IP Library Granted Patent US 10,554,639
Granted Patent B2
US 10,554,639 · App. 16/167,119 · Granted Feb 4, 2020

Systems and methods for managing resetting of user online identities or accounts

Inventor: Lachlan A. Maxwell (Ashburn, VA)
Assignee: Oath Inc.
H04L63/06G06F21/45H04L51/28H04L61/2007H04L63/083H04L63/0876H04L63/14H04L67/306G06F2221/2131
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,554,639
App. No.
16/167,119
Granted
Feb 4, 2020
Kind
B2
Abstract

Systems and methods are disclosed for managing the resetting of online identities or accounts of users of Internet web pages. One method includes: receiving, through an electronic device, a request to reset login information to access a web page associated with the user's online account; determining that an IP address associated with the request is not identified as being suspicious; receiving user data intrinsic to the user's request; automatically verifying two or more values of the data intrinsic to the user's request as being indicative of a level of trust of the identity of the user; and transmitting, to the user over the Internet, a subset of options to reset the login information, the subset being selected based on the level of trust.

Claims (41)

1. A computer-implemented method for managing resetting of user accounts, the method comprising:

receiving, over a network, a request to reset login information to access an online account of a user;

comparing, at an online account server, a time of the request to reset login information to a preset time or amount of time;

receiving, over the network, intrinsic user data associated with the request to reset login information, wherein the intrinsic user data includes a device finger print and a type of browser used to make the request;

identifying, at the online account server, two or more values of the intrinsic user data, by evaluating a presence or absence of data of a screen name or related screen name of the user; and

transmitting, over the network, a subset of options to reset the login information, wherein the subset of options to reset the login information is selected by the online account server based on the identified two or more values of the intrinsic user data.

2. The method of claim 1 , further comprising:

determining whether one or more unauthenticated reset requests have been received from an IP address associated with the request; and

determining whether the IP address associated with the request is not identified as being suspicious based on the step of determining whether one or more unauthenticated reset requests have been received from the IP address and the step of comparing the time the request to reset login information was received to the preset amount of time.

3. The method of claim 1 , wherein the login information is at least one of a user identifier of the user or a password of the user.

4. The method of claim 2 , wherein the step of determining that the IP address associated with the request is not identified as being suspicious further comprises comparing the IP address to a database of IP addresses known to be associated with malicious or aberrant entities.

5. The method of claim 1 , further wherein the intrinsic user data of the request is one or more of an IP address, a username, the type of browser used to make the request, an age of the online account, and one or more cookies.

6. The method of claim 1 , wherein the step of identifying two or more values of the intrinsic user data further comprises evaluating at least two of a time of the request, a frequency of the request, the type of browser used to make the request, an age of account, one or more cookies, and the device finger print.

7. A system for managing resetting of online identities or accounts of users, the system including:

a data storage device storing instructions for managing resetting of online identities or accounts of users; and

a processor configured to execute the instructions to perform a method including:

receiving, over a network, a request to reset login information to access an online account of a user;

comparing, at an online account server, a time of the request to reset login information to a preset time or amount of time;

receiving, over the network, intrinsic user data associated with the request to reset login information, wherein the intrinsic user data includes a device finger print and a type of browser used to make the request;

identifying, at the online account server, two or more values of the intrinsic user data, by evaluating a presence or absence of data of a screen name or related screen name of the user; and

transmitting, over the network, a subset of options to reset the login information, wherein the subset of options to reset the login information is selected by the online account server based on the identified two or more values of the intrinsic user data.

8. The system of claim 7 , wherein the processor is further configured to execute the instructions to perform the method including:

determining whether one or more unauthenticated reset requests have been received from an IP address associated with the request; and

determining whether the IP address associated with the request is not identified as being suspicious based on the step of determining whether one or more unauthenticated reset requests have been received from the IP address and the step of comparing the time the request to reset login information was received to the preset amount of time.

9. The system of claim 7 , wherein the login information is at least one of a user identifier of the user or a password of the user.

10. The system of claim 8 , wherein the step of determining that the IP address associated with the request is not identified as being suspicious further comprises comparing the IP address to a database of IP addresses known to be associated with malicious or aberrant entities.

11. The system of claim 7 , further wherein the intrinsic user data of the request is one or more of an IP address, a username, the type of browser used to make the request, an age of the online account, and one or more cookies.

12. The system of claim 7 , wherein the step of identifying two or more values of the intrinsic user data further comprises evaluating at least two of a time of the request, a frequency of the request, the type of browser used to make the request, an age of account, one or more cookies, and the device finger print.

13. A non-transitory computer-readable medium storing executable instructions that, when executed by a computer system, cause the computer system to perform a method for managing resetting of online identities or accounts of users, the method including:

receiving, over a network, a request to reset login information to access an online account of a user;

comparing, at an online account server, a time of the request to reset login information to a preset time or amount of time;

receiving, over the network, intrinsic user data associated with the request to reset login information, wherein the intrinsic user data includes a device finger print and a type of browser used to make the request;

identifying, at the online account server, two or more values of the intrinsic user data, by evaluating a presence or absence of data of a screen name or related screen name of the user; and

transmitting, over the network, a subset of options to reset the login information, wherein the subset of options to reset the login information is selected by the online account server based on the identified two or more values of the intrinsic user data.

14. The computer-readable medium of claim 13 , further comprising:

determining whether one or more unauthenticated reset requests have been received from an IP address associated with the request; and

determining whether the IP address associated with the request is not identified as being suspicious based on the step of determining whether one or more unauthenticated reset requests have been received from the IP address and the step of comparing the time the request to reset login information was received to the preset amount of time.

15. The computer-readable medium of claim 13 , wherein the login information is at least one of a user identifier of the user or a password of the user.

16. The computer-readable medium of claim 14 , wherein the step of determining that the IP address associated with the request is not identified as being suspicious further comprises comparing the IP address to a database of IP addresses known to be associated with malicious or aberrant entities.

17. The computer-readable medium of claim 13 , further wherein the intrinsic user data of the request is one or more of an IP address, a username, the type of browser used to make the request, an age of the online account, and one or more cookies.

18. The computer-readable medium of claim 13 , wherein the step of identifying two or more values of the intrinsic user data further comprises evaluating at least two of a time of the request, a frequency of the request, the type of browser used to make the request, an age of account, one or more cookies, and the device finger print.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 19, 2021
From: VERIZON MEDIA INC.
To: VERIZON PATENT AND LICENSING INC.
Reel/Frame 057453/0431 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 26, 2020
From: OATH INC.
To: VERIZON MEDIA INC.
Reel/Frame 054258/0635 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 23, 2018
From: MAXWELL, LACHLAN A.
To: AOL INC.
Reel/Frame 047275/0328 →
CHANGE OF NAME Recorded Oct 23, 2018
From: AOL INC.
To: OATH INC.
Reel/Frame 047289/0065 →
Continuity (3)
Continuation 15169234 · May 31, 2016
Continuation 14013972 · Aug 29, 2013
Related Publication 20190058699A1 · Feb 21, 2019