Source: https://encrypted.google.com/patents/US8336085
Timestamp: 2018-04-27 06:50:24
Document Index: 75911736

Matched Legal Cases: ['Application No. 2005131911', 'Application No. 200680030846', 'Application No. 05110697', 'Application No. 05110697', 'Application No. 05109616', 'Application No. 05110697', 'Application No. 05109616', 'Application No. 05110697', 'Application No. 05855148', 'Application No. 05820090', 'Application No. 2006220489', 'Application No. 2005222507', 'Application No. 05823253', 'Application No.05854752', 'Application No. 05820177', 'Application No. 05819896', 'Application No. 05821183', 'Application No. 2007', 'Application No. 200580038813', 'Application No. 200680030846', 'art 3', 'Application No.200680006199', 'Application No. 10', 'Application No. 2005', 'Application No. 05821183', 'Application No. 05820090', 'Application No. 200580038812', 'Application No. 200680006199', 'Application No. 200680006199', 'Application No. 200580043102', 'Application No. 200680006199', 'Application No. 200680006199', 'Application No. 200510113398', 'Application No. 200680006199', 'Application No. 200580038812', 'Application No. 05851550']

Patent US8336085 - Tuning product policy using observed evidence of customer behavior - Google Patents
A computer adapted for pay-as-you go or other metered use has a policy for determined what measurements to take to detect fraud as well as steps to take when fraud is found. To optimize between good performance and sufficient tests to reduce the risk of fraud, a policy is developed based on observation...https://www.google.com/patents/US8336085?utm_source=gb-gplus-sharePatent US8336085 - Tuning product policy using observed evidence of customer behavior
Publication number US8336085 B2
Application number US 11/224,635
Also published as CN101263523A, EP1952331A1, US9224168, US20060107306, US20130173442, WO2007032974A1
Publication number 11224635, 224635, US 8336085 B2, US 8336085B2, US-B2-8336085, US8336085 B2, US8336085B2
Inventors Gokul P. Thirumalai, Isaac Ahdout
Patent Citations (441), Non-Patent Citations (168), Referenced by (2), Classifications (15), Legal Events (3)
US 8336085 B2
1. A method of determining and enforcing a risk policy on a pay-per-use device, the method comprising:
collecting and storing operational data at the pay-per-use device, wherein the operational data indicates a metered measurement of usage by a user of the pay-per-use device based on user input by the user to the pay-per-use device, wherein the pay-per-use device includes a processor, memory, and an input and/or output device, and the processor of the pay-per-use device is configured to collect and store the operational data and to perform a local analysis of the operational data;
collecting and storing user financial data reflecting at least one of payment history or credit data associated with the user;
determining a risk factor based on the operational data and the user financial data, the risk factor being associated with the user;
setting the risk policy based on the determined risk factor, the risk policy being determined from a plurality of available risk policies, the risk policy including measurement criteria for collecting measurement data by the pay-per-use device to assess compliance with the risk policy when monitoring subsequent activity at the pay-per-use device, wherein the risk policy includes sanctions for non-compliance with the risk policy; and
collecting the measurement data during the subsequent activity at the pay-per-use device to determine compliance with the risk policy, wherein the collecting of the measurement data is performed according to the measurement criteria, and the collecting of the measurement data is accomplished at a tamper resistant secure component using the processor of the pay-per-use device to determine compliance with the risk policy,
wherein the measurement criteria for collecting the measurement data at the pay-per-use device are based on both the operational data collected at the pay-per-use device and the user financial data.
analyzing the measurement data at the tamper resistant secure component to determine compliance with the risk policy; and
imposing one or more of the sanctions on the pay-per-use device when the tamper resistant secure component determines non-compliance with the risk policy.
3. The method of claim 1, wherein the user financial data is collected at a server separate from the pay-per-use device.
4. The method of claim 1, wherein collecting the data comprises collecting the operational data at the pay-per-use device and reporting the operational data to a server separate from the pay-per-use device.
5. The method of claim 1, wherein the financial data reflects the payment history including at least a frequency of payments by the user.
6. The method of claim 1, wherein the operational data reflects at least one of a component verification, a clock verification, a previous enforcement action, a provisioning packet activity, and an application usage.
8. The method of claim 1, wherein the measurement criteria specify that the measurement data includes at least one of an operating system heartbeat, a verification of designated files, a verification of a system clock, an operating mode, a frequency of memory access, or a time between provisioning cycles.
9. The method of claim 1, wherein the measurement criteria specify that the measurement data includes:
an operating system heartbeat,
a verification of designated files,
a verification of a system clock,
a frequency of memory access, and
a time between provisioning cycles.
10. The method of claim 1, wherein the measurement criteria specify how often the measurement data are collected at the pay-per-use device.
11. The method according to claim 1, wherein the measurement criteria specify particular measurements that are taken at the pay-per-use device to collect the measurement data.
12. The method according to claim 1, wherein the plurality of available risk policies include different measurement criteria that are associated with different payment histories than the payment history associated with the user.
13. The method according to claim 1, wherein the plurality of available risk policies include different measurement criteria that are associated with different credit data than the credit data associated with the user.
14. The method according to claim 1, the risk factor being further based on customer service data reflecting previous contact by the user with a support center.
15. The method according to claim 1, wherein the measurement criteria specify an operating system heartbeat comprising a signed signal indicating that an approved, valid version of an operating system is executing on the pay-per-use device.
16. The method according to claim 1, wherein setting the risk policy comprises replacing another risk policy that is installed on the pay-per-use device prior to delivery of the pay-per-use device to the user.
17. The method according to claim 1 wherein the measurement data identify whether a peripheral unit of the pay-per-use device is present and operating properly.
18. The method according to claim 1, wherein the tamper resistant secure component comprises a secure memory.
19. The method according to claim 1, wherein collecting the measurement data further comprises analyzing whether the measurement data fall within normal or historical usage patterns.
20. The method according to claim 19, further comprising sending the measurement data to a server that analyzes whether the measurement data fall within normal or historical usage patterns.
US7958029 * Oct 20, 2004 Jun 7, 2011 Thomas Bobich Method for minimizing financial risk for wireless services
US20120137127 Feb 6, 2012 May 31, 2012 Microsoft Corporation Device certificate individualization
JP2004304755A5 Title not available
1 "Achieving Peak Performance: Insights from a Global Survey on Credit Risk and Collections Practices," CGI Group Pamphlet, pp. 1-11 (2002, 2004).
6 "Cyotec—CyoLicence", printed from www.cyotec.com/products/cyoicence on Sep. 7, 2005, (Copyright 2003-2005).
7 "Decision on Grant of a Patent for Invention mailed Apr. 29, 2010", Russian.Application No. 2005131911, 31 pages.
8 "Decision on Rejection mailed Sep. 13, 2010", CN Application No. 200680030846.3, 5 pages.
9 "Decision to Refuse a European Application mailed Feb. 15, 2008", Application No. 05110697.9, 45 pages.
10 "DMOD WorkSpace OEM Unique Features", www.dmod.com/oem-features, Retrieved from the Internet on Jan. 12, 2005,3 pages.
11 "DMOD WorkSpace OEM Unique Features", www.dmod.com/oem—features, Retrieved from the Internet on Jan. 12, 2005,3 pages.
12 "EP Office Action mailed Apr. 5, 2007", Application No. 05110697.9, 5 pages.
13 "EP Office Action mailed Mar. 8, 2012", EP Application No. 05109616.2, 6 pages.
14 "EP Office Action Mailed Nov. 17, 2006", Application No. 05110697.9, 6 pages.
15 "EP Search Report mailed Jan. 2, 2008", EP Application No. 05109616.2, 7 pages.
16 "EP Summons to Attend Oral Proceedings mailed Sep. 27, 2007", Application No. 05110697.9, 7 pages.
17 "Equifax Business Solutions-Manage Your Customers," three pages printed from http://www.equifax.com/sitepages/biz/smallbiz/?sitepage=managecustomers on Oct. 14, 2005.
18 "Equifax Business Solutions—Manage Your Customers," three pages printed from http://www.equifax.com/sitepages/biz/smallbiz/?sitepage=managecustomers on Oct. 14, 2005.
19 "European Search Report mailed Aug. 31, 2011", EP Application No. 05855148.2, 6 pages.
20 "European Search Report mailed Dec. 6, 2010", Application No. EP/05820177, 8 pages.
21 "Examination Report mailed Mar. 5, 2008", EP Application No. 05820090.8, 1 page.
22 "Examiner's First Report mailed Sep. 15, 2009", AU Application No. 2006220489, 2 pages.
23 "Examiner's First Report on Application mailed Jun. 4, 2010", AU Application No. 2005222507, 2 pages.
24 "Extended European Search Report mailed Aug. 13, 2010", EP Application No. 05823253.9, 7 pages.
25 "Extended European Search Report mailed Dec. 21, 2011", EP Application No.05854752.2, 7 pages.
26 "Extended European Search Report mailed Dec. 6, 2010", EP Application No. 05820177.3, 8 pages.
27 "Extended European Search Report mailed Jan. 21, 2010", EP Application No. 05819896.1, 8 pages.
28 "Extended European Search Report mailed Jan. 7, 2011", EP Application No. 05821183.0, 9 pages.
29 "Final Office Action mailed Feb. 7, 2011", U.S. Appl. No. 11/152,214, 15 pages.
34 "Final Office Action mailed May 11, 2010", U.S. Appl. No. 11/152,214, 23 pages.
35 "Final Office Action mailed Nov. 10, 2009", U.S. Appl. No. 11/006,837, 24 pages.
36 "Final Office Action mailed Nov. 18, 2008", U.S. Appl. No. 11/152,214, 16 pages.
37 "Final Office Action mailed Nov. 18, 2010", U.S. Appl. No. 11/006,837, 22 pages.
38 "Final Rejection mailed Jan. 17, 2012", Japan Application No. 2007-552142, 8 pages.
39 "First Office Action mailed Apr. 11, 2008", Chinese Application No. 200580038813.9, 11 pages.
40 "First Office Action mailed Aug. 21, 2009", CN Application No. 200680030846.3, 8 pages.
41 "First Special Feature, Security-oriented Web Application Development, Part 3, Method for Realizing Secure Session Management," N+I Network Guide, Jan. 2004 (vol. 4, No. 1, Serial No. 32), pp. 47-59, Softbank Publishing Inc., Jan. 1, 2004.
42 "Flonix: USB Desktop OS Solutions Provider, http://www.flonix.com", Retrieved from the Internet Jun. 1, 2005, (Copyright 2004),2 pages.
43 "Forward Solutions Unveils Industry's Most Advanced Portable Personal Computing System on USB Flash Memory Device", Proquest, PR Newswire, http://proquest.umi.com/pqdweb?index=20&did=408811931&SrchMode=1&sid= 6&Fmt=3, Retreived from the Internet Feb. 15, 2008,(Sep. 22, 2003),3 pages.
45 "International Search Report and Written Opinion mailed Apr. 25, 2007", Application No. PCT/US05/040965, 5 pages.
46 "International Search Report and Written Opinion mailed Jan. 16, 2006", Application Serial No. PCT/US2006/034622, 6 pages.
47 "International Search Report and Written Opinion mailed Jul. 9, 2008", Application No. PCT/US05/46539, 11 pages.
48 "International Search Report and Written Opinion mailed Jun. 19, 2007", PCT Application No. PCT/US05/46091, 11 pages.
49 "International Search Report and Written Opinion mailed Mar. 21, 2007", Application No. PCT/US05/46223, 10 pages.
50 "International Search Report and Written Opinion mailed Nov. 15, 2004", Application No. PCT/US05/40966, 9 pages.
51 "International Search Report and Written Opinion mailed Nov. 30, 2006", Application Serial No. PCT/US05/40950, 8 pages.
52 "International Search Report and Written Opinion mailed Nov. 8, 2007", Application No. PCT/US05/40967, 5 pages.
53 "International Search Report and Written Opinion mailed Sep. 25, 2006", Application No. PCT/US05/40949, 7 pages.
54 "International Search Report and Written Opinion mailed Sep. 25, 2007", Application No. PCT/US06/12811, 10 pages.
55 "International Search Report and Written Opinion mailed Sep. 8, 2006", Application No. PCT/US05/40942, 20 pages.
56 "International Search Report and Written Opinion", Application Serial No. PCT/US05/40940, 18 pages.
57 "Magic Desktop Automation Suite for the Small and Mid-Sized Business", printed from www.remedy.com/soultions/magic it suite.htm on Sep. 7, 2005, (Copyright 2005), 4 pages.
58 "Migo by PowerHouse Technologies Group, http://www.4migo.com", Retrieved from the Internet Jun. 1, 2005, (Copyright 2003),3 pages.
59 "Non-Final OA Mailed Aug. 30, 2010", U.S. Appl. No. 11/152,214, 12 pages.
60 "Non-Final Office Action mailed Apr. 10, 2009", U.S. Appl. No. 11/006,837, 18 pages.
61 "Non-Final Office Action mailed Apr. 15, 2008", U.S. Appl. No. 11/152,214, 14 pages.
62 "Non-Final Office Action mailed Aug. 24, 2006", U.S. Appl. No. 10/989,122, 20 pages.
63 "Non-Final Office Action mailed Aug. 6, 2008", U.S. Appl. No. 10/989,122, 12 pages.
64 "Non-Final Office Action mailed Feb. 4, 2009", U.S. Appl. No. 10/989,122, 13 pages.
65 "Non-Final Office Action mailed Jan. 16, 2008", U.S. Appl. No. 10/989,122, 10 pages.
66 "Non-Final Office Action mailed Jul. 30, 2009", U.S. Appl. No. 11/152,214, 17 pages.
67 "Non-Final Office Action mailed Mar. 17, 2011", U.S. Appl. No. 11/022,493, 11 pages.
68 "Non-Final Office Action mailed May 12, 2010", U.S. Appl. No. 11/006,837, 27 pages.
69 "Non-Final Office Action mailed May 27, 2009", U.S. Appl. No. 11/022,493, 13 pages.
70 "Non-Final Office Action mailed Oct. 5, 2006", U.S. Appl. No. 11/022,493, 11 pages.
77 "Notice of Allowance mailed Jun. 18, 2009", U.S. Appl. No. 10/989,122, 14 pages.
78 "Notice of Allowance mailed Nov. 13, 2009", MX Application No. PA/a/2005/011088, 2 pages.
95 "Notice on Grant of Patent mailed Oct. 20, 2010", CN Application No.200680006199.2, 4 pages.
107 "Office Action mailed Jul. 4, 2012", Korean Application No. 10-2007-7012294, 2 pages.
111 "Office Action mailed Jun. 26, 2009", Mexican Application No. MX/a/2007/005655, 5 pages.
112 "Office Action mailed Jun. 29, 2009", Mexican Application No. MX/a/2007/005656, 6 pages.
113 "Office Action mailed Jun. 29, 2009", Mexican Application No. MX/a/2007/005657, 2 pages.
114 "Office Action mailed Jun. 8, 2012", Japanese Application No. 2005-301957, 8 pages.
123 "Pace Anti-Piracy Introduction", printed from www.paceap.com/psintro.html on Sep. 7, 2005, (Copyright 2002), 4 pages.
124 "Partial Search Report mailed Jul. 23, 2010", EP Application No. 05821183.0.
125 "Prequalification Using Credit Reports," two pages printed from http://www.credco.com/creditreports/prequalification.htm on Oct. 14, 2005.
126 "Search Report Dated Jan. 11, 2008", EP Application No. 05820090.8, 7 pages.
127 "Second Office Action mailed Dec. 18, 2009", Chinese Application No. 200580038812.4, 24 pages.
128 "TCG Specification Architecture Overview", Revision 1.2, (Apr. 28, 2004),55 pages.
129 "The Fifth Office Action mailed Jul. 14, 2010", CN Application No. 200680006199.2, 6 pages.
130 "The First Office Action mailed Aug. 22, 2008", CN Application No. 200680006199.2, 23 pages.
131 "The First Office Action mailed Oct. 9, 2009", CN Application No. 200580043102.0, 20 pages.
132 "The Fourth Office Action mailed Jan. 8, 2010", CN Application No. 200680006199.2, 10 pages.
133 "The Second Office Action mailed Feb. 20, 2009", CN Application No. 200680006199.2, 9 pages.
134 "The Second Office Action mailed Jul. 3, 2009", CN Application No. 200510113398.0, 7 pages.
135 "The Third Office Action mailed Jun. 5, 2009", CN Application No. 200680006199.2, 7 pages.
136 "Third Office Action mailed Apr. 1, 2010", Chinese Application No. 200580038812.4, 9 pages.
137 "WebServUSB, http://www.webservusb.com", Retrieved from the Internet Jun. 1, 2005, (Copyright 2004), 16 pages.
138 Davida, George I., et al., "UNIX Guardians: Active User Intervention in Data Protection", Aerospace Computer Security Applications Conference, Fourth Dec. 12-16, 1988,6 pages.
139 Eren, H. et al., "Fringe-Effect Capacitive Proximity Sensors for Tamper Proof Enclosures", Proceedings of 2005 Sensors for Industry Conference, (Feb. 2005),pp. 22-25.
140 Extended European Search Report; EP Application No. 05851550.3 of Jul. 5, 2012; 6 pages.
141 Gao, Jerry et al., "Online Advertising-Taxonomy and Engineering Perspectives", http://www.engr.sjsu.edu/gaojerry/report/OnlineAdvertising%20.pdf, (2002),33 pages.
142 Gao, Jerry et al., "Online Advertising—Taxonomy and Engineering Perspectives", http://www.engr.sjsu.edu/gaojerry/report/OnlineAdvertising%20.pdf, (2002),33 pages.
143 Goering, Richard "Web Venture Offers Metered Access to EDA Packages-Startup Winds Clocks By the Hour Tools (E*CAD Will Launch Web Site That Provides Pay-Per-Use and Pay-Per-Hour Access to Range of Chip Design Software)", Electronic Engineering Times, (Nov. 6, 2000),3 pages.
144 Goering, Richard "Web Venture Offers Metered Access to EDA Packages—Startup Winds Clocks By the Hour Tools (E*CAD Will Launch Web Site That Provides Pay-Per-Use and Pay-Per-Hour Access to Range of Chip Design Software)", Electronic Engineering Times, (Nov. 6, 2000),3 pages.
145 International Search Report for PCT/US2006/034622 mailed Jan. 16, 2007.
146 Kwok, Sai H., "Digital Rights Management for the Online Music Business", ACM SlGecom Exhchanges, vol. 3, No. 3, (Aug. 2002), pp. 17-24.
147 Lampson, Butler et al., "Authentication in Distributed Systems: Theory and Practice", ACM Transactions on Computer Systems, v10, 265,(1992),18 pages.
148 Mois, Dan et al., "Reconfiguration Securityfor Hardware Agents in Testing", Automation Quality and Testing Robotics (AQTR), 2010 IEEE International Conference on Volume: 2, (2010), pp. 1-5.
149 * Morales, Tatiana, "Understanding your Credit Score", Apr. 30, 2003. http://www.cbsnews.com/stories/2003/04/29/earlyshow/contributors/raymartin/main551521.shtml.
150 Mufti, Dr. Muid et al., "Design and Implementation of a Secure Mobile IP Protocol", Networking and Communication, INCC 204, International Conference on Jun. 11-13, 2004,5 pages.
151 Nakajima, S.; "Do You Really Know It? Basics of Windows2000/XP, Network, 4th Installment, What Is Logon Like?," Nikkei Windows for IT professionals, Jan. 2004 (No. 82), pp. 116-121, Nikkei Business Publications, Inc., Jan. 1, 2004, ISSN: 1346-8308.
152 Ooi, Joo G., et al., "A Proof of Concept on Defending Cold Boot Attack", Quality Electronic Design, ASQED 2009, 1st Asia Symposium, (2009), pp. 330-335.
153 Oshiba, Takashi et al., "Personalized Advertisement-Duration Control for Streaming Delivery", ACM Multimedia, (2002),8 pages.
154 Oshiba, Takashi et al., "Personalized Advertisement—Duration Control for Streaming Delivery", ACM Multimedia, (2002),8 pages.
155 Qiao, Daji et al., "MiSer: An Optimal Low-Energy Transmission Strategy for IEEE 802.11 a/h", obtained from ACM, (Sep. 2003),pp. 161-175.
156 Schneier, B. "Applied Cryptography, Second Edition: Protocols, Algorithms, and Source Code in C (cloth)", (Jan. 1, 1996),13 pages.
157 U.S. Appl. No. 10/988,907, Including O/A dated Dec. 12, 2011.
158 U.S. Appl. No. 11/018,095, Including NOA dated Dec. 30 2011.
159 U.S. Appl. No. 11/018,095, Including O/As dated Mar. 15, 2010; Jul. 8, 2010; Dec. 27, 2010; Jun. 9, 2011; and Sep. 27, 2011.
160 U.S. Appl. No. 11/022,493, Including NOA dated Dec. 29, 2011.
161 U.S. Appl. No. 11/612,436, Including Notice of Allowance mailed Mar. 1, 2011 and OA dated Sep. 17, 2010.
162 U.S. Appl. No. 13,367,198, Including any future O/As.
163 Utagawa, Mari et al., "Creation of Card Application by IC Card OS ‘Multos’ Which Can Rewrite Application", Interface, vol. 29, No. 3, ISSN: 0387-9569, CQ Publishing Co. Ltd., (Mar. 1, 2003), pp. 46-55.
164 Written Opinion for PCT/US2006/034622 mailed Jan. 16, 2007.
165 Yue, Wei T., et al., "The Reward Based Online Shopping Community", Routledge, vol. 10, No. 4, (Oct. 1, 2000),2 pages.
166 Zemao, Chen et al., "A Malicious Code Immune Model Based on Program Encryption", IEEE-Wireless Communication, Networking and Mobile Computing, WICOM '08, 4th International Conference on Oct. 12-14, 2008,5 pages.
167 Zemao, Chen et al., "A Malicious Code Immune Model Based on Program Encryption", IEEE—Wireless Communication, Networking and Mobile Computing, WICOM '08, 4th International Conference on Oct. 12-14, 2008,5 pages.
168 Zhang, Kai et al., "Reconfigurable Security Protection FPGA and Embedded Soft-Core Technology", Computer Design and Applications (ICCDA), 2010 International Conference on Volume, (2010), pp. V5-540-V5-544.
U.S. Classification 726/5, 705/17, 726/27, 726/26
International Classification G06Q40/08, G06F21/00
Cooperative Classification G06Q20/26, G06Q20/4016, G06Q30/04, G06Q30/06, G06Q40/02, G06Q40/00
European Classification G06Q40/02, G06Q30/06, G06Q30/04