Compromised authentication information clearing house
AssigneeAmazon Technologies, Inc.
InventorsDavid James Kane-Parry, Darren Ernest Canavor, Jesper Mikael Johansson
Life of this patent
Estimating the term…
Abstract
Techniques for maintaining potentially compromised authentication information for a plurality of accounts may be provided. An individual piece of authentication information may be associated with one or more tags that indicate access rights with respect to requestors that also provide and maintain other potentially compromised authentication information. A subset of the potentially compromised authentication information may be determined based on the one or more tags in response to a request from a requestor for the potentially compromised authentication information. In an embodiment, the subset of the potentially compromised authentication information may be provided to the requestor.
Claims11
A computer-implemented method, comprising:
- maintaining, by a computer system, first information including a first set of passwords that have been marked as potentially subject to compromise for a first plurality of accounts and first password characteristics for the first set of passwords;
- receiving second information including a second set of passwords that have been marked as potentially subject to compromise for a second plurality of accounts and second password characteristics for the second set of passwords;
- updating the first set of passwords included in the first information to incorporate the second set of passwords included in the second information;
- determining that a password included in the updated first set of passwords is being utilized by an account of the first plurality of accounts;
- generating, by the computer system, a password requirement comprising a password structure, the password requirement determined based at least in part on the updated first password characteristics for the updated first set of passwords;
- generating a recommendation indicating that the password being utilized by the account be changed to adhere to the password requirement;
- providing the recommendation to a device of a user of the account;
- receiving, from the device of the user of the account, an updated password for the account;
- and
- determining a security score for the updated password based at least in part on adherence of the updated password to the password requirement.
A computer system, comprising:
- a processor;
- and
- memory including computer-executable instructions that, when executed by the processor, cause the system to at least:
- maintain first information including a first set of passwords that have been marked as potentially subject to compromise for a first plurality of accounts and first password characteristics for the first set of passwords;
- receive second information including a second set of passwords that have been marked as potentially subject to compromise for a second plurality of accounts and second password characteristics for the second set of passwords;
- determine that a password included in the first set of passwords is being utilized by an account of the first plurality of accounts based at least in part on the first information and the second information;
- generate a password requirement for the account that comprises a password structure based at least in part on the first password characteristics and the second password characteristics;
- transmit the password requirement to a device of a user of the account;
- receive, from the device of the user of the account, an updated password for the account;
- and
- determine a security score for the updated password based at least in part on adherence of the updated password to the password requirement.
Dependencies are inferred from the claim text.