System and Method for Risk Assessment of Login Transactions Through Password Analysis
AssigneeComputer Associates Think, Inc.
InventorVenkata Babji Sama
Life of this patent
Estimating the term…
Abstract
A system and method is provided for determining a risk associated with a login transaction. A password received during the login attempt and determination is made regarding whether the received password is derived form user information. A risk is determined based on a determination that the received password is derived from the user information.
Claims19
A method of determining a risk associated with a login transaction, the method comprising:
- receiving, by a processor, a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource;
- during authentication of the login transaction based on the received password:
- a) retrieving, by the processor, a valid password associated with the user;
- b) determining, by the processor, whether the received password matches the valid password;
- and
- c) in response to a determination that the received password does not match the valid password:
- retrieving, by the processor, user information associated with the user;
- determining, by the processor, whether the received password is derived from the user information;
- and
- determining, by the processor, a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction.
A system of determining a risk associated with a login transaction, the system comprising:
- one or more processors configured to:
- receive a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource;
- during authentication of the login transaction based on the received password:
- a) retrieve a valid password associated with the user;
- b) determine whether the received password matches the valid password;
- and
- c) in response to a determination that the received password does not match the valid password:
- retrieve user information associated with the user;
- determine whether the received password is derived from the user information;
- and
- determine a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction.
A tangible computer-readable storage medium having one or more computer-readable instructions thereon which when executed by one or more processors cause the one or more processors to:
- receive a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource;
- during authentication of the login transaction based on the received password:
- a) retrieve a valid password associated with the user;
- b) determine whether the received password matches the valid password;
- and
- c) in response to a determination that the received password does not match the valid password:
- retrieve user information associated with the user;
- determine whether the received password is derived from the user information;
- and
- determine a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction.
Dependencies are inferred from the claim text.