IP Library Granted Patent US 8,539,599
Granted Patent B2
US 8,539,599 · App. 12/980,006 · Granted Sep 17, 2013

Password protection using personal information

Inventors: Laurent Gomez (Le Cannet, FR); Slim Trabelsi (Nice, FR); Aymen Mouelhi (Sophia Antipolis, FR)
Assignee: SAP AG
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,539,599
App. No.
12/980,006
Granted
Sep 17, 2013
Kind
B2
Abstract

Provided personal information from a user may be determined, the provided personal information being associated with network publication thereof. A comparison of the provided personal information with password-related information may be performed. Based on the comparison, it may be determined that a risk level associated with the network publication relative to password security of at least one password associated with the password-related information exceeds a predetermined risk level. The user may be notified that the network publication of the provided personal information is associated with potential compromise of the password security of the at least one password.

Claims (31)

1. A system including instructions recorded on a computer-readable storage medium and executable by at least one processor of at least one computing device, the system comprising:

a content inspector configured to cause the at least one processor to detect provided personal information from a single user and stored in a content repository, the provided personal information being associated with network publication thereof;

a password inspector configured to cause the at least one processor to detect password related information including a plurality of passwords of the single user, each password associated with at least one computing resource, the plurality of passwords stored in a password repository; and

a comparator configured to cause the at least one processor to perform, in response to a requested network publication of the provided personal information, a comparison of the provided personal information with the password-related information, and to determine, based on the comparison, that a risk level associated with the requested network publication relative to password security of at least one password of the plurality of passwords exceeds a predetermined risk level, and further configured to notify the user that the requested network publication of the provided personal information is associated with potential compromise of the password security of the at least one password of the plurality of passwords.

2. The system of claim 1 , wherein the content inspector is configured to scan identified information sources and to execute one or more algorithms for detecting the provided personal information therein.

3. The system of claim 1 , wherein the password inspector is configured to detect the password related information in conjunction with password creation or management by the user.

4. The system of claim 1 , wherein the requested network publication includes uploading of the provided personal information using an application.

5. The system of claim 4 , wherein the application includes a browser application.

6. The system of claim 1 , wherein the password-related information includes at least one of a secret question, secret answer, password hint, or username associated with at least one of the plurality of passwords.

7. The system of claim 1 , wherein the comparator is configured to determine the risk level based on a similarity analysis between the provided personal information and the password related information.

8. The system of claim 1 , wherein the comparator is configured to notify the user including issuing a warning identifying the requested network publication as potentially compromising the password security of the at least one password and requesting confirmation from the user to proceed with the network publication of the provided personal information.

9. The system of claim 1 , wherein the comparator is configured to notify the user including issuing a warning identifying the requested network publication as potentially compromising the password security of the at least one password and requesting confirmation from the user to proceed with an updating of the password related information.

10. The system of claim 1 , wherein the comparator is configured to perform the comparison including comparing hashed versions of the provided personal information and the password related information.

11. A computer-implemented method comprising:

configuring at least one processor and/or circuit to perform the functions of

detecting provided personal information from a single user and stored in a content repository, the provided personal information being associated with network publication thereof;

detecting password related information including a plurality of passwords of the single user, each password associated with at least one computing resource, the plurality of passwords stored in a password repository;

performing a comparison of the provided personal information with the password-related information;

determining, based on the comparison, that a risk level associated with the requested network publication relative to password security of at least one password of the plurality of passwords exceeds a predetermined risk level; and

notifying the user that the requested network publication of the provided personal information is associated with potential compromise of the password security of the at least one password of the plurality of passwords.

12. The method of claim 11 , wherein the password related information is detected in conjunction with password creation or management by the user.

13. The method of claim 11 , wherein the risk level is based on a similarity analysis between the provided personal information and the password related information.

14. A computer program product, the computer program product being tangibly embodied on a non-transitory computer-readable storage medium and comprising instructions that, when executed, are configured to:

detect provided personal information from a single user and stored in a content repository, the provided personal information being associated with network publication thereof;

detect password related information including a plurality of passwords of the single user, each password associated with at least one computing resource, the plurality of passwords stored in a password repository;

perform a comparison of the provided personal information with the password-related information;

determine, based on the comparison, that a risk level associated with the requested network publication relative to password security of at least one password of the plurality of passwords exceeds a predetermined risk level; and

notify the user that the requested network publication of the provided personal information is associated with potential compromise of the password security of the at least one password of the plurality of passwords.

15. The computer program product of claim 14 , wherein the password related information is detected in conjunction with password creation or management by the user.

16. The computer program product of claim 14 , wherein the notifying of the user includes issuing a warning identifying the requested network publication as potentially compromising the password security of the at least one password and requesting confirmation from the user to proceed with the requested network publication of the provided personal information.

17. The computer program product of claim 14 , wherein the notifying of the user includes issuing a warning identifying the requested network publication as potentially compromising the password security of the at least one password and requesting confirmation from the user to proceed with an updating of the password related information.

Assignments (2)
CHANGE OF NAME Recorded Aug 26, 2014
From: SAP AG
To: SAP SE
Reel/Frame 033625/0334 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 3, 2011
From: GOMEZ, LAURENT; TRABELSI, SLIM; MOUELHI, AYMEN
To: SAP AG
Reel/Frame 026218/0695 →
Continuity (1)
Related Publication 20120167225A1 · Jun 28, 2012