Microsoft patents security checks that read your emails to verify actions
This patent describes a system that checks if a user's action in a company is legitimate by looking at their past messages. It uses AI to see if the user talked to colleagues about the task or if someone else explained why the action was needed. If the messages match the action, the system allows it to proceed; otherwise, it triggers a security response.
In the filing’s own words
Techniques are described herein that are capable of performing a security action based on a communication-based analysis. A security event, which is triggered by an operation performed by a user in an organization, is detected. A security analysis result is generated by determining whether a communication history of the user includes (1) a communication from the user that initiates an interaction with another user in the organization and/or a communication that is addressed specifically to the user from another user in the organization, (2) a communication from the user that references the operation, and/or (3) a communication that provides an explanation of a purpose of the operation that satisfies an explanation criterion. In response to the security event, a security action is performed with regard to the operation as a result of the security analysis result satisfying a security criterion.
What exactly they claim (claim 1)
1. A system comprising: a processor system; and a memory that stores computer-executable instructions that are executable by the processor system to at least: detect a security event triggered by an operation that is performed by a user in an organization; generate a first security analysis result by determining whether a communication history of the user comprises at least one of a first communication from the user that initiates an interaction with another user in the organization or a second communication that is addressed specifically to the user from another user in the organization; generate a second security analysis result by determining whether the communication history of the user comprises a third communication from the user that references the operation; generate a third security analysis result, which comprises determining whether the communication history of the user comprises a fourth communication that provides an explanation of a purpose of the operation that satisfies an explanation criterion, using an artificial intelligence (AI) model; and in response to the security event, trigger execution of an instruction, which causes a security action to be performed with regard to the operation as a result of a combination of the first, second, and third security analysis results satisfying a security criterion.
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- Security action based on communication-based analysis
- Patent number
- US12744796B2
- Application number
- 18908220
- Filed
- Oct 7, 2024
- Granted
- Sep 22, 2026
- Inventors
- 3
- Claims
- 20
Classified under
H04L 63/1416 Electricity & electronicsH04L 41/16 Electricity & electronicsH04L 63/1433 Electricity & electronicsMore from Microsoft in Security & privacy
- Microsoft patents system to call 911 for others during video calls Sep 22, 2026
- Microsoft patents system to block fake code suggested by AI Sep 15, 2026
- Microsoft patents one-way data flow to block network attacks Sep 10, 2026
- Microsoft patents voice coding that hides speaker identity for secure calls Sep 17, 2026
- Microsoft patents security checks for AI chats using user and model profiles Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.