# US 12,113,794 B2 · System and method for controlling login access to computer resource assets > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,113,794 B2 - Document ID: US12113794B2 - Status: Granted - Kind: B2 - Application number: 17/455,311 - Filed: 2021-11-17 - Published: 2023-05-18 - Granted: 2024-10-08 - Earliest claimed: 2021-11-17 - Assignees: Saudi Arabian Oil Company - Applicants: Saudi Arabian Oil Company - Inventors: Mohammed Alotaibi; Sharjeel Anjum - Web page: https://patentgrep.com/patent/US12113794B2 ## CPC - H04L 63/102: {Entity profiles} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system and method control login access of computer resource assets. The system comprises a computer resource asset and a gateway sub-system. The gateway sub-system has a processor to monitor N login failure conditions of a user, and to control access of the computer resource asset by the user depending on the user meeting the N login failure conditions. The method comprises storing predetermined login information associated with a user, receiving inputted login information from the user at a communication interface, evaluating the inputted login information by a processor configured by software therein, determining a matching or not matching of the predetermined login information, monitoring N login failure conditions of the user, in which N is greater than 1, and controlling access of a computer resource asset by the user depending on the user meeting the N login failure conditions. A method comprises steps performed during operation of the system. ## Claims ### Claim 1 A system, comprising: a computer resource asset; and a gateway sub-system having a processor configured by software therein to monitor at least one login attempt by a user, up to N progressive login attempts being N login failure conditions of the user, in which N is greater than 1, and to control access of the computer resource asset by the user depending on the user meeting the N login failure conditions, wherein the N login failure conditions include: a first login failure condition of the user being L1 login attempts by the user within T1 seconds without success; at least an Nth login failure condition of the user subsequent to and distinct from the first login failure condition, wherein the at least an Nth login failure condition consists of LN login attempts by the user within TN seconds without success, wherein in the case that the gateway sub-system detects a successful login attempt by the user at any time during the at least one login attempt, the gateway sub-system controls access by granting the user access to the computer resource asset, and wherein in the case that the gateway sub-system detects that the user meets all of the N login failure conditions during the N progressive login attempts, the gateway sub-system controls access by blocking the user from accessing the computer resource asset. ### Claim 2 (depends on 1) The system of claim 1, wherein the first login failure condition includes 5 login attempts by the user within 15 seconds without success. ### Claim 3 (depends on 2) The system of claim 2, wherein the Nth login failure conditions include: a second login failure condition being 7 login attempts by the user within 30 seconds without success. ### Claim 4 (depends on 3) The system of claim 3, wherein the Nth login failure conditions include: a third login failure condition being 8 login attempts by the user within 45 seconds without success. ### Claim 5 (depends on 4) The system of claim 4, wherein the Nth login failure conditions include: a fourth login failure condition being 10 login attempts by the user within 60 seconds without success. ### Claim 6 (depends on 1) The system of claim 1, wherein each of the N login failure conditions include a predetermined number LN of login attempts by the user over a predetermined period of time TN. ### Claim 7 (depends on 1) The system of claim 1, wherein in the case that the gateway sub-system blocks the user, the gateway sub-system sends an alert of the blocking to an administrator. ### Claim 8 (depends on 1) The system of claim 1, wherein LN is greater than L1. ### Claim 9 (depends on 1) The system of claim 1, wherein TN is greater than T1. ### Claim 10 A gateway sub-system, comprising: a memory configured to store predetermined login information associated with a user; a communication interface configured to receive inputted login information from the user; and a processor configured by software therein to evaluate the inputted login information as matching or not matching the predetermined login information, to monitor at least one login attempt by the user, up to N progressive login attempts being N login failure conditions of the user from the matching or not matching evaluation, in which N is greater than 1, and to control access of a computer resource asset by the user depending on the user meeting the N login failure conditions, wherein the N login failure conditions include: a first login failure condition of the user being L1 login attempts by the user within T1 seconds without success; at least an Nth login failure condition of the user subsequent to and distinct from the first login failure condition, wherein the at least an Nth login failure condition consists of LN login attempts by the user within TN seconds without success, wherein in the case that the gateway sub-system detects a successful login attempt by the user at any time during the at least one login attempt, the gateway sub-system controls access by granting the user access to the computer resource asset, and wherein in the case that the gateway sub-system detects that the user meets all of the N login failure conditions during the N progressive login attempts, the gateway sub-system controls access by blocking the user from accessing the computer resource asset. ### Claim 11 (depends on 10) The gateway sub-system of claim 10, wherein the first login failure condition includes 5 login attempts by the user within 15 seconds without success. ### Claim 12 (depends on 11) The gateway sub-system of claim 11, wherein the Nth login failure conditions include: a second login failure condition being 7 login attempts by the user within 30 seconds without success. ### Claim 13 (depends on 12) The gateway sub-system of claim 12, wherein the Nth login failure conditions include: a third login failure condition being 8 login attempts by the user within 45 seconds without success. ### Claim 14 (depends on 13) The gateway sub-system of claim 13, wherein the Nth login failure conditions include: a fourth login failure condition being 10 login attempts by the user within 60 seconds without success. ### Claim 15 A method, comprising: storing, in a memory, predetermined login information associated with a user; receiving inputted login information from the user at a communication interface; evaluating the inputted login information by a processor configured by software therein to be at least one login attempt by the user, up to N progressive login attempts, in which N is greater than 1; determining a matching or not matching of the inputted login information with the predetermined login information; monitoring N login failure conditions of the user from the matching or not matching determination, in which N is greater than 1; and controlling access of a computer resource asset by the user depending on the user meeting the N login failure conditions, wherein the controlling includes: responsive to detecting a successful login attempt by the user at any time during the at least one login attempt, granting the user access to the computer resource asset, and responsive to detecting that the user meets any of the N login failure conditions during the N progressive login attempts, blocking the user from accessing the computer resource asset, wherein the N login failure conditions of the user include: a first login failure condition of the user being 5 login attempts by the user within 15 seconds without success; a second failure condition of the user subsequent to and distinct from the first login failure condition, wherein the second failure condition consists of 7 login attempts by the user within 30 seconds without success; a third login failure condition of the user subsequent to and distinct from the second login failure condition, wherein the third failure condition consists of 8 login attempts by the user within 45 seconds without success; and a fourth login failure condition of the user subsequent to and distinct from the third login failure condition, wherein the fourth failure condition consists of 10 login attempts by the user within 60 seconds without success. ### Claim 16 (depends on 15) The method of claim 15, further comprising: wherein in the case that the processor blocks the user, sending an alert of the blocking through the communication interface to an administrator.