System and method for providing multi-class processing of login requests

A login method comprising

• processing a login attempt to determine whether the login attempt is successful, said login attempt being successful if permissible and submitted with a valid user name and password combination;
• providing a first-class login token if the login attempt is successful, said first-class login token permitting a predefined number of unsuccessful login attempts without imposing more than a first time delay between each of said unsuccessful login attempts;
• providing a second-class login token if the login attempt is unsuccessful and a login token submitted with the login request is second-class, wherein a subsequent login attempt made with said second-class login token is not permissible if submitted prior to expiration of a second time delay, said second time delay exceeding said first time delay;
• providing the second-class login token if the login attempt is unsuccessful and is the last of a series of unsuccessful login attempts associated with a first-class login token, said series including more than the predefined number of unsuccessful login attempts;
• and
• providing the second-class login token if a login token is not submitted with the login attempt, said login attempt not being permissible.

A computer program product for use in conjunction with a computer system, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer program mechanism comprising:

• instructions for processing a login attempt to determine whether the login attempt is successful, said login attempt being successful if permissible and submitted with a valid user name and password combination;
• instructions for providing a first-class login token if the login attempt is successful, said first-class login token permitting a predefined number of unsuccessful login attempts without imposing more than a first time delay between each of said unsuccessful login attempts;
• instructions for providing a second-class login token if the login attempt is unsuccessful and a login token submitted with the login request is second-class, wherein a subsequent login attempt made with said second-class login token is not permissible if submitted prior to expiration of a second time delay, said second time delay exceeding said first time delay;
• instructions for providing the second-class login token if the login attempt is unsuccessful and is the last of a series of unsuccessful login attempts associated with a first-class login token, said series including more than the predefined number of unsuccessful login attempts;
• and
• instructions for providing the second-class login token if a login token is not submitted with the login attempt, said login attempt not being permissible.

A computer system for processing login requests, comprising:

• a first-class login server and a second-class login server, said first-class login server and said second-class login server each including a storage unit and a processor, said storage unit configured to store login information, said processor configured to process login requests with reference to said login information;
• the first-class login server and the second-class login server each configured to process a login attempt to determine whether the login attempt is successful, said login attempt being successful if permissible and submitted with a valid user name and password combination;
• the first-class login server configured to process login attempts made with a first-class login token and the second-class login server configured to process login attempts made with a second-class login token;
• the first-class login server and the second-class login server each further configured to provide a first-class login token if the login attempt is successful, said first-class login token permitting a predefined number of unsuccessful login attempts without imposing more than a first time delay between each of said unsuccessful login attempts;
• the second-class login server further configured to provide a second-class login token if the login attempt is unsuccessful, wherein a subsequent login attempt made with said second-class login token is impermissible if submitted prior to expiration of a second time delay, said second time delay exceeding said first time delay;
• and
• the first-class login server further configured to provide a second-class login token if the login attempt is unsuccessful and the login attempt is the last of a series of unsuccessful login attempts associated with a specific first-class login token, said series including more than the predefined number of unsuccessful login attempts.