IP Library Granted Patent US 10,142,302
Granted Patent B2
US 10,142,302 · App. 15/169,234 · Granted Nov 27, 2018

Systems and methods for managing resetting of user online identities or accounts

Inventor: Lachlan A. Maxwell (Ashburn, VA)
Assignee: Oath Inc.
H04L63/06G06F21/45H04L51/28H04L61/2007H04L63/083H04L63/0876H04L63/14H04L67/306G06F2221/2131
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,142,302
App. No.
15/169,234
Granted
Nov 27, 2018
Kind
B2
Abstract

Systems and methods are disclosed for managing the resetting of online identities or accounts of users of Internet web pages. One method includes: receiving, through an electronic device, a request to reset login information to access a web page associated with the user's online account; determining that an IP address associated with the request is not identified as being suspicious; receiving user data intrinsic to the user's request; automatically verifying two or more values of the data intrinsic to the user's request as being indicative of a level of trust of the identity of the user; and transmitting, to the user over the Internet, a subset of options to reset the login information, the subset being selected based on the level of trust.

Claims (43)

1. A computer-implemented method for managing resetting of user accounts, the method comprising:

receiving, over a network, a request to reset login information to access an online account of a user;

comparing, at an online account server, a time of the request to reset login information to a preset time or amount of time;

receiving, over the network, intrinsic user data associated with the request to reset login information, wherein the intrinsic user data includes a device finger print and a type of browser used to make the request, and wherein the intrinsic user data includes values with different weights indicative of a level of trust of the identity of the user;

identifying, at the online account server, two or more values of the intrinsic user data; and

transmitting, over the network, a subset of options to reset the login information, wherein the subset of options to reset the login information is selected by the online account server based on the identified two or more values of the intrinsic user data, and wherein a full set of reset options are transmitted when the online account server determines that the identified two or more values result in a trusted pair.

2. The method of claim 1 , further comprising:

determining whether one or more unauthenticated reset requests have been received from an IP address associated with the request; and

determining whether the IP address associated with the request is not identified as being suspicious based on the step of determining whether one or more unauthenticated reset requests have been received from the IP address and the step of comparing the time the request to reset login information was received to the preset amount of time.

3. The method of claim 1 , wherein the login information is at least one of a user identifier of the user or a password of the user.

4. The method of claim 2 , wherein the step of determining that the IP address associated with the request is not identified as being suspicious further comprises comparing the IP address to a database of IP addresses known to be associated with malicious or aberrant entities.

5. The method of claim 1 , further wherein the intrinsic user data of the request is one or more of an IP address, a username, the type of browser used to make the request, an age of the online account, and one or more cookies.

6. The method of claim 1 , wherein the step of identifying two or more values of the intrinsic user data further comprises evaluating at least two of a time of the request, a frequency of the request, the type of browser used to make the request, an age of account, one or more cookies, and the device finger print.

7. The method of claim 1 , wherein the step of identifying two or more values of the intrinsic user data comprises evaluating a presence or absence of data of a screen name or related screen name of the user.

8. A system for managing resetting of online identities or accounts of users, the system including:

a data storage device storing instructions for managing resetting of online identities or accounts of users; and

a processor configured to execute the instructions to perform a method including:

receiving, over a network, a request to reset login information to access an online account of a user;

comparing, at an online account server, a time of the request to reset login information to a preset time or amount of time;

receiving, over the network, intrinsic user data associated with the request to reset login information, wherein the intrinsic user data includes a device finger print and a type of browser used to make the request, and wherein the intrinsic user data includes values with different weights indicative of a level of trust of the identity of the user;

identifying, at the online account server, two or more values of the intrinsic user data; and

transmitting, over the network, a subset of options to reset the login information, wherein the subset of options to reset the login information is selected by the online account server based on the identified two or more values of the intrinsic user data, and wherein a full set of reset options are transmitted when the online account server determines that the identified two or more values result in a trusted pair.

9. The system of claim 8 , wherein the processor is further configured to execute the instructions to perform the method including:

determining whether one or more unauthenticated reset requests have been received from an IP address associated with the request; and

determining whether the IP address associated with the request is not identified as being suspicious based on the step of determining whether one or more unauthenticated reset requests have been received from the IP address and the step of comparing the time the request to reset login information was received to the preset amount of time.

10. The system of claim 8 , wherein the login information is at least one of a user identifier of the user or a password of the user.

11. The system of claim 9 , wherein the step of determining that the IP address associated with the request is not identified as being suspicious further comprises comparing the IP address to a database of IP addresses known to be associated with malicious or aberrant entities.

12. The system of claim 8 , further wherein the intrinsic user data of the request is one or more of an IP address, a username, the type of browser used to make the request, an age of the online account, and one or more cookies.

13. The system of claim 8 , wherein the step of identifying two or more values of the intrinsic user data further comprises evaluating at least two of a time of the request, a frequency of the request, the type of browser used to make the request, an age of account, one or more cookies, and the device finger print.

14. A non-transitory computer-readable medium storing executable instructions that, when executed by a computer system, cause the computer system to perform a method for managing resetting of online identities or accounts of users, the method including:

receiving, over a network, a request to reset login information to access an online account of a user;

comparing, at an online account server, a time of the request to reset login information to a preset time or amount of time;

receiving, over the network, intrinsic user data associated with the request to reset login information, wherein the intrinsic user data includes a device finger print and a type of browser used to make the request, and wherein the intrinsic user data includes values with different weights indicative of a level of trust of the identity of the user;

identifying, at the online account server, two or more values of the intrinsic user data; and

transmitting, over the network, a subset of options to reset the login information, wherein the subset of options to reset the login information is selected by the online account server based on the identified two or more values of the intrinsic user data, and wherein a full set of reset options are transmitted when the online account server determines that the identified two or more values result in a trusted pair.

15. The computer-readable medium of claim 14 , further comprising:

determining whether one or more unauthenticated reset requests have been received from an IP address associated with the request; and

determining whether the IP address associated with the request is not identified as being suspicious based on the step of determining whether one or more unauthenticated reset requests have been received from the IP address and the step of comparing the time the request to reset login information was received to the preset amount of time.

16. The computer-readable medium of claim 14 , wherein the login information is at least one of a user identifier of the user or a password of the user.

17. The computer-readable medium of claim 15 , wherein the step of determining that the IP address associated with the request is not identified as being suspicious further comprises comparing the IP address to a database of IP addresses known to be associated with malicious or aberrant entities.

18. The computer-readable medium of claim 14 , further wherein the intrinsic user data of the request is one or more of an IP address, a username, the type of browser used to make the request, an age of the online account, and one or more cookies.

19. The computer-readable medium of claim 14 , wherein the step of identifying two or more values of the intrinsic user data further comprises evaluating at least two of a time of the request, a frequency of the request, the type of browser used to make the request, an age of account, one or more cookies, and the device finger print.

20. The computer-readable medium of claim 14 , wherein the step of identifying two or more values of the intrinsic user data comprises evaluating a presence or absence of data of a screen name or related screen name of the user.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 19, 2021
From: VERIZON MEDIA INC.
To: VERIZON PATENT AND LICENSING INC.
Reel/Frame 057453/0431 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 26, 2020
From: OATH INC.
To: VERIZON MEDIA INC.
Reel/Frame 054258/0635 →
CHANGE OF NAME Recorded Jun 29, 2017
From: AOL INC.
To: OATH INC.
Reel/Frame 043052/0401 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 1, 2016
From: MAXWELL, LACHLAN A.
To: AOL INC.
Reel/Frame 038763/0381 →
Continuity (2)
Continuation 14013972 · Aug 29, 2013
Related Publication 20160277371A1 · Sep 22, 2016