Back to results
US 10,277,623 B2Granted
Method of detection of comptromised accounts
AssigneeAppBugs, INC.
InventorRui Wang
Life of this patent
Estimating the term…
Abstract
Processes and systems described herein enable a computing device to detect compromised accounts. The computing device may obtain a user credential including a user ID, and further modify the user ID. The computing device may transmit the modified user ID to a service including a database related to compromised accounts, receive a record corresponding to the modified user ID that includes information of a compromised account, and further determine whether an account of the user ID is compromised based on the received record.
Claims12
A method for detection of a compromised user accounts by brute-force attacks, the method comprising:
- receiving, by one or more processors of a computing device from a user device, a user credential that comprises a user identifier (ID) and a password that are associated with a user;
- anonymizing, by the one or more processors, the user ID by obscuring one or more letters of the user ID without altering length of the user ID;
- transmitting, by the one or more processors, the anonymized user ID to a server associated with the detection of the compromised user accounts by the brute-force attacks;
- receiving, by the one or more processors from the server, a record corresponding the anonymized user ID, the record comprising:
- an ID comprising unobscured letters of the user ID,
- a hashed password corresponding to the ID,
- one or more hash algorithms associated with the hashed password, and
- determining, by the one or more processors, whether the ID of the record matches the user ID;
- in response to a determination that the ID of the record matches the user ID, performing a hash operation on the password associated with the user using the one or more hash algorithms of the received record to generate a hashed password corresponding to the user ID;
- determining, by the one or more processors, whether the generated hashed password corresponding to the user ID matches the password corresponding to the ID;
- and
- in response to a determination that the generated hashed password matches the password associated with the ID, generating, by the one or more processors, a notification based on the user credential, the notification indicating that an account associated with the user credential is compromised.
9 more elements
A method for detection of compromised user accounts, the method comprising:
- obtaining, by one more processors of a computing device, a user credential comprising a user ID;
- modifying, by one or more processors, the user ID to anonymize the user ID, by obscuring one or more letters of the user ID without altering length of the user ID;
- transmitting, by the one or more processors, the modified user ID to a computing device associated with a security service provider;
- receiving, by the one or more processors from the computing device associated with the security service provider, a record corresponding to the modified user ID that comprises information of a compromised account;
- the record comprising:
- an ID comprising unobscured letters of the user ID, a hashed password corresponding to the ID, one or more hash algorithms associated with the hashed password;
- and determining, by the one or more processors, whether an account of the user ID is compromised based on the received record,
- in response to the determination that an account of the user ID is compromised based on the received record, performing a hash operation on the password associated with the user using the one or more hash algorithms of the received record to generate a hashed password corresponding to the user ID;
- determining, by the one or more processors, whether the generated hashed password corresponding to the user ID matches the password corresponding to the ID;
- and
- in response to a determination that the generated hashed password matches the password associated with the ID, generating, by the one or more processors, a notification based on the user credential, the notification indicating that an account associated with the user credential is compromised.
8 more elements
Dependencies are inferred from the claim text.