18514698. IDENTITY BREACH NOTIFICATION AND REMEDIATION simplified abstract (Capital One Services, LLC)

IDENTITY BREACH NOTIFICATION AND REMEDIATION

Organization Name

Capital One Services, LLC

Inventor(s)

Michelle Olenoski of Washington DC (US)

Clayton Johnson of Edgewood MD (US)

Jeffrey Brown of Reston VA (US)

Venkata Ph Kolli of Rockville MD (US)

IDENTITY BREACH NOTIFICATION AND REMEDIATION - A simplified explanation of the abstract

This abstract first appeared for US patent application 18514698 titled 'IDENTITY BREACH NOTIFICATION AND REMEDIATION

Simplified Explanation

The present disclosure describes a method for enhancing security in a networked computing environment by monitoring user activity data and notifying users of potential data breaches.

• Receiving a registration request with a user identifier and user credentials from a user device.
• Accessing online accounts associated with the user to retrieve user activity data.
• Analyzing the user activity data to identify merchants associated with the user.
• Storing a mapping between the user and the merchants in a database.
• Receiving notifications from a monitoring service about data breaches experienced by merchants.
• Sending notifications to users when a merchant associated with them has experienced a data breach.

Potential Applications

This technology could be applied in various industries such as banking, e-commerce, and social media platforms to enhance security measures for user accounts.

Problems Solved

This technology addresses the issue of data breaches by proactively notifying users when a merchant they are associated with has experienced a security incident, allowing them to take necessary precautions.

Benefits

- Improved security for user accounts - Timely notifications of potential data breaches - Enhanced user trust and confidence in online services

Potential Commercial Applications

- Security software companies - Financial institutions - E-commerce platforms

Possible Prior Art

One possible prior art could be the use of monitoring services to detect data breaches in online accounts and notify users, but the specific method described in this disclosure may offer unique features or improvements.

How does the method ensure the privacy and confidentiality of user data during the analysis process?

The abstract does not provide details on how user data is protected and secured during the analysis and storage process.

What measures are in place to prevent false alarms or unnecessary notifications to users?

It is not clear from the abstract how the system distinguishes between actual data breaches and false alarms, which could potentially lead to user confusion or alarm.

Original Abstract Submitted

In one aspect, the present disclosure relates to a method for improved security in a networked computing environment, the method comprising: receiving, from a user device, a registration request comprising a user identifier for a user; receiving, from the user device, user credentials to access one or more online accounts associated with the user; accessing the one or more online accounts to retrieve user activity data for the user; analyzing the retrieved user activity data to determine one or more merchants associated with the user; storing, in a database coupled to a server device, a mapping between the user and the one or more merchants; receiving, from a monitoring service, an indication that a first merchant of the one or more merchants has experienced a data breach; and sending a notification to the user in response to determining that the first merchant has experienced a data breach.