Account management using account activity usage restrictions
Methods, systems, and media are shown for reducing the vulnerability of user accounts to attack that involve creating a rule for a user account that includes a permitted parameter corresponding to a user account activity property, monitoring the account activity of the user account. If it is determined that account activity property is inconsistent with the permitted parameter, then the user account is disabled. An example of a permitted parameter is a permitted time period, such as a start time, an end time, a recurrence definition, a days of the week definition, a start date, an end date, and a number of occurrences definition. Other examples are a physical parameter, such as a permitted geographic location, device, or network, or a permitted usage parameter, such as a permitted application, data access, or domain.
1. A computer-implemented method for managing user accounts in a remote service provider system comprising:
creating a rule for a user account, the rule including a parameter corresponding to a property of login attempts to the user account, the parameter defining a predefined schedule of reoccurring time periods when the login attempts are permitted;
determining that the property of a new login attempt to the user account is inconsistent with the parameter based on at least one of a date or a time of the new login attempt being outside the reoccurring time periods; and
based on the determination that the property of the new login attempt to the user account is inconsistent with the parameter, rejecting the new login attempt to the user account.
2. The computer-implemented method of claim 1 , wherein the reoccurring time periods include a start time and an end time that reoccurs daily.
3. The computer-implemented method of claim 1 , wherein the reoccurring time periods include a start time and an end time that reoccurs weekly.
4. The computer-implemented method of claim 1 , wherein the reoccurring time periods include a start time and an end time that reoccurs monthly.
5. The computer-implemented method of claim 1 , wherein the reoccurring time periods include a start time and an end time that reoccurs yearly.
6. A remote service provider system, the remote service provider system comprising:
one or more processors; and
at least one computer storage medium having computer executable instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to:
create a rule for a user account, the rule including a parameter corresponding to a property of login attempts to the user account, the parameter defining a predefined schedule of reoccurring time periods when the login attempts are permitted;
determine that the property of a new login attempt to the user account is inconsistent with the parameter based on at least one of a date or a time of the new login attempt being outside the reoccurring time periods; and
based on the determination that the property of the new login attempt to the user account is inconsistent with the parameter, reject the new login attempt to the user account.
7. The remote service provider system of claim 6 , wherein the reoccurring time periods include a start time and an end time that reoccurs daily.
8. The remote service provider system of claim 6 , wherein the reoccurring time periods include a start time and an end time that reoccurs weekly.
9. The remote service provider system of claim 6 , wherein the reoccurring time periods include a start time and an end time that reoccurs monthly.
10. The remote service provider system of claim 6 , wherein the reoccurring time periods include a start time and an end time that reoccurs yearly.
11. A computer storage medium having computer executable instructions stored thereon which, when executed by one or more processors, cause the one or more processors to perform operations comprising:
creating a rule for a user account, the rule including a parameter corresponding to a property of login attempts to the user account, the parameter defining a predefined schedule of reoccurring time periods when the login attempts are permitted;
determining that the property of a new login attempt to the user account is inconsistent with the parameter based on at least one of a date or a time of the new login attempt being outside the reoccurring time periods; and
based on the determination that the property of the new login attempt to the user account is inconsistent with the parameter, rejecting the new login attempt to the user account.
12. The computer storage medium of claim 11 , wherein the reoccurring time periods include a start time and an end time that reoccurs daily.
13. The computer storage medium of claim 11 , wherein the reoccurring time periods include a start time and an end time that reoccurs weekly.
14. The computer storage medium of claim 11 , wherein the reoccurring time periods include a start time and an end time that reoccurs monthly.
15. The computer storage medium of claim 11 , wherein the reoccurring time periods include a start time and an end time that reoccurs yearly.