# US 2021/0342437 A1 · Providing an indication of user-tailored password strength

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0342437 A1
- Document ID: US20210342437A1
- Status: Published application
- Kind: A1
- Application number: 16/861,327
- Filed: 2020-04-29
- Published: 2021-11-04
- Earliest claimed: 2020-04-29
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Hyun Kyu Seo; Lawrence Humphrey
- Web page: https://patentgrep.com/patent/US20210342437A1

## CPC

- G06F 21/46: by designing passwords or checking the strength of passwords
- G06F 16/9536: Search customisation based on social or collaborative filtering
- G06F 40/30: Semantic analysis
- G06F 40/242: Dictionaries
- G06F 40/284: Lexical analysis, e.g. tokenisation or collocates
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Providing an indication of user-tailored password strength is provided. A registration of a user in a password strength management service is received. A list of social media accounts corresponding to the user and access credentials corresponding to each social media account in the list is received from the user. Social media information corresponding to the user is gathered from the social media accounts using the access credentials corresponding to each social media account in the list. In response to receiving an input of a new password string by the user, password strength of the new password string is evaluated in view of the gathered social media information corresponding to the user.

## Claims

### Claim 1

A method for providing an indication of user-tailored password strength, the method comprising:
receiving a registration of a user in a password strength management service;
receiving a list of social media accounts corresponding to the user and access credentials corresponding to each social media account in the list from the user;
gathering social media information corresponding to the user from the social media accounts using the access credentials corresponding to each social media account in the list; and
responsive to receiving an input of a new password string by the user, evaluating password strength of the new password string in view of the gathered social media information corresponding to the user.

### Claim 2 (depends on 1)

The method of claim 1 further comprising:
converting non-text information within the gathered social media information into text information using visual recognition and natural language processing; and
storing text and the converted non-text information within the gathered social media information as aggregated social media information in a primary semantics dictionary corresponding to the user.

### Claim 3 (depends on 2)

The method of claim 2 further comprising:
processing the aggregated social media information in the primary semantics dictionary corresponding to the user using a semantics analyzer application and a marketing analytics application;
generating a list of semantically-related words based on the processing of the aggregated social media information in the primary semantics dictionary corresponding to the user; and
storing the list of semantically-related words in the primary semantics dictionary corresponding to the user.

### Claim 4 (depends on 3)

The method of claim 3 further comprising:
storing the new password string in a current credential dictionary corresponding to the user; and
searching for matches between the new password string stored in the current credential dictionary corresponding to the user and the list of semantically-related words stored in the primary semantics dictionary corresponding to the user.

### Claim 5 (depends on 3)

The method of claim 3 further comprising:
determining a number of matches between the new password string and the list of semantically-related words; and
selecting a password safety level from a plurality of defined password safety levels based on the number of matches between the new password string and the list of semantically-related words.

### Claim 6 (depends on 5)

The method of claim 5 further comprising:
sending a password safety alert to the user at the selected password safety level.

### Claim 7 (depends on 1)

The method of claim 1 further comprising:
crawling pages of the social media accounts to extract post data;
aggregating extracted post data to identify a set of relevant words;
storing the set of relevant words in a social dictionary corresponding to the user;
inputting the set of relevant words into a semantic analyzer to identify tangential concept words;
storing the tangential concept words in the social dictionary corresponding to the user; and
string searching relevant and tangential concept words in the social dictionary for matches with the password string.

### Claim 8

A computer system for providing an indication of user-tailored password strength, the computer system comprising:
a bus system;
a storage device connected to the bus system, wherein the storage device stores program instructions; and
a processor connected to the bus system, wherein the processor executes the program instructions to:
receive a registration of a user in a password strength management service;
receive a list of social media accounts corresponding to the user and access credentials corresponding to each social media account in the list from the user;
gather social media information corresponding to the user from the social media accounts using the access credentials corresponding to each social media account in the list; and
evaluate password strength of a new password string in view of the gathered social media information corresponding to the user in response to receiving an input of the new password string by the user.

### Claim 9 (depends on 8)

The computer system of claim 8, wherein the processor further executes the program instructions to:
convert non-text information within the gathered social media information into text information using visual recognition and natural language processing; and
store text and the converted non-text information within the gathered social media information as aggregated social media information in a primary semantics dictionary corresponding to the user.

### Claim 10 (depends on 9)

The computer system of claim 9, wherein the processor further executes the program instructions to:
process the aggregated social media information in the primary semantics dictionary corresponding to the user using a semantics analyzer application and a marketing analytics application;
generate a list of semantically-related words based on the processing of the aggregated social media information in the primary semantics dictionary corresponding to the user; and
store the list of semantically-related words in the primary semantics dictionary corresponding to the user.

### Claim 11 (depends on 10)

The computer system of claim 10, wherein the processor further executes the program instructions to:
store the new password string in a current credential dictionary corresponding to the user; and
search for matches between the new password string stored in the current credential dictionary corresponding to the user and the list of semantically-related words stored in the primary semantics dictionary corresponding to the user.

### Claim 12 (depends on 10)

The computer system of claim 10, wherein the processor further executes the program instructions to:
determine a number of matches between the new password string and the list of semantically-related words; and
select a password safety level from a plurality of defined password safety levels based on the number of matches between the new password string and the list of semantically-related words.

### Claim 13 (depends on 12)

The computer system of claim 12, wherein the processor further executes the program instructions to:
send a password safety alert to the user at the selected password safety level.

### Claim 14

A computer program product for providing an indication of user-tailored password strength, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising:
receiving a registration of a user in a password strength management service;
receiving a list of social media accounts corresponding to the user and access credentials corresponding to each social media account in the list from the user;
gathering social media information corresponding to the user from the social media accounts using the access credentials corresponding to each social media account in the list; and
responsive to receiving an input of a new password string by the user, evaluating password strength of the new password string in view of the gathered social media information corresponding to the user.

### Claim 15 (depends on 14)

The computer program product of claim 14 further comprising:
converting non-text information within the gathered social media information into text information using visual recognition and natural language processing; and
storing text and the converted non-text information within the gathered social media information as aggregated social media information in a primary semantics dictionary corresponding to the user.

### Claim 16 (depends on 15)

The computer program product of claim 15 further comprising:
processing the aggregated social media information in the primary semantics dictionary corresponding to the user using a semantics analyzer application and a marketing analytics application;
generating a list of semantically-related words based on the processing of the aggregated social media information in the primary semantics dictionary corresponding to the user; and
storing the list of semantically-related words in the primary semantics dictionary corresponding to the user.

### Claim 17 (depends on 16)

The computer program product of claim 16 further comprising
storing the new password string in a current credential dictionary corresponding to the user; and
searching for matches between the new password string stored in the current credential dictionary corresponding to the user and the list of semantically-related words stored in the primary semantics dictionary corresponding to the user.

### Claim 18 (depends on 16)

The computer program product of claim 16 further comprising
determining a number of matches between the new password string and the list of semantically-related words; and
selecting a password safety level from a plurality of defined password safety levels based on the number of matches between the new password string and the list of semantically-related words.

### Claim 19 (depends on 18)

The computer program product of claim 18 further comprising:
sending a password safety alert to the user at the selected password safety level.

### Claim 20 (depends on 14)

The computer program product of claim 14 further comprising:
crawling pages of the social media accounts to extract post data;
aggregating extracted post data to identify a set of relevant words;
storing the set of relevant words in a social dictionary corresponding to the user;
inputting the set of relevant words into a semantic analyzer to identify tangential concept words;
storing the tangential concept words in the social dictionary corresponding to the user; and
string searching relevant and tangential concept words in the social dictionary for matches with the password string.
