Computer-based platforms or systems, computing devices or components and/or computing methods for technological applications involving provision of a portal for managing user accounts having a login portal configured to defend against credential replay attacks
Systems and methods associated with computer-implemented online portals having secure login processing features are disclosed. In one embodiment, an exemplary method may comprise receiving a login request including processing user credentials and capturing browser print information associated with the login request, validating the login request via analyzing current login attributes and/or an attributes checksum derived from the browser print information captured during the login request and assessing the browser print information for spoofed browser attributes, redirecting an access attempt that is flagged as the potential replay attack to an enhanced security process, and allowing or denying login to customer accounts or information associated with the user credentials based on the enhanced security process.
1. A computer-implemented method of improved login security, the method comprising:
collecting, by at least one processor, prior login data associated with prior logins by one or more users;
processing, by the at least one processor, a login request, including capturing user credentials and browser print information associated with the login request, the browser print information comprising current login attributes and an attributes checksum, wherein the attributes checksum is computed based on a set of one or more alphanumeric strings of data that are derived from baseline data of the browser print information;
validating, by the at least one processor, the login request, including analyzing one or both of the current login attributes and the attributes checksum derived from the browser print information captured during the login request, wherein the analyzing comprises assessing the browser print information for spoofed browser attributes including:
determining whether a captured timestamp of the current login data is stale or missing;
determining whether the attributes checksum of the login request is invalid or missing; and
flagging the login request as a potential replay attack when at least one of the captured timestamp is stale, and the captured timestamp is missing, the attributes checksum is invalid, and the attributes checksum is missing;
redirecting, by the at least one processor, an access attempt that is flagged as the potential replay attack to an enhanced security process, wherein the enhanced security process includes generating and sending second factor authentication; and
allowing or denying, by the at least one processor, login to customer accounts or information associated with the user credentials based on the enhanced security process.
2. The method of claim 1 wherein the current login data comprises information regarding the login request including time information (timestamp), date information, browser information, network information, device information.
3. The method of claim 1 wherein the attributes checksum comprises a dynamic, time-varying checksum that is generated at a time the browser print is created, wherein the attributes checksum is computed as a function of the login attributes associated with the browser print created.
4. The method of claim 1 wherein the second-factor authentication comprises initiating communication to an entity or device associated with the login request, the second factor authentication requiring further proof of the user's identity prior to granting access.
5. The method of claim 1 further comprising:
executing a Javascript collector to capture the browser print information.
6. The method of claim 5 wherein the attributes checksum comprises a dynamic, time-varying checksum that is generated by the Javascript collector at a time the browser print is created, wherein the Javascript collector computes the attributes checksum as a function of the login attributes associated with the browser print created.
7. The method of claim 1 wherein the step of processing the login request further comprises calculating the attributes checksum using a time-varying hash of a timestamp captured with the current login attributes.
8. The method of claim 1 wherein the step of processing the login request further comprises calculating the attributes checksum using a hash generated from non-static data captured with the current login attributes.
9. The method of claim 1 wherein the processing/receiving the login request further comprises calculating the attributes checksum using baseline browser attributes derived from the browser print information by means of an algorithm, wherein the algorithm comprises:
calculating a timestamp from the baseline browser attributes associated with the browser print; and
calculating a checksum from the baseline browser attributes associated with the browser print;
wherein the calculated timestamp and checksum are calculated on the server side and compared against corresponding data, received with the login request, ostensibly calculated from the same baseline browser attributes captured on a client side at a time when the user initiated the login request.
10. The method of claim 9 , wherein the checksum is calculated based on at least one time-varying attribute of the baseline browser attributes.
11. A computer-implemented method of improved login security, the method comprising:
processing, by at least one processor, a login request, including capturing user credentials and browser print information associated with the login request, the browser print information comprising current login attributes and an attributes checksum, wherein the attributes checksum is computed based on a set of one or more alphanumeric strings of data that are derived from baseline data of the browser print information;
validating, by the at least one processor, the login request, including analyzing one or both of the current login attributes and the attributes checksum derived based on at least one time-varying value associated with the browser print information captured during the login request, wherein the analyzing comprises assessing the browser print information for spoofed browser attributes including:
determining whether a captured timestamp of the current login data is stale or missing;
determining whether the attributes checksum of the login request is invalid or missing; and
flagging the login request as a potential replay attack when at least one of the captured timestamp is stale, and the captured timestamp is missing, the attributes checksum is invalid, and the attributes checksum is missing;
redirecting, by the at least one processor, an access attempt that is flagged as the potential replay attack to an enhanced security process, wherein the enhanced security process includes initiating second factor authentication; and
allowing or denying, by the at least one processor, login to customer accounts or information associated with the user credentials based on the enhanced security process.
12. The method of claim 11 wherein the current login data comprises information regarding the login request including time information (timestamp), date information, browser information, network information, device information, and other information.
13. The method of claim 11 wherein the attributes checksum comprises a dynamic, time-varying checksum that is generated at a time the browser print is created, wherein the attributes checksum is computed as a function of the login attributes associated with the browser print created.
14. The method of claim 11 wherein the second-factor authentication comprises initiating communication to an entity or device associated with the login request, the second factor authentication requiring further proof of the user's identity prior to granting access.
15. The method of claim 11 further comprising:
executing a Javascript collector to capture the browser print information.
16. The method of claim 15 wherein the attributes checksum comprises a dynamic, time-varying checksum that is generated by the Javascript collector at a time the browser print is created, wherein the Javascript collector computes the attributes checksum as a function of the login attributes associated with the browser print created.
17. The method of claim 11 wherein the step of processing the login request further comprises calculating the attributes checksum using a time-varying hash of a timestamp captured with the current login attributes.
18. The method of claim 11 wherein the step of processing the login request further comprises calculating the attributes checksum using a hash generated from non-static data captured with the current login attributes.
19. The method of claim 11 wherein the processing/receiving the login request further comprises calculating the attributes checksum using baseline browser attributes derived from the browser print information by means of an algorithm, wherein the algorithm comprises:
calculating a timestamp from the baseline browser attributes associated with the browser print; and
calculating a checksum from the baseline browser attributes associated with the browser print;
wherein the calculated timestamp and checksum are calculated on the server side and compared against corresponding data, received with the login request, ostensibly calculated from the same baseline browser attributes captured on a client side at a time when the user initiated the login request.
20. The method of claim 19 wherein the checksum is calculated based on the at least one time-varying value that is contained within the baseline browser attributes.