/Patent Tracker
MicrosoftGranted patentSecurity & privacyInterest 6/10

Microsoft patents AI tool that finds missing security rules in your system

This patent describes a system that uses an AI model to compare your current security settings against a standard template to find missing protections. It then creates a simple summary of these gaps and explains how adding them would improve your security before applying the changes.

Why it mattersIt helps IT teams quickly understand and fix security weaknesses without manually reviewing complex technical lists.

In the filing’s own words

Techniques are described herein that are capable of using an AI model to summarize a gap in a security policy for security feature enforcement. A determination is made that a subset of reference security features is absent from enforced security features that are enforced in a system. The reference security features define a security policy template. The enforced security features define a security policy. A summary of the subset of the reference security features is generated using an AI model. The summary and an explanation may be caused to be presented via a user interface. The explanation indicates that the subset of the reference security features is absent from the enforced security features. The subset of the reference security features is caused to be enforced in the system by redefining the security policy, which comprises adding the subset of the reference security features to the enforced security features.

What exactly they claim (claim 1)

1. A system comprising: a processor system; and a memory that stores computer-executable instructions that are executable by the processor system to at least: determine that a subset of a plurality of reference security features is absent from a plurality of enforced security features, which are enforced in a system, using an artificial intelligence model by providing a security policy and a security policy template as first inputs to the artificial intelligence model, the plurality of reference security features defining the security policy template, the plurality of enforced security features defining the security policy; generate a summary of the subset of the plurality of reference security features using an artificial intelligence model by providing a representation of the subset of the plurality of reference security features as a second input to the artificial intelligence model; determine extents to which identified reference security features, which are comprised in the subset of the plurality of reference security features, are to increase security of the system; cause the summary and an explanation to be presented via a user interface, the explanation indicating that the subset of the plurality of reference security features is absent from the plurality of enforced security features and indicating a mapping of the identified reference security features to the extents; and cause the subset of the plurality of reference security features to be enforced in the system by redefining the security policy, wherein redefining the security policy comprises adding the subset of the plurality of reference security features to the plurality of enforced security features.

Facts

Company
Microsoft (Microsoft Technology Licensing, LLC)
Official title
Security feature enforcement using AI-based security policy gap summarization
Patent number
US12764167B2
Application number
19065615
Filed
Feb 27, 2025
Granted
Oct 13, 2026
Inventors
7
Claims
20

Classified under

H04L 63/20 Electricity & electronicsH04L 41/16 Electricity & electronicsH04L 63/083 Electricity & electronicsH04L 2463/082 Electricity & electronics
Read the full filing (official PDF) ↗ Open in the Patent Tracker

More from Microsoft in Security & privacy

Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.