Password re-usage identification based on input method editor analysis
An approach is provided for password re-usage identification based on an Input Method Editor (IME) analysis. The approach analyzes a number of keystrokes received from a user at the IME that is running on the information handling system. A set of keystrokes received at the IME are identified as a possible new password that is being established by the user. A set of existing password data is searched with the search being based on the possible new password. The set of existing passwords are stored in a data store accessible from at least one of the processors of the information handling system. In response to the searching identifying that one of the existing passwords matches the possible new password, a notification, or warning, is displayed to the user.
1. A method implemented by an information handling system that includes a processor and a memory accessible by the processor, the method comprising:
storing a first set of keystrokes received from an input method editor (IME) into the memory;
comparing a second set of keystrokes received from the IME against the first set of keystrokes stored in the memory;
in response to the second set of keystrokes not matching the first set of keystrokes:
determining that the first set of keystrokes is not a password; and
replacing the first set of keystrokes with the second set of keystrokes in the memory; and
in response to the second set of keystrokes matching the first set of keystrokes:
determining that the second set of keystrokes is a possible new password being established by a user to access a first resource;
converting the second set of keystrokes to a new hash value;
comparing the new hash value against one or more current hash values, wherein the one or more current hash values were generated from one or more current passwords established by the user to access one or more second resources, wherein the first resource is different from the one or more second resources; and
notifying the user in response to the comparing revealing that at least one of the one or more current hash values matches the first new hash value.
2. The method of claim 1 further comprising:
storing the possible new password with the one or more current passwords in response to the comparing failing to identify at least one of the one or more current hash values matching the new hash value.
3. The method of claim 1 wherein the identifying further comprises:
identifying a password length phrase of the second set of keystrokes in response to determining that the second set of keystrokes matches the first set of keystrokes; and
comparing the password length phrase to a dictionary and revealing that the password length phrase does not match any dictionary words and that at least one character in the password length phrase is selected from the group consisting of a special character and a numeric character.
4. The method of claim 1 wherein the identifying further comprises:
comparing the second set of keystrokes to a received set of password security rules, wherein the possible new password complies with the set of password security rules and is received twice in succession at the IME.
5. The method of claim 1 wherein the notifying inhibits display of the possible new password.
6. An information handling system comprising:
one or more processors;
a memory coupled to at least one of the processors; and
a set of computer program instructions stored in the memory and executed by at least one of the processors in order to perform actions comprising:
storing a first set of keystrokes received from an input method editor (IME) into the memory;
comparing a second set of keystrokes received from the IME against the first set of keystrokes stored in the memory;
in response to the second set of keystrokes not matching the first set of keystrokes:
determining that the first set of keystrokes is not a password; and
replacing the first set of keystrokes with the second set of keystrokes in the memory; and
in response to the second set of keystrokes matching the first set of keystrokes:
determining that the second set of keystrokes is a possible new password being established by a user to access a first resource;
converting the second set of keystrokes to a new hash value;
comparing the new hash value against one or more current hash values, wherein the one or more current hash values were generated from one or more current passwords established by the user to access one or more second resources, wherein the first resource is different from the one or more second resources; and
notifying the user in response to the comparing revealing that at least one of the one or more current hash values matches the new hash value.
7. The information handling system of claim 6 wherein the actions further comprise:
storing the possible new password with the one or more current passwords in response to the comparing failing to identify at least one of the one or more current hash values matching the new hash value.
8. The information handling system of claim 6 wherein the identifying further comprises:
identifying a password length phrase of the second set of keystrokes in response to determining that the second set of keystrokes matches the first set of keystrokes; and
comparing the password length phrase to a dictionary and revealing that the password length phrase does not match any dictionary words and that at least one character in the password length phrase is selected from the group consisting of a special character and a numeric character.
9. The information handling system of claim 6 wherein the identifying further comprises:
comparing the second set of keystrokes to a received set of password security rules, wherein the possible new password complies with the set of password security rules and is received twice in succession at the IME.
10. The information handling system of claim 6 wherein the notifying inhibits display of the possible new password.
11. A computer program product stored in a non-transitory computer readable storage medium, comprising computer program code that, when executed by an information handling system, performs actions comprising:
storing a first set of keystrokes received from an input method editor (IME) into a memory;
comparing a second set of keystrokes received from the IME against the first set of keystrokes stored in the memory;
in response to the second set of keystrokes not matching the first set of keystrokes:
determining that the first set of keystrokes is not a password; and
replacing the first set of keystrokes with the second set of keystrokes in the memory; and
in response to the second set of keystrokes matching the first set of keystrokes:
determining that the second set of keystrokes is a possible new password being established by a user to access a first resource;
converting the second set of keystrokes to a new hash value;
comparing the new hash value against one or more current hash values, wherein the one or more current hash values were generated from one or more current passwords established by the user to access one or more second resources, wherein the first resource is different from the one or more second resources; and
notifying the user in response to the comparing revealing that at least one of the one or more current hash values matches the new hash value.
12. The computer program product of claim 11 wherein the actions further comprise:
storing the possible new password with the one or more current passwords in response to the comparing failing to identify at least one of the one or more current hash values matching the new hash value.
13. The computer program product of claim 11 wherein the identifying further comprises:
identifying a password length phrase of the second set of keystrokes in response to determining that the second set of keystrokes matches the first set of keystrokes; and
comparing the password length phrase to a dictionary and revealing that the password length phrase does not match any dictionary words and that at least one character in the password length phrase is selected from the group consisting of a special character and a numeric character.
14. The computer program product of claim 11 wherein the identifying further comprises:
comparing the second set of keystrokes to a received set of password security rules, wherein the possible new password complies with the set of password security rules and is received twice in succession at the IME.