System and method for risk assessment of login transactions through password analysis
A system and method is provided for determining a risk associated with a login transaction. A password received during the login attempt and determination is made regarding whether the received password is derived form user information. A risk is determined based on a determination that the received password is derived from the user information.
1. A method of determining a risk associated with a login transaction, the method comprising:
receiving, by a processor, a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource;
during authentication of the login transaction based on the received password:
a) retrieving, by the processor, a valid password associated with the user;
b) determining, by the processor, whether the received password matches the valid password; and
c) in response to a determination that the received password does not match the valid password:
retrieving, by the processor, user information associated with the user;
determining, by the processor, whether the received password is derived from the user information; and
determining, by the processor, a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction.
2. The method of claim 1 , wherein determining whether the received password is derived from the user information further comprises:
determining whether the received password partially matches at least one word associated with the user information.
3. The method of claim 1 , wherein determining whether the received password is derived from the user information further comprises:
determining whether the received password is phonetically similar to at least one word associated with the user information.
4. The method of claim 1 , wherein determining whether the received password is derived from the user information further comprises further comprises:
determining whether the received password and at least one word associated with the user information are associated with a same class of words.
5. The method of claim 1 , determining whether the received password is derived from the user information further comprises:
determining whether the received password and at least one word associated with the user information have a same meaning.
6. The method of claim 1 , wherein the user information comprises one or more of users' personal information, users' interests, or users' previously used passwords.
7. The method of claim 1 , wherein determining whether the received password is derived from the user information further comprises:
determining whether a numerical distance between the received password and at least one word associated with the user information is within a predetermined threshold.
8. The method of claim 1 , further comprising:
in response to a determination that the received password does not match the valid password, determining whether the received password is similar to the valid password; and
in response to a determination that the received password is not similar to the valid password, determine whether the received password is derived from the user information.
9. A system of determining a risk associated with a login transaction, the system comprising:
one or more processors configured to:
receive a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource;
during authentication of the login transaction based on the received password:
a) retrieve a valid password associated with the user;
b) determine whether the received password matches the valid password; and
c) in response to a determination that the received password does not match the valid password:
retrieve user information associated with the user;
determine whether the received password is derived from the user information; and
determine a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction.
10. The system of claim 9 , wherein the one or more processors configured to determine whether the received password is derived from the user information are further configured to:
determine whether the received password partially matches at least one word associated with the user information.
11. The system of claim 9 , wherein the one or more processors configured to determine whether the received password is derived from the user information are further configured to:
determine whether the received password is phonetically similar to at least one word associated with the user information.
12. The system of claim 9 , wherein the one or more processors configured to determine whether the received password is derived from the user information are further configured to:
determine whether the received password and at least one word associated with the user information are associated with a same class of words.
13. The system of claim 9 , wherein the one or more processors configured to determine whether the received password is derived from the user information are further configured to:
determine whether the received password and at least one word associated with the user information have a same meaning.
14. The system of claim 9 , wherein the user information comprises one or more of users' personal information, users' interests, or users' previously used passwords.
15. A tangible computer-readable storage medium having one or more computer-readable instructions thereon which when executed by one or more processors cause the one or more processors to:
receive a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource;
during authentication of the login transaction based on the received password:
a) retrieve a valid password associated with the user;
b) determine whether the received password matches the valid password; and
c) in response to a determination that the received password does not match the valid password:
retrieve user information associated with the user;
determine whether the received password is derived from the user information; and
determine a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction.
16. The tangible computer-readable storage medium of claim 15 , wherein the instructions causing the processors to determine whether the received password is derived from the user information further cause the one processors to:
determine whether the received password partially matches at least one word associated with the user information.
17. The tangible computer-readable storage medium of claim 15 , wherein the instructions causing the processors to determine whether the received password is derived from the user information further cause the one processors to:
determine whether the received password is phonetically similar to at least one word associated with the user information.
18. The tangible computer-readable storage medium of claim 15 , wherein the instructions causing the processors to determine whether the received password is derived from the user information further cause the one processors to:
determine whether the received password and at least one word associated with the user information are associated with a same class of words.
19. The tangible computer-readable storage medium of claim 15 , wherein the instructions causing the processors to determine whether the received password is derived from the user information further cause the one processors to:
determine whether the received password and at least one word associated with the user information have a same meaning.