Back to results
US 8,285,658 B1Granted
Account sharing detection
AssigneeScout Analytics, Inc.
InventorsMechthild Regina Kellas-Dicks, Yvonne J. Stark
Life of this patent
Estimating the term…
Abstract
Apparatus and methods are described for detecting sharing of electronic or online accounts based on grouping of data samples that include keyboard input timing factors and optionally secondary factors. The data samples can be received from various computers having various keyboards of a certain type and may be input by more than one user. The data samples are grouped based on distances and ratios of mathematical combinations of distances between input timing of key events such as dwell and flight time, as well as optionally based on at least one secondary factor related to the keyboard input timing factors. Example secondary factors include a time of day of the input; and/or a machine identification, location, and IP address of the computer used to input the sample.
Claims21
A method comprising:
- receiving a plurality of data samples from at least one computer having at least one keyboard of one keyboard type, each data sample including:
- (1) feature set data of one character string input on the at least one keyboard by at least one user;
- calculating distance data between data point vectors of feature set data of each pair of samples;
- calculating ratios of mathematical combinations of distances between pairs of data point vectors of the feature set data in each of two clusters of the data point pairs;
- determining whether the data samples are from more than one user based on the distance data and the ratios.
2 more elements
A method comprising:
- receiving a plurality of data samples from at least one computer having at least one keyboard of one keyboard type, each data sample including:
- (1) keyboard input timing factors of one character string input on the at least one keyboard by at least one user, and (2) at least one secondary factor from each of the at least one computers and related to the keyboard input timing factors;
- determining whether the data samples are from more than one user based on the keyboard input timing factors and based on the secondary factors.
A method comprising:
- receiving dwell time data and flight time data for a plurality of samples of a same one or more entered strings generated by a plurality of users typing on a plurality of keyboards of one type of keyboard attached to a plurality of computers;
- calculating a plurality of dwell time feature point distances for pairs of data point vectors of pairs of the plurality of samples;
- calculating a plurality of flight time feature point distances for pairs of data point vectors of pairs of the plurality of samples;
- calculating a sample distance score between each pair of the plurality sample based on the dwell feature point distances and the flight feature point distances;
- identifying two clusters based on the sample distance scores;
- calculating a ratio score for each of the two clusters based on mathematical combinations of intra-cluster and inter-cluster sample distance scores of the two clusters;
- receiving at least one other factor for each sample, the other factor automatically generated by the computer;
- correlating the other factors in each of the two clusters;
- based on distance scores between each pair of the plurality sample of the two clusters, the two ratio scores, and the correlated other factors, performing one of merging at least two clusters of the set of clusters, completing at least one cluster of the set of clusters, or deleting at least one cluster of the set of clusters;
- based on merging, completing or deleting, performing changing the way the system provides access to an account associated with the same one or more entered strings.
7 more elements
A specialized computer server system comprising:
- a network communication input device receiving a plurality of data samples;
- a database of the computer server system storing the plurality of data samples received from at least one computer, each data sample including:
- (1) keyboard input timing factors of each character of one username and password combination input on at least one keyboard of one type of keyboard of the at least one computer by at least one user, and (2) at least one secondary factor from each of the at least one computers and related to the keyboard input timing factors;
- a share detect engine of the computer server system to determine whether the samples are from more than one user based on the keyboard input timing factors and based on the secondary factors;
- one of a display, a network communication output, and a printer to display a warning identifying that the samples are from more than one user.
2 more elements
A specialized computer comprising:
- an authentication engine to change a way access is provided to an account associated with data samples received from at least one computer, each data sample including:
- (1) keyboard input timing factors of each character of one character string input on at least one keyboard of one type of keyboard of the at least one computer by at least one user, and (2) at least one secondary factor from each of the at least one computers and related to the keyboard input timing factors;
- wherein changing is based on the keyboard input timing factors and based on the secondary factors.
Dependencies are inferred from the claim text.