# US 2014/0208386 A1 · Adaptive Strike Count Policy > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0208386 A1 - Document ID: US20140208386A1 - Status: Published application - Kind: A1 - Application number: 13/745,198 - Filed: 2013-01-18 - Published: 2014-07-24 - Earliest claimed: 2013-01-18 - Assignees: CA, Inc. - Applicants: Ca, Inc. - Inventors: VenkataBabji Sama - Web page: https://patentgrep.com/patent/US20140208386A1 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/14: {for detecting or protecting against malicious traffic} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An adaptive strike count management is implemented for securing resources. The method authorizes access to a resource if a security credential matches pre-stored security data. However, when the security credential does not match the pre-stored security data, the adaptive strike count management method denies access to the resource; assesses the risk level based on the security credential; increments a strike counter by a predetermined value based on the risk level; and disables further access attempts to the resource if the strike counter exceeds a threshold. The strike counter is incremented by a first value when the risk level is assessed to be a first level, a second value when the risk level is assessed to be a second level, and a third value when the risk level is assessed to be a third level. ## Claims ### Claim 1 An adaptive strike count management method for securing resources, comprising: receiving a security credential; comparing the security credential with a pre-stored security data securing a resource; authorizing access to the resource when the security credential matches the pre-stored security data; and when the security credential does not match the pre-stored security data: denying access to the resource; determining a risk level based on the security credential; incrementing a strike counter by a predetermined value based on the risk level; and disabling subsequent access attempts to the resource when the strike counter satisfies a threshold. ### Claim 2 (depends on 1) The method of claim 1, wherein determining the risk level further comprises analyzing at least one of a passcode securing the resource, user behavior at previous access occurrences, machine information identifying a machine typically used to access the resource, physical location of typical access occurrences and access frequency. ### Claim 3 (depends on 1) The method of claim 1, wherein incrementing the strike counter further comprises incrementing the strike counter by a first value when the risk level is determined to be a first level and a second value when the risk level is determined to be a second level, wherein the first value is different than the second value. ### Claim 4 (depends on 3) The method of claim 3, wherein determining the risk level comprises determining the risk level to be the first level when the security credential matches a previous security data. ### Claim 5 (depends on 3) The method of claim 3, wherein determining the risk level comprises determining the risk level to be the second level when access is attempted from a device different from a device previously used to successfully access the resource. ### Claim 6 (depends on 3) The method of claim 3, wherein incrementing the strike counter further comprises incrementing the strike counter by a third value when the risk level is determined to be a third level, the third value being different than the first and second values. ### Claim 7 (depends on 6) The method of claim 6, wherein determining the risk level comprises determining the risk level to be the third level when a latency between multiple unsuccessful access attempts is less than a predetermined latency threshold. ### Claim 8 (depends on 6) The method of claim 6, wherein determining the risk level comprises determining the risk level to be the third level when the access is attempted from a blacklisted location. ### Claim 9 (depends on 1) The method of claim 1, further comprising reenabling access attempts to the resource after a time duration, wherein the time duration is based on the risk level. ### Claim 10 (depends on 9) The method of claim 9, wherein reenabling access attempts further comprises setting the time duration when the risk level is determined to be the second level to be different than the time duration when the risk level is determined to be the first level. ### Claim 11 A computer program product comprising a computer readable storage medium having computer readable program code embodied in the medium, the computer readable program code comprising: computer readable program code configured to receive a security credential; computer readable program code configured to compare the security credential with a pre-stored security data securing a resource; and computer readable program code configured to authorize access to the resource when the security credential matches the pre-stored security data, and when the security credential does not match the pre-stored security data: deny access to the resource; determine a risk level based on the security credential; increment a strike counter by a predetermined value based on the risk level; and disable subsequent access attempts to the resource when the strike counter satisfies a threshold. ### Claim 12 (depends on 11) The computer program product of claim 11, further comprising computer readable program code configured to analyze at least one of a passcode securing the resource, user behavior at previous access occurrences, machine information identifying a machine typically used to access the resource, physical location of typical access occurrences and access frequency. ### Claim 13 (depends on 11) The computer program product of claim 11, further comprising computer readable program code configured to increment the strike counter by a first value when the risk level is determined to be a first level and a second value when the risk level is determined to be a second level, the first value being different than the second value. ### Claim 14 (depends on 13) The computer program product of claim 13, wherein the risk level is determined to be the first level when the security credential matches a previous security data. ### Claim 15 (depends on 13) The computer program product of claim 13, wherein the risk level is determined to be the second level when access is attempted from a device different from a device previously used to successfully access the resource. ### Claim 16 (depends on 13) The computer program product of claim 13, further comprising computer readable program code configured to increment the strike counter by a third value when the risk level is determined to be a third level, the third value being different than the first and second values. ### Claim 17 (depends on 16) The computer program product of claim 16, wherein the risk level is determined to be the third level when a latency between multiple unsuccessful access attempts is less than a predetermined latency threshold. ### Claim 18 (depends on 16) The computer program product of claim 16, wherein the risk level is determined to be the third level when the access is attempted from a blacklisted location. ### Claim 19 (depends on 11) The computer program product of claim 11, further comprising computer readable program code configured to reenable access attempts to the resource after a time duration, wherein the time duration is based on the risk level. ### Claim 20 (depends on 11) The computer program product of claim 11, further comprising computer readable program code configured to set the time duration when the risk level is determined to be the second level to be different than the time duration when the risk level is determined to be the first level.