PATENT CLAIM ANALYSIS

Application Number: 15885819
Application Type: Utility
Filing Date: 2018-02
Publication Date: 2018-06
Patent Classification: ["726", "023000"]

Abstract:
Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a cyber-attacker. A user utilizes a desktop computer, a laptop computer, a smartphone, a tablet, or other electronic device, to interact with a banking website or application, a retailer website or application, or other computerized service. Input-unit interactions are monitored, logged, and analyzed. Based on several types of analysis of the input-unit interactions, a score is generated to reflect fraud-relatedness or attack-relatedness of the input-unit interactions. Based on the score, the system estimates or determines whether the user is an attacker, and initiates attach-mitigation operations or fraud-mitigation operations.

Claim (Index 1):
A process comprising:\n (a) monitoring input-unit interactions of a user, who utilizes one or more input units of an electronic device to fill-out data in a fillable form of a computerized service; (b1) for a batch of input-unit interactions of said user, determining a first score-component which reflects whether said user utilized keyboard shortcuts for data entry and for in-page navigation; (b2) for said batch of input-unit interactions of said user, determining a second score-component which reflects an estimated level of computer-savviness of said user; (b3) for said batch of input-unit interactions of said user, determining a third score-component which reflects an estimated level of familiarity of said user with data that was entered via said input-unit interactions; (b4) for said batch of input-unit interactions of said user, determining a fourth score-component which reflects an estimated level of familiarity of said user with a Graphical User Interface (GUI) of said computerized service; (b5) for said batch of input-unit interactions of said user, determining a fifth score-component which indicates whether said user exhibits primed behavior with regard to data entry via a particular GUI element; (b6) for said batch of input-unit interactions of said user, detecting a particular typing rhythm of said user, and determining a sixth score-component which indicates whether said particular typing rhythm is sufficiently similar to one or more typing rhythms that are pre-defined as typing rhythms of attackers; (c) determining an attack-relatedness score, based on a weighted formula that takes into account at least said first score-component, said second score-component, said third score-component, said fourth score-component, said fifth score-component, and said sixth score-component; (d) if said attack-relatedness score is greater than a particular threshold value, then: determining that said input-unit interactions are part of an attack, and initiating one or more mitigation operations.

Metadata:
- Claim Count in Document: 1.0
- Percentile: 88.0
- Lexical Diversity: 1.96875
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14736287', '15840035', '14675765', '15194593', '15465623']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2905368511358324
- 35 USC 102 Novelty (BERT): 0.4847606314349503
- Combined Prediction Score: 0.3099592291657442
- Mean Citation Score: 201.42724400000003
- Max Citation Score: 213.0786
- Similarity Product: 154.230355583632

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test