Enhanced computer intrusion detection methods and systems

US7900257B2 · kind B2 · utility

Assignee

• Microsoft Corporation · US

Inventors

• Bhalchandra Pandit · Redmond, US
• Praerit Garg · Kirkland, US
• Richard B. Ward · Redmond, US
• Paul J. Leach · Seattle, US
• Scott A. Field · Redmond, US
• Robert P. Reichel · Redmond, US
• John Brezak · Woodinville, US

Key dates

• Filing date: Jun 1, 2009
• Grant date: Mar 1, 2011
• Expiry date: Jun 18, 2029

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2101
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Improved intrusion detection and/or tracking methods and systems are provided for use across various computing devices and networks. Certain methods, for example, form a substantially unique audit identifier during each authentication/logon process. One method includes identifying one or more substantially unique parameters that are associated with the authentication/logon process and encrypting them to form at least one audit identifier that can then be generated and logged by each device involved in the authentication/logon process. The resulting audit log file can then be audited along with similar audit log files from other devices to track a user across multiple platforms.