Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-12052241-B2
Publication Date
2024-07-30
Expiration Date
Abstract
A system, method, and media for providing web-based security to a workflow process is presented. Data may be processed in a web-based workflow management system. The system may detect the transfer of high-level security data through the workflow. Upon detection of the data transfers the system may request review and approval in the form of a biometric input from an approved user to allow the data to be transferred.
Core Innovation
The invention provides security to a workflow process by receiving a request to transfer data across a network and associating the request with a security level. Based on the security level, the system requests authentication information from an application on the client computing device, and obtains biometric authentication data of the user and information indicative of the client computing device via the application.
The method performs a first comparison of the biometric authentication data with stored biometric identity data for a plurality of authorized users and performs a second comparison of the client computing device information with stored client computing device data associated with the plurality of authorized users. Approval of the request to transfer the data is performed based at least on the first comparison and the second comparison.
In parallel, the method performs an analysis of the transfer request for potential security threats, flags the transfer request as a security threat based on the analysis, and requests authentication information from the client computing device. The invention implements a workflow security control where authentication from a user and device-indicative information are compared to stored authorized identity data and stored authorized client computing device data, with the stored client computing device data associated with the stored authorized identity data before approving the transfer request.
The invention also supports threat profiling by using the flagged security threat and related inputs to update a threat profile and utilize it to detect future threats. Additional embodiments include biometric authentication obtained via biometric sensors, multifactor authentication scenarios where biometric authentication functions as one factor, obtaining user account information and log history, and a flagged security threat linked to an indicated risk of regulatory non-compliance.
Claims Coverage
The document includes three independent claims covering security to a workflow process for approving network data-transfer requests using threat analysis and biometric authentication with device-indicative verification. The independent claims share the core structure of threat assessment and flagging, authentication request and data collection, and approval based on comparisons to stored authorized data.
Biometric approval of data-transfer requests using first and second comparisons
A request to transfer data across a network associated with a security level is received; authentication information is requested from an application on the client computing device based on the security level; biometric authentication data and client computing device information are obtained; a first comparison is performed of the biometric authentication data with stored biometric identity data for a plurality of authorized users; a second comparison is performed of the client computing device information with stored client computing device data associated with the plurality of authorized users; the request is approved based at least on the first comparison and the second comparison.
Threat analysis and security-threat flagging with biometric and device-based comparisons
A transfer request to transfer data across a network is received from a client computing device; an analysis of the transfer request for potential security threats is performed; the transfer request is flagged as a security threat based on the analysis; authentication information is requested from an application on the client computing device; at least one form of authentication and information indicative of the client computing device are obtained; a first comparison is performed of the at least one form of authentication with stored authorized identity data; a second comparison is performed of the client-computing-device-indicative information with stored authorized client computing device data, wherein the stored authorized client computing device data is associated with the stored authorized identity data; the transfer request is approved based at least on the first comparison and the second comparison.
Workflow security method using threat analysis, flagging, biometric/device verification, and approval
A method receives, from a client computing device, a transfer request to transfer data across a network; an analysis of the transfer request for potential security threats is performed; the transfer request is flagged as a security threat based on the analysis; authentication information is requested from the client computing device; at least one form of authentication and information indicative of the client computing device are obtained by the client computing device; a first comparison is performed of the at least one form of authentication with stored authorized identity data; a second comparison is performed of the client-computing-device-indicative information with stored authorized client computing device data, wherein the stored authorized client computing device data is associated with the stored authorized identity data; the transfer request is approved based at least on the first comparison and the second comparison.
Across the independent claims, security to a workflow process is provided by analyzing and flagging transfer requests as security threats, requesting authentication, obtaining authentication and client computing device information, and approving the transfer request based at least on comparisons to stored authorized identity data and stored authorized client computing device data associated with the identity data.
Stated Advantages
Documented Applications
Not explicitly described in patent.
Interested in licensing this patent?