PATENT CLAIM ANALYSIS

Application Number: 16363596
Application Type: Utility
Filing Date: 2019-03
Publication Date: 2019-07
Patent Classification: ["726", "023000"]

Abstract:
A new approach is proposed that contemplates systems and methods to support email account takeover detection and remediation by utilizing an artificial intelligence (AI) engine/classifier that detects and remediates such attacks in real time. The AI engine is configured to continuously monitor and identify communication patterns of a user on an electronic messaging system of an entity via application programming interface (API) calls. The AI engine is then configured to collect and utilize a variety of features and/or signals from an email sent from an internal email account of the entity. The AI engine combines these signals to automatically detect whether the email account has been compromised by an external attacker and alert the individual user of the account and/or a system administrator accordingly in real time. The AI engine further enables the parties to remediate the effects of the compromised email account by performing one or more remediating actions.

Claim (Index 1):
A system to support email account takeover detection and remediation, comprising:\n an artificial intelligence (AI) engine running on a host, which in operation, is configured to\n collect an internal electronic message sent from an email account of a user in an entity to another user in the entity automatically in real time via an application programming interface (API) call to an electronic messaging system of the entity; \n analyze the collected electronic message to extract a plurality of features and/or signals from the electronic message to determine if it is malicious for email account takeover detection; \n determine whether the email account has been compromised by an email account takeover attack based on the detected features and/or signals in the email; \n search for, delete, and quarantine electronic messages sent from the email account in real time if it is determined that the email account has been compromised by the email account takeover attack; \n notify a user, one or more intended recipients of the electronic messages and/or an administrator of the electronic messaging system of the email account takeover attack and enable them to take one or more remediating actions in response to the email account takeover attack.

Metadata:
- Claim Count in Document: 22.0
- Percentile: 99.0
- Lexical Diversity: 1.72826
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14709460', '14942851', '14185796', '12907721', '14133567']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2625334664725606
- 35 USC 102 Novelty (BERT): 0.4695808981677807
- Combined Prediction Score: 0.2832382096420826
- Mean Citation Score: 169.12446599999996
- Max Citation Score: 171.6766
- Similarity Product: 130.67852090537548

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test