Back to results
US 12,719,873 B2Granted
System and method for handling user requests for web services
AssigneeCharles Schwab & Co., Inc.
InventorSteven Hadler
Life of this patent
Estimating the term…
Abstract
A system and method detects and handles replay attacks using counters maintained for each of several different periods for various values of IP addresses and browser description attributes encountered.
Claims20
A computing device, comprising:
- memory storing computer readable instructions;
- and
- at least one processor configured to execute the computer readable instructions to cause the computing device to,
- receive a login attempt associated with at least one user,
- determine at least one pair of counters from a plurality of pairs of counters based on at least one login attribute corresponding to the login attempt, each pair of counters of the at least one pair of counters including a first counter associated with the at least one login attribute corresponding to successful login attempts associated with the at least one user, and a second counter associated with the at least one login attribute corresponding to unsuccessful login attempts associated with the at least one user,
- compute a replay attack score associated with the login attempt based on the determined at least one pair of counters, the replay attack score indicating whether the login attempt used stolen credentials of the at least one user, and
- allow access to the at least one user based on the computed replay attack score.
4 more elements
A non-transitory computer readable medium having computer readable instructions stored thereon, which when executed by at least one processor of a computing device causes the computing device to:
- receive a login attempt associated with at least one user;
- determine at least one pair of counters from a plurality of pairs of counters based on at least one login attribute corresponding to the login attempt, each pair of counters of the at least one pair of counters including a first counter associated with the at least one login attribute corresponding to successful login attempts associated with the at least one user, and a second counter associated with the at least one login attribute corresponding to unsuccessful login attempts associated with the at least one user;
- compute a replay attack score associated with the login attempt based on the determined at least one pair of counters, the replay attack score indicating whether the login attempt used stolen credentials of the at least one user;
- and
- allow access to the at least one user based on the computed replay attack score.
2 more elements
A method of operating a computing device, comprising:
- receiving a login attempt associated with at least one user;
- determining at least one pair of counters from a plurality of pairs of counters based on at least one login attribute corresponding to the login attempt, each pair of counters of the at least one pair of counters including a first counter associated with the at least one login attribute corresponding to successful login attempts associated with the at least one user, and a second counter associated with the at least one login attribute corresponding to unsuccessful login attempts associated with the at least one user;
- computing a replay attack score associated with the login attempt based on the determined at least one pair of counters, the replay attack score indicating whether the login attempt used stolen credentials of the at least one user;
- and
- allowing access to the at least one user based on the computed replay attack score.
2 more elements
Dependencies are inferred from the claim text.