Patent ID: 11909746
Assignee: DELL PRODUCTS L.P.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 8:
9. A user authentication and threat detection system, comprising:
an artificial intelligence (AI) engine comprising a plurality of software modules, which are stored within a computer-readable medium and executed by a processing device of a first cloud-based information handling system (IHS) to:
collect data from multiple devices located within different locations, wherein the collected data comprises system and user-related data, which is collected from:
a first set of devices located at a first location when a user initiates login to a protected network from the first location; and
a second set of devices located at a second location, which differs from the first location, when the user initiates login to the protected network from the second location;

store the collected data within a training dataset as user profile data; and
securely authenticate the user or detect potential security threats to the protected network based, at least in part, on the user profile data stored within the training dataset; and

the training dataset, wherein the training dataset is stored within the first cloud-based IHS or a second cloud-based IHS communicatively coupled to the first cloud-based IHS;
wherein the plurality of software modules comprise a data collection module, wherein each time the user initiates login to the protected network from an IHS located at a particular location, the data collection module is executed by the processing device to:
collect data from the IHS and one or more trusted devices located within the particular location, wherein the one or more trusted devices comprise at least one trusted peripheral device and/or one or more devices linked to the at least one trusted peripheral device, and
add the collected data to the user profile data stored within the training dataset; and

wherein the plurality of software modules comprise a user authentication and threat detection module, wherein each time the user initiates login to the protected network from an IHS located at a particular location, the user authentication and threat detection module is executed by the processing device to:
attempt to detect an identity or presence of the user at the particular location based on the user profile data stored within the training dataset and the data, which was collected from the IHS and the one or more trusted devices located within the particular location when the user initiated log-in,
authenticate the user and grant access to the protected network, if the identity or presence of the user is detected at the particular location, and
deny the user access to the protected network, if the identity or presence of the user is not detected at the particular location.