitoring, It provides detection, analysis and reporting capabilities and is configured to operate in complex environments. For example, The security system is a system in which multiple sensors are placed throughout the city to constantly monitor the environment. "Smart City" - a city that collects and analyzes data to improve the functioning and security of local governments This and other embodiments (e.g., health management) may be implemented in a variety of environments. In a physical environment, sensors detect changes in the environment (e.g., temperature, humidity, disease, disease vectors, etc.). and particulate matter, including pollutants, and other rapid changes) and to mitigate identified threats. A warning may be generated that may include guidance regarding reduction.

[0133] In some embodiments, the sensor may be associated with a sensor or other critical infrastructure. Detect thermal conditions in the environment, including bridges that are damaged by overheated joints. The machine may exhibit extreme stresses and may show signs of wear due to excessive heat in the factory settings. Indicates the weather.

[0134] In a healthcare setting, sensors can measure the exposure of equipment or people to harmful radiation, chemicals, and other Dew can be measured.

[0135] In some embodiments, the sensor is used to detect multiple types of chemical signatures. For example, DNA, artificial DNA and modified DNA, can be used in tasks such as drawing blood, taking X-rays and other things. may be captured (e.g., due to exposure risks) using non-contact technologies, may be captured and analyzed.

[0136] In some embodiments, the security system identifies the current cycle in the associated life cycle. It is used to detect animals, plants and insects, including by identifying A quality system can be a natural, simulated, or genetically engineered organism. It is possible to determine whether the organism is mature, laboratory grown, or otherwise. The data may be used to provide insight into the growth, offspring development, etc.

[0137] In some embodiments, the security system is identified by an Identification Friend or Foe (IFF) system. The IFF's ability to identify distinct objects, signals, data, people, and other As described herein, the IFF can enhance command and control. It is an identification system designed for military and civilian air traffic control interrogation systems. The system identifies aircraft, vehicles or forces as friendly and receives interrogation signals from the interrogator. It allows the determination of the position and range of the IFF. Monitoring and analysis should be conducted unobtrusively, typically within a given area (e.g., airports, military installations, etc.). This can be done undetectably within 100 miles of any point of interest. The security system uses AI models to build IFF risk assessments, insignia, transmission protocols, biometric characteristics of approaching personnel or objects (e.g., speech, Able to distinguish accents, etc.

[0138] In some embodiments, the security system serves to reduce risks to human health. The system may also be integrated with hardware attachments (e.g., for 5G communication towers) that can be used to install 5G wireless devices. The associated device is mounted on a tower and detects frequencies in the operating environment and determines which are already In some embodiments, the communication system (or The client device (which has transmission capability) is provided with a security system The software and / or hardware may be used universally without a network connection. This may be provided, for example, by direct communication with a serial bus (USB) enabled device.

[0139] Some embodiments include storing computer program instructions on a computer readable storage medium. The present invention includes electronic components such as a microprocessor, storage device, and memory. Many of the features described herein can be implemented as program instructions encoded on a computer readable storage medium. These programs can be implemented as processes that are specified as a set of instructions. When RAM instructions are executed by one or more processing units, they The program instructions or instructions cause the computer to perform various operations indicated in the program instructions. Examples of code include machine code, such as that produced by a compiler, and compiler Using an interpreter on a computer, electronic component or microprocessor It contains a file containing high-level code that can be executed. The processing units are described herein as being executed by a server or a client. Any of the functions listed in the "Message Management Service" or any other function associated with the Message Management Service. Various functions for server systems and client computing systems, including It is possible to provide

[0140] It is understood that the systems described herein are illustrative and that variations and modifications are possible. It will be appreciated that computer systems used in connection with embodiments of the present disclosure may , may have other capabilities not specifically described herein. Additionally, although the system has been described with reference to certain blocks, it is understood that these blocks , which are defined for convenience of explanation and do not include a specific physical arrangement of component parts. It should be understood that this is not intended to imply that different blocks They can be located within a facility, in the same server rack, or even on the same motherboard. Additionally, multiple blocks may correspond to physically separate components. The blocks do not need to be programmed to operate in a specific manner, for example by programming a processor to or configured to perform various operations by providing appropriate control circuitry. It is possible, and the various blocks depend on how the initial configuration was achieved. The embodiments of the present disclosure may or may not be reconfigurable. and various apparatus, including electronic devices, implemented using any combination of software. It is possible to realize the above in the above.

[0141] While this disclosure has been described with reference to specific embodiments, many variations will occur to those skilled in the art. It will be appreciated that there may be specific rule examples (trigger conditions and / or outcomes) that may be The process for generating proposed rules (including the proposed actions) is described. However, other rules and processes may be implemented. Various computer systems and methods, including but not limited to the specific examples described herein, The present invention can be realized using various communication technologies.

[0142] The embodiments of the present disclosure may be implemented using dedicated components and / or programmable processors and and / or other programmable devices. The various processes described herein may occur on the same processor or on different processors. The components may be implemented in any combination of the above. When described as being configured to execute, such a configuration may include, for example, By designing a circuit to perform the operation, a programmable electronic circuit (microcomputer) is created. by programming a processor (such as a In addition, the above-described embodiments can be achieved by any combination of the above. Although reference may be made to hardware and software components, those skilled in the art will recognize Different combinations of hardware and / or software components may also be used. The specific operations described as being implemented in hardware are It will be appreciated that the present invention may be implemented in a multi-threaded manner, or vice versa.

[0143] Computer programs incorporating various features of the present disclosure may be implemented in a variety of computer readable media. The information may be encoded and stored on a storage medium, suitable media being a magnetic disk or tape. , compact disc (CD) or DVD (Digital Versatile Disc) Such media include optical storage media, flash memory, and other non-transitory media. The computer readable medium encoded with the code may be packaged with a compatible electronic device. Alternatively, the program code may be downloaded separately from the electronic device (e.g., Via internet download or separately packaged computer readable The information may be provided as a storage medium.

[0144] The device and / or method may be implemented in hardware, software, or hardware. The method and / or system may be implemented in a combination of at least one In at least one computing system, processor and / or other logic circuitry The different elements may be realized centrally in one computer, or may be implemented in several interconnected computers. Distributed across computing systems, processors and / or other logic circuits The computing system or other device may be implemented as described herein. Any type of hardware adapted to carry out the method described above is suitable. One exemplary combination of the program and software, when loaded and executed, implements the functions described herein. having a program or other code for controlling the dispenser to carry out the method described; The processing system may be integrated into the supply device. Another typical implementation is a field Programmable Gate Arrays (FPGAs), Programmable Logic Devices (PLDs) or Complex Programmable Logic Devices (CPLDs), and / or System On Some may include application specific integrated circuits or chips, such as SoCs. The implementation stores one or more lines of code that are executable by a machine, and thus A non-transitory, machine-readable (e.g., computer readable) readable) media (e.g., FLASH memory, optical disk, magnetic storage disk or As used herein, a "non-transitory machine-readable medium" may include a The term "machine-readable storage media" includes any type of machine-readable storage medium and excludes propagating signals. It is defined as follows.

[0145] The processor identifies a state of a given process or action and generates a The optimal values ​​for one or more parameters may be found automatically. The device may include a microcontroller, field programmable logic circuit, and / or control Any other control or logic circuitry capable of executing instructions that execute software. The processor may be implemented in analog circuitry and / or in combination with digital circuitry. It may also be implemented in combination with a logging circuit.

[0146] Although the present methods and / or systems have been described with reference to certain implementations, those skilled in the art will appreciate that Various modifications may be made without departing from the scope of the method and / or system. and it will be understood that equivalents may be substituted. Many modifications may be made to adapt a particular situation or material to the software without departing from its scope. For example, changes may be made to the blocks and / or components of the disclosed embodiments. The elements may be combined, divided, rearranged, and / or otherwise modified. Thus, the methods and / or systems are not limited to the particular implementations disclosed. Instead, the method and / or system is in accordance with the appended claims both literally and under the doctrine of equivalents. This invention includes all implementations that fall within the scope of the claims.

Claims

1. A system for securing devices and data in a computing environment, 、 a security system communicatively coupled to a client device, The security system is receiving a biometric entry from a user of the client device; authenticating a user of the client device using the biometric entry; and In response to authenticating the user via the biometric entry, the client device and configured to allow the user access to data on the database.

2. The method of claim 1 , wherein the security system is embodied on the client device. The system described.

Images