# US 2013/0254875 A1 · System and Method for Risk Assessment of Login Transactions Through Password Analysis > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2013/0254875 A1 - Document ID: US20130254875A1 - Status: Published application - Kind: A1 - Application number: 13/428,210 - Filed: 2012-03-23 - Published: 2013-09-26 - Earliest claimed: 2012-03-23 - Assignees: Computer Associates Think, Inc. - Inventors: Venkata Babji Sama - Web page: https://patentgrep.com/patent/US20130254875A1 ## CPC - G06F 21/31: User authentication - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system and method is provided for determining a risk associated with a login transaction. A password received during the login attempt and determination is made regarding whether the received password is derived form user information. A risk is determined based on a determination that the received password is derived from the user information. ## Claims ### Claim 1 A method of determining a risk associated with a login transaction, the method comprising: receiving, by a processor, a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource; during authentication of the login transaction based on the received password: a) retrieving, by the processor, a valid password associated with the user; b) determining, by the processor, whether the received password matches the valid password; and c) in response to a determination that the received password does not match the valid password: retrieving, by the processor, user information associated with the user; determining, by the processor, whether the received password is derived from the user information; and determining, by the processor, a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction. ### Claim 2 (depends on 1) The method of claim 1, wherein determining whether the received password is derived from the user information further comprises: determining whether the received password partially matches at least one word associated with the user information. ### Claim 3 (depends on 1) The method of claim 1, wherein determining whether the received password is derived from the user information further comprises: determining whether the received password is phonetically similar to at least one word associated with the user information. ### Claim 4 (depends on 1) The method of claim 1, wherein determining whether the received password is derived from the user information further comprises further comprises: determining whether the received password and at least one word associated with the user information are associated with a same class of words. ### Claim 5 (depends on 1) The method of claim 1, determining whether the received password is derived from the user information further comprises: determining whether the received password and at least one word associated with the user information have a same meaning. ### Claim 6 (depends on 1) The method of claim 1, wherein the user information comprises one or more of users' personal information, users' interests, or users' previously used passwords. ### Claim 7 A system of determining a risk associated with a login transaction, the system comprising: one or more processors configured to: receive a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource; during authentication of the login transaction based on the received password: a) retrieve a valid password associated with the user; b) determine whether the received password matches the valid password; and c) in response to a determination that the received password does not match the valid password: retrieve user information associated with the user; determine whether the received password is derived from the user information; and determine a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction. ### Claim 8 (depends on 7) The system of claim 7, wherein the one or more processors configured to determine whether the received password is derived from the user information are further configured to: determine whether the received password partially matches at least one word associated with the user information. ### Claim 9 (depends on 7) The system of claim 7, wherein the one or more processors configured to determine whether the received password is derived from the user information are further configured to: determine whether the received password is phonetically similar to at least one word associated with the user information. ### Claim 10 (depends on 7) The system of claim 7, wherein the one or more processors configured to determine whether the received password is derived from the user information are further configured to: determine whether the received password and at least one word associated with the user information are associated with a same class of words. ### Claim 11 (depends on 7) The system of claim 7, wherein the one or more processors configured to determine whether the received password is derived from the user information are further configured to: determine whether the received password and at least one word associated with the user information have a same meaning. ### Claim 12 (depends on 7) The system of claim 7, wherein the user information comprises one or more of users' personal information, users' interests, or users' previously used passwords. ### Claim 13 A tangible computer-readable storage medium having one or more computer-readable instructions thereon which when executed by one or more processors cause the one or more processors to: receive a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource; during authentication of the login transaction based on the received password: a) retrieve a valid password associated with the user; b) determine whether the received password matches the valid password; and c) in response to a determination that the received password does not match the valid password: retrieve user information associated with the user; determine whether the received password is derived from the user information; and determine a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction. ### Claim 14 (depends on 13) The tangible computer-readable storage medium of claim 13, wherein the instructions causing the processors to determine whether the received password is derived from the user information further cause the one processors to: determine whether the received password partially matches at least one word associated with the user information. ### Claim 15 (depends on 13) The tangible computer-readable storage medium of claim 13, wherein the instructions causing the processors to determine whether the received password is derived from the user information further cause the one processors to: determine whether the received password is phonetically similar to at least one word associated with the user information. ### Claim 16 (depends on 13) The tangible computer-readable storage medium of claim 13, wherein the instructions causing the processors to determine whether the received password is derived from the user information further cause the one processors to: determine whether the received password and at least one word associated with the user information are associated with a same class of words. ### Claim 17 (depends on 13) The tangible computer-readable storage medium of claim 13, wherein the instructions causing the processors to determine whether the received password is derived from the user information further cause the one processors to: determine whether the received password and at least one word associated with the user information have a same meaning. ### Claim 18 (depends on 1) The method of claim 1, wherein determining whether the received password is derived from the user information further comprises: determining whether a numerical distance between the received password and at least one word associated with the user information is within a predetermined threshold. ### Claim 19 (depends on 1) The method of claim 1, further comprising: in response to a determination that the received password does not match the valid password, determining whether the received password is similar to the valid password; and in response to a determination that the received password is not similar to the valid password, determine whether the received password is derived from the user information.