User login credential warning system
Virtually every online account requires login credentials like username and password for access. Using different credentials for each account can reduce the likelihood of unauthorized access to these accounts. Remembering all the different credentials, however, can be a challenge and it is not uncommon for a user to mistakenly provide credentials to a site that are for another, sensitive site. Accordingly, a system for warning a user of such an error is provided. The system includes a browser plugin that responds to a user entering their credentials at a requesting site by looking up an identifier of a trusted site associated with the user's credentials. The identifiers of the requesting and trusted sites are compared, and if they do not match, the browser plugin blocks the user from submitting their credentials to the requesting site. Advantageously, the system reduces the likelihood that credentials to sensitive accounts are provided by accident.
1. A system for warning a user as to whether interaction with a site is safe or unsafe, the system comprising:
a data store comprising trusted site identifiers of trusted sites; and
a processor coupled to a non-transitory memory containing instructions executable by the processor to cause the system to:
query the data store to obtain one or more trusted site identifiers of a trusted site including a screen image of the trusted site in response to a requesting site prompting a user for sensitive information;
compare the trusted site identifiers with a corresponding number of identifiers of the requesting site including graphically comparing a screen image of the requesting site to the screen image of the trusted site to determine whether the requesting site is safe or unsafe based on the comparison of the trusted site identifiers with the requesting site identifiers including the graphical comparison of the screen image of the requesting site to the screen image of the trusted site; and
permit the user to submit sensitive information if the requesting site is determined to be safe or prevent the user from submitting sensitive information if the requesting site is determined to be unsafe, wherein the comparing includes:
determining a suspicion score based on the comparison of the trusted site identifiers with the requesting site identifiers including the graphical comparison of the screen image of the requesting site to the screen image of the trusted site; and
determining whether the requesting site is either safe or unsafe based on the suspicion score.
2. The system of claim 1 , wherein the sensitive information comprises user login credentials.
3. The system of claim 2 , wherein the trusted site is associated with the user login credentials.
4. The system of claim 3 , wherein the querying includes querying the data store as the user is entering in each character of user login credentials.
5. The system of claim 1 , wherein determining whether the requesting site is either safe or unsafe includes comparing the suspicion score to a threshold.
6. The system of claim 1 , wherein the requesting site is identified as unsafe when the suspicion score is in a specified range of values.
7. The system of claim 1 , further comprising:
providing a notification to the user indicating whether the requesting site is safe or unsafe.
8. The system of claim 1 , wherein the suspicion score is a similarity metric determined based on a degree of similarity between a display representation of the requesting site identifier and a display representation of the trusted site identifier.
9. The system of claim 1 , wherein the preventing of the user from submitting sensitive information comprises blocking the user from entering the sensitive information into an associated field provided by the requesting site when the requesting site identifiers do not match the trusted site identifiers.
10. The system of claim 1 , wherein the requesting site identifiers and trusted site identifiers comprise any one of Uniform Resource Locators, Uniform Resource Identifiers, Internet Protocol addresses, domain names, and a combination thereof.
11. The system of claim 7 , wherein the providing of the notification to the user that the requesting site is either safe or unsafe comprises warning the user that any sensitive information entered in a field provided by the requesting site is are restricted to another, sensitive site based on the comparison of the requesting site identifiers and trusted site identifiers.
12. A method for warning a user as to whether interaction with a site is safe or unsafe, the method comprising:
providing a system comprising a processor coupled to a non-transitory memory containing instructions executable by the processor to cause the system to:
query a data store, the data store comprising trusted site identifiers of trusted sites, to obtain one or more trusted site identifiers of a trusted site in response to a requesting site prompting a user for sensitive information;
compare the trusted site identifiers with a corresponding number of identifiers of the requesting site including graphically comparing a screen image of the requesting site to the screen image of the trusted site to determine whether the requesting site is safe or unsafe based on the comparison of the trusted site identifiers with the requesting site identifiers including the graphical comparison of the screen image of the requesting site to the screen image of the trusted site; and
permit the user to submit sensitive information if the requesting site is determined to be safe or prevent the user from submitting sensitive information if the requesting site is determined to be unsafe, wherein the comparing includes:
determining a suspicion score based on the comparison of the trusted site identifiers with the requesting site identifiers including the graphical comparison of the screen image of the requesting site to the screen image of the trusted site; and
determining whether the requesting site is either safe or unsafe based on the suspicion score.
13. The method of claim 12 , wherein the sensitive information comprises user login credentials.
14. The method of claim 13 , wherein the trusted site is associated with the user login credentials.
15. The method of claim 14 , wherein the querying includes querying the data store as the user is entering in each character of user login credentials.
16. The method of claim 12 , wherein determining whether the requesting site is either safe or unsafe includes comparing the suspicion score to a threshold.
17. The method of claim 12 , further comprising:
providing a notification to the user indicating whether the requesting site is safe or unsafe.
18. The method of claim 12 , wherein the suspicion score is a similarity metric determined based on a degree of similarity between a display representation of the requesting site identifier and a display representation of the trusted site identifier.