IP Library Granted Patent US 11,727,108
Granted Patent B2
US 11,727,108 · App. 17/144,276 · Granted Aug 15, 2023

Systems and methods for providing secure passwords

Inventors: Jacob Learned (Brooklyn, NY); Michael Saia (New York, NY); Max Miracolo (Brooklyn, NY); Kaylyn S. Gibilterra (New York, NY)
Assignee: CAPITAL ONE SERVICES, LLC
G06F21/46G06F16/9035G06F16/951G06F21/33
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,727,108
App. No.
17/144,276
Granted
Aug 15, 2023
Kind
B2
Abstract

Systems and methods for identifying and remedying password insecurities are disclosed. The systems and methods include crawling websites to identify popular cultural terms and saving the cultural terms in a backend system. The cultural terms can include names of celebrities, politicians, movies, and the like. An identification system receives a password and compares the received password to the cultural terms using a similarity score. If the number of similarities is above a predetermined threshold, or if the number of differences is below a predetermined threshold, the identification system denies the password. A recommendation system can generate a suggested password, which can also be compared to the cultural terms. The systems and methods also provide the ability to calculate a similarity score if the cultural terms or passwords are saved in an encrypted or hashed format.

Claims (86)

1. A method for identifying and remedying password insecurity, the method comprising:

searching, with a backend system, a plurality of websites to identify a plurality of cultural terms;

storing, in a database of the backend system, the plurality of cultural terms;

receiving, at an identification system, a password;

comparing, with the identification system, the password to a first cultural term based on a first similarity score between the password and the first cultural term;

denying, with the identification system, the password based on the first similarity score;

transmitting, from the identification system, a first notification to a recommendation system indicating that the password has been denied;

generating, with the recommendation system, a suggested password, wherein generating the suggested password comprises:

generating, with the recommendation system, a first random human-readable password;

comparing, with the recommendation system, the first random human-readable password to the plurality of cultural terms based on a second similarity score between the plurality of cultural terms and the first random human-readable password; and either:

approving, with the recommendation system, the first random human-readable password based on the second similarity score;

or

denying, with the recommendation system, the first random human-readable password based on the second similarity score; and

generating, with the recommendation system, a second random human-readable password; and

transmitting, from the recommendation system, the suggested password to a user device.

2. The method of claim 1 , further comprising:

deactivating, with the identification system, the password when the password has been denied.

3. The method of claim 1 , wherein receiving a password comprises at least one of:

receiving, at the identification system, the password from a user device logging into an account associated with the identification system; or

receiving, with the identification system, the password from a plurality of passwords stored in the database.

4. The method of claim 1 , further comprising:

hashing, by the backend system, the first cultural term with a first hash function to create a first hashed cultural term; and

hashing, with the identification system, the password with the first hash function to create a hashed password;

wherein comparing the password to the first cultural term comprises comparing the hashed password to the first hashed cultural term.

5. The method of claim 1 , wherein:

the first similarity score is determined by calculating a quantity of matching characters between the password and the first cultural term; and

the password is denied if the quantity of matching characters is greater than a predetermined quantity.

6. The method of claim 5 , further comprising:

replacing at least a portion of characters in the first cultural term with a different letter, number, or symbol to create a modified cultural term; or

adding one or more characters to the first cultural term to create the modified cultural term;

wherein calculating the quantity of matching characters between the password and the first cultural term comprises calculating a quantity of matching characters between the password and the modified cultural term.

7. A system for identifying and remedying password insecurity, the system comprising:

one or more processors; and

a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, cause the system to:

communicate with an external authentication system via an application programming interface;

receive a password from the external authentication system;

search a database comprising a plurality of cultural terms;

compare the password to the plurality of cultural terms based on a similarity score between the password and the plurality of cultural terms; and either:

approve the password based on the similarity score;

or

deny the password based on the similarity score; and

generate a suggested password.

8. The system of claim 7 , wherein:

the plurality of cultural terms is hashed with a first hash function; and

the instructions further cause the system to hash the password with the first hash function and prior to comparing the password to the plurality of cultural terms.

9. The system of claim 7 , wherein:

the similarity score is determined by calculating a quantity of matching characters between the password and plurality of cultural terms; and

the password is denied if the quantity of matching characters is greater than a predetermined quantity.

10. The system of claim 7 , wherein generating the suggested password comprises combining at least a portion of a first cultural term with at least a portion of a second cultural term of the plurality of cultural terms.

11. A system for identifying password insecurity, the system comprising:

one or more processors; and

a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, cause the system to:

search a plurality of websites to identify a first cultural term;

store the first cultural term in a database;

hash the first cultural term with a first hash function to create a first hashed cultural term;

communicate with an external authentication system via an application programming interface;

receive, from the external authentication system via the application programming interface, a password;

hash the password with the first hash function to create a hashed password;

compare the hashed password to the first hashed cultural term; and

approve or deny the password based on a similarity score.

12. The system of claim 11 , wherein, when the password has been denied by the system, the instructions further cause the system to:

generate a suggested password comprising a human-readable string of characters; and

transmit the suggested password to a user device.

13. The system of claim 12 , wherein the instructions further cause the system to:

hash the suggested password with the first hash function to create a hashed suggested password;

compare the hashed suggested password to the first hashed cultural term; and

approve the suggested password based on the similarity score.

14. The system of claim 12 , wherein generating the suggested password comprises combining at least a portion of a second cultural term with at least a portion of a third cultural term from the database.

15. The system of claim 11 , wherein receiving the password comprises:

receiving the password from a user device logging into an account associated with the system; or

receiving the password from a plurality of passwords stored in the database.

16. The system of claim 11 , wherein:

the similarity score is determined by calculating a quantity of matching characters between the password and the first cultural term; and

the password is denied if the quantity of matching characters is greater than a predetermined quantity.

17. The system of claim 16 , wherein the instructions further cause the system to:

replace at least a portion of characters in the first cultural term with a different letter, number, or symbol to create a modified cultural term; or

add one or more characters to the first cultural term to create the modified cultural term;

wherein calculating the quantity of matching characters between the password and the first cultural term comprises calculating a quantity of matching characters between the password and the modified cultural term.

18. The system of claim 7 , the suggested password comprising a human-readable string of characters.

19. The system of claim 7 , wherein generating the suggested password comprises:

generating a first random human-readable password;

comparing the first random human-readable password to the plurality of cultural terms on a secondary similarity score between the plurality of cultural terms and the first random human-readable password; and either:

approving the first random human-readable password based on the secondary similarity score;

or

denying the first random human-readable password based on the second similarity score; and

generating a second random human-readable password.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 8, 2021
From: LEARNED, JACOB; SAIA, MICHAEL; MIRACOLO, MAX; GIBILTERRA, KAYLYN S.
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 054854/0353 →
Continuity (1)
Related Publication 20220222332A1 · Jul 14, 2022
Cited By (2)
US 12,406,052 US 12,437,054