IP Library Granted Patent US 9,690,917
Granted Patent B2
US 9,690,917 · App. 14/285,842 · Granted Jun 27, 2017

Managing compromised passwords

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,690,917
App. No.
14/285,842
Granted
Jun 27, 2017
Kind
B2
Abstract

A system and computer implemented method for determining compromised passwords is disclosed. The method may include displaying, in a first set of positions, a set of entry keys of a device. The method may include collecting a first set of tracking data including the first set of positions for entry of a first password. The method may also include displaying the set of entry keys of the device in a second set of positions. The method may also include determining a second password based on the second set of positions and entry of the first password. The method may also include determining whether the second password was entered into the device.

Claims (65)

1. A computer implemented method for determining compromised passwords comprising:

displaying a first keypad on a screen of a device, the first keypad comprising a set of entry keys of the device displayed in a first set of positions on the screen of the device, wherein each entry key corresponds to a symbol, a number, a letter, or a character;

collecting a first set of tracking data including respective first positions, from the first set of positions, of entry keys used for entry of a first password;

displaying a second keypad on the screen of the device, the second keypad comprising the set of entry keys of the device displayed in a second set of positions on the screen of the device;

determining a second password based on entry keys displayed in the second set of positions that correspond with the respective first positions of entry keys used for entry of the first password;

determining whether the second password was entered into the device; and

implementing a security action in response to determining entry of the second password.

2. The method of claim 1 , further comprising:

collecting, by a security application, identification information from a user;

determining, by the security application, based on the identification information, that the user of the device corresponds with a first user profile; and

displaying, responsive to determining that the user of the device corresponds with the first user profile, the set of entry keys in the first set of positions.

3. The method of claim 2 , further comprising:

determining, by the security application, based on the identification information, that the user of the device corresponds to an unidentified user profile; and

displaying, responsive to determining that the user of the device corresponds with the unidentified user profile, the set of entry keys in the second set of positions.

4. The method of claim 3 , wherein collecting identification information from the user includes:

capturing a first set of images of a head of the user; and

comparing, using facial recognition techniques, the first set of images of the head of the user with a second set of images of the first user profile.

5. The method of claim 1 , wherein the first set of tracking data includes time data and location data, and wherein the second password is a likely password that an observer of entry of the first password in the first set of positions is likely to enter into the device.

6. The method of claim 1 , further comprising:

collecting a second set of tracking data including time data and location data for entry of the second password; and

selecting, in response to determining that the second password was entered into the device, the security action based on the time data and location data of the second set of tracking data.

7. The method of claim 6 , wherein the security action includes enabling a tracking application configured to transmit global-positioning coordinates to a security management server.

8. The method of claim 6 , further comprising:

identifying, based on the second set of tracking data, potentially targeted users within a threshold distance of an entry location of the second password; and

alerting, using a phone communication, the potentially targeted users of the entry of the second password.

9. The method of claim 8 , further comprising:

identifying, using a wireless provider database, individuals sharing a wireless provider plan with the potentially targeted users; and

alerting, using a phone communication, the identified individuals of the entry of the second password.

10. The method of claim 1 , further comprising:

storing password data including a set of passwords entered into the device in a password management database; and

wherein the second set of positions is determined based on the password data including the set of passwords entered into the device.

11. A system for determining compromised passwords comprising:

a first displaying module to display a first keypad on a screen of a device, the first keypad comprising a set of entry keys of the device displayed in a first set of positions on the screen of the device, wherein each entry key corresponds to a symbol, a number, a letter, or a character;

a collecting module to collect a first set of tracking data including respective first positions, from the first set of positions, of entry keys used for entry of a first password;

a second displaying module to display a second keypad on the screen of the device, the second keypad comprising the set of entry keys of the device displayed in a second set of positions on the screen of the device;

a first determining module to determine a second password based on entry keys displayed in the second set of positions that correspond with the respective first positions of entry keys used for entry of the first password; and

a second determining module to determine whether the second password was entered into the device and implement a security action in response to determining entry of the second password.

12. The system of claim 11 , further comprising:

a collecting module configured to collect, using a security application, identification information from a user;

a determining module configured to determine, based on the identification information, that the user of the device corresponds with a first user profile; and

a displaying module configured to display, responsive to determining that the user of the device corresponds with the first user profile, the set of entry keys in the first set of positions.

13. The system of claim 12 , further comprising:

determining, by the determining module, based on the identification information, that the user of the device corresponds to an unidentified user profile; and

displaying, by the displaying module, responsive to determining that the user of the device corresponds with the unidentified user profile, the set of entry keys in the second set of positions.

14. The system of claim 13 , wherein collecting identification information from the user includes:

a capturing module configured to capture a first set of images of a head of the user; and

a comparing module configured to compare, using facial recognition techniques, the first set of images of the head of the user with a second set of images of the first user profile.

15. A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a first computing device, causes the first computing device to:

display a first keypad on a screen of a device, the first keypad comprising a set of entry keys of the device displayed in a first set of positions on the screen of the device, wherein each entry key corresponds to a symbol, a number, a letter, or a character;

collect a first set of tracking data including respective first positions, from the first set of positions, of entry keys used for entry of a first password;

display a second keypad on the screen of the device, the second keypad comprising the set of entry keys of the device displayed in a second set of positions on the screen of the device;

determine a second password based on entry keys displayed in the second set of positions that correspond with the respective first positions of entry keys used for entry of the first password;

determine whether the second password was entered into the device; and

implement a security action in response to determining entry of the second password.

16. The computer program product of claim 15 , wherein the first set of tracking data includes time data and location data, and wherein the second password is a likely password that an observer of entry of the first password in the first set of positions is likely to enter into the device.

17. The computer program product of claim 15 , further comprising computer readable program code configured to:

collect a second set of tracking data including time data and location data for entry of the second password; and

select, in response to determining that the second password was entered into the device, the security action based on the time data and location data of the second set of tracking data.

18. The computer program product of claim 17 , wherein the security action includes enabling a tracking application configured to transmit global-positioning coordinates to a security management server.

19. The computer program product of claim 17 , further comprising computer readable program code configured to:

identify, based on the second set of tracking data, potentially targeted users within a threshold distance of an entry location of the second password; and

alert, using a phone communication, the potentially targeted users of the entry of the second password.

20. The computer program product of claim 19 , further comprising computer readable program code configured to:

identify, using a wireless provider database, individuals sharing a wireless provider plan with the potentially targeted users; and

alert, using a phone communication, the identified individuals of the entry of the second password.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 15, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: AIRBNB, INC.
Reel/Frame 056427/0193 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 23, 2014
From: BATES, CARY L.; HELGESON, LEE N.; KING, JUSTIN K.; SCHLICHT, MICHELLE A.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 032955/0362 →