System and methods for weak authentication data reinforcement

A system comprising:

• a database;
• a machine communicatively coupled with a user interface, the machine including a communication module to receive authentication data in a request to authenticate a user, via the user interface;
• a weak authentication detection module communicatively coupled to the communication module and the database to access the database to detect that the authentication data included in the request is weak authentication data by detecting that a password in the authentication data is a weak password;
• and
• a challenge module, communicatively coupled to the weak authentication detection module and an authentication module, to determine that the request to authenticate is associated with a human user responsive to a detection of the weak authentication data by the weak authentication module,
• the weak authentication module further to initiate an authentication process based on a determination by the challenge module that the request to authenticate is associated with a human user.

A method comprising:

• receiving a request to authenticate a user, the request to authenticate including authentication data that includes a password;
• detecting that the authentication data included within the request is weak authentication data by detecting that the password is a weak password;
• responsive to detecting the weak authentication data, determining whether a source of the request is associated with a human user;
• and
• using at least one processor, initiating a verification process to determine whether the source is associated with the human user, based on an initial determining that the source of the request is not associated with the human user.

A system comprising:

• a database;
• a machine communicatively coupled with a user interface, the machine including a communication module to receive authentication data in a request to authenticate a user, via the user interface;
• a weak authentication detection module communicatively coupled between the communication module and the database to access the database to detect that the authentication data included in the request is weak authentication data by detecting that a password in the authentication data is a weak password;
• and
• a challenge module including a user/device detection module, to be communicatively coupled with the weak authentication detection module, and to initiate a verification process to determine whether a source of the request is associated with a human user, based on a further determination made by the user/device detection module that the source of the request is not associated with the human user.

A method of preventing a software program from fraudulently obtaining a username and password in a network system comprising:

• receiving a username and password, and a request to access a machine;
• detecting that the password is a weak password;
• determining whether a user of a device that submitted the password has previously been recognized as being human;
• initiating a test to determine whether the user of the device is currently recognized as being human, responsive to determining that the user has not previously been recognized as being human;
• enforcing a user authentication policy upon the user responsive to the user being previously or currently recognized as human;
• and
• providing an option to replace the weak password with a different password that is not weak prior to granting access to the machine, based on the user being authenticated using the user authentication policy.

A system for preventing an application from fraudulently obtaining a username and password in a network system comprising:

• a database including a plurality of tables;
• a network interface to receive a username and password, and a request from a device in the network system to access a machine;
• a weak password detection module to access at least a first of the plurality of tables to detect that the password is a weak password;
• a user/device detection module to access at least a second of the plurality of tables to determine whether a user of a device that submitted the password has previously been recognized as being human;
• a challenge module to initiate a test to determine whether the user of the device is currently recognized as being human, the challenge module to initiate the test responsive to the user/device detection module making a determination that the user has not previously been recognized as being human;
• an authentication module to enforce a user authentication policy upon the user responsive to at least one of the user/device detection module or the challenge module determining that the user has been previously or is currently recognized as being human;
• and
• an option module to provide an authenticated user an option to replace the weak password with a different password that is not weak prior to the authentication module granting access to the machine.