Password check by decomposing password
View Patent ↗A proposed password is decomposed into basic components to determine and score transitions between the basic components and create a password score that measures the strength of the proposed password based on rules, such as concatenation, insertion, and replacement. The proposed password is scored against all known words, such as when a user is first asked to create a password for an account or access. The proposed password can also be scored against one or more previous passwords for the user, such as when the user is asked to change the user's previous password, to determine similarity between the two passwords.
1. A system, comprising:
a non-transitory memory storing user account information, wherein the information comprises a password for a user account; and
one or more processors for
receiving, by a service provider, a password from a user;
decomposing the password into words contained in the password, wherein at least one of the words is an actual word;
determining whether the password is formed by the words using one or more rules of concatenation, insertion, and replacement;
determining a score for the password based on the one or more rules used for forming the password with at least one rule having a different weighting than another rule; and
comparing the score to a threshold score.
2. The system of claim 1 , wherein the one or more processors further accepts the password if the score is greater than or equal to the threshold score.
3. The system of claim 1 , wherein the words comprises known words, names, numbers, and characters.
4. The system of claim 1 , wherein the password is formed using all the rules.
5. The system of claim 1 , wherein none of the rules have the same weight.
6. The system of claim 1 , wherein the password is a proposed password by the user.
7. The system of claim 1 , wherein an initial score is assigned to the password based on types of individual characters used for forming the password and wherein the score is determined by updating the initial score based on whether the password is formed by the words using the one or more of the rules of concatenation, insertion, and replacement.
8. The system of claim 1 , wherein the one or more processors further compares similarities between the password and a second password for the user, determines a similarity score between the password and the second password based on the comparing; and compares the similarity score to a threshold.
9. The system of claim 1 , wherein the password is flagged by the service provider if the score is below the threshold score.
10. A system, comprising:
a non-transitory memory storing user account information, wherein the information comprises a password for a user account; and
one or more processors for
receiving a first password from a user;
retrieving a second password for the user;
decomposing the first and the second passwords into components contained in the passwords, wherein at least one of the components is an actual word;
determining whether the passwords are formed by the words using one or more rules of concatenation, insertion, and replacement;
comparing similarities between the first password and the second password comprising identifying rules and components of the first and second passwords, comparing similarities of the rules and the components, and determining a first similarity score for the rules and a second similarity score for the components;
determining a score between the first password and the second password based on the comparing; and
comparing the score to a threshold score.
11. The system of claim 10 , wherein the one or more processors further accepts the first password if the score is greater than or equal to the threshold score.
12. The system of claim 10 , wherein the score is based on a function of the first and second similarity scores.
13. The system of claim 10 , wherein the one or more processors further retrieves a previously used third password by the user, compares similarities between the first password and the second and third passwords, and determines a score between the first password and the second and third passwords.
14. The system of claim 12 , wherein the one or more processors further determines a strength score for the first password and the score is further based on a function of the strength score.
15. The system of claim 10 , wherein the first password is flagged by the service provider if the score is below the threshold score.
16. A non-transitory computer-readable medium comprising a plurality of machine-readable instructions which, when executed by one or more processors, are adapted to cause the one or more processors to perform a method comprising:
receiving, by a service provider, a password from a user;
decomposing the password into words contained in the password, wherein at least one of the words is an actual word;
determining whether the password is formed by the words using one or more rules of concatenation, insertion, and replacement;
determining a score for the password based on the one or more rules with at least one rule having a different weighting than another rule; and
comparing the score to a threshold score.
17. The non-transitory computer-readable medium of claim 16 , wherein the method further comprises accepting the password if the score is greater than or equal to the threshold score.
18. The non-transitory computer-readable medium of claim 16 , wherein the applying is for all the rules.
19. The non-transitory computer-readable medium of claim 16 , wherein an initial score is assigned to the password based on types of individual characters used for forming the password and wherein the score is determined by updating the initial score based on whether the password is formed by the words using the one or more of the rules of concatenation, insertion, and replacement.
20. The non-transitory computer-readable medium of claim 16 , wherein the password is a proposed password by the user.
21. The non-transitory computer-readable medium of claim 16 , wherein the method further comprises similarities between the password and a second password for the user, determines a similarity score between the password and the second password based on the comparing; and compares the similarity score to a threshold.
22. The non-transitory computer-readable medium of claim 16 , wherein the password is flagged by the service provider if the score is below the threshold score.
23. A non-transitory computer-readable medium comprising a plurality of machine-readable instructions which, when executed by one or more processors, are adapted to cause the one or more processors to perform a method comprising:
receiving a first password from a user;
retrieving a second password for the user;
decomposing the first and the second passwords into components contained in the passwords, wherein at least one of the components is an actual word;
determining whether the passwords are formed by the words using one or more rules of concatenation, insertion, and replacement;
comparing similarities between the first password and the second password comprising identifying rules and components of the first and second passwords, comparing similarities of the rules and the components, and determining a first similarity score for the rules and a second similarity score for the components;
determining a score between the first password and the second password based on the comparing; and
comparing the score to a threshold score.
24. The non-transitory computer-readable medium of claim 23 , wherein the method further comprises accepting the first password if the score is greater than or equal to the threshold score.
25. The non-transitory computer-readable medium of claim 23 , wherein the score is based on a function of the first and second similarity scores.
26. The non-transitory computer-readable medium of claim 23 , wherein the method further comprises retrieving a previously used third password by the user, comparing similarities between the first password and the second and third passwords, and determining a score between the first password and the second and third passwords.
27. The non-transitory computer-readable medium of claim 25 , wherein the method further comprises determining a strength score for the first password and the score is further based on a function of the strength score.