Random password forced failure
A forced failure mode may be activated if a predetermined number of incorrect passwords are received at an apparatus. In forced failure mode, the apparatus determines if a forced failure is to be performed in response to a received password. If a forced failure is to be performed, an access failure is forced. When subsequent passwords are received the determine operation is repeated. When it is determined that a forced failure is not to be performed in response to a password entry, access may be granted if the password is correct, or denied if the password is incorrect. The apparatus may then leave forced failure mode or repeat forced failure mode. The apparatus may be configured in a mobile device and the access attempted may be unlocking of the device. The apparatus may also be configured in a network server and the access attempted may be network access.
1. An apparatus comprising:
one or more processors; and,
memory in communication with the one or more processors, the memory comprising code that, when executed, causes the one or more processors to control the apparatus to:
receive a password for access;
determine if an index tracking a number of forced failures that have been previously performed indicates that a forced failure is to be performed in response to the received password by determining if the index is less than a desired number of forced failures wherein the forced failure comprises an access failure that is forced for any password received, whether the password is correct or incorrect; and,
if the index indicates a forced failure is to be performed:
force an access failure;
increment the index, and,
repeat the receive and the determine operations; or,
if the index does not indicate a forced failure is to be performed:
grant the access if the password is correct.
2. The apparatus of claim 1 , wherein apparatus includes a user interface in communication with the one or more processors, and the code further causes the one or more processors to control the apparatus to receive input indicating the desired number of forced failures at the user interface and store the selected number of forced failures in the memory.
3. The apparatus of claim 1 , wherein the code further causes the one or more processors to receive the password for access by controlling the apparatus to increment the index tracking the number of forced failures in response to receiving the password.
4. The apparatus of claim 1 , wherein the apparatus comprises a device and the access comprises unlocking the device.
5. The apparatus of claim 1 , wherein the apparatus comprises a device controlling a network, and the access comprises access to the network.
6. The apparatus of claim 1 , wherein the receiving and determining are performed while the apparatus is in a second mode of operation, and the code further causes the one or more processors, while the apparatus is in a first mode of operation, to control the apparatus to:
determine if an incorrect password has been received for the access while in the first mode;
increment an index tracking incorrect passwords if an incorrect password has been received;
determine if the index tracking incorrect passwords indicates that a selected number of incorrect passwords has been reached; and,
activate the second mode of operation if the selected number of incorrect passwords has been reached.
7. A method comprising:
determining if an index tracking a number of forced failures that have been previously forced indicates that a forced failure is to be performed in response to the received password by determining if the index is less than a desired number of forced failures, wherein the forced failure comprises an access failure that is forced for any password received, whether the password is correct or incorrect: and,
if the index indicates a forced failure is to be performed:
forcing an access failure;
incrementing the index; and,
repeating the receiving and the determining operations; or
if the parameter index does not indicate a forced failure is to be performed: granting the access if the password is correct.
8. The method of claim 7 , wherein the receiving and determining are performed while the apparatus is in a second mode of operation, and the method further comprises, while the apparatus is in a first mode of operation:
determining if an incorrect password has been received for the access;
incrementing, if an incorrect password has been received, an index tracking incorrect passwords;
determining if the index tracking incorrect passwords indicates that a selected number of incorrect passwords has been reached; and,
activating the second mode of operation if the selected number of incorrect passwords has been reached.
9. A device comprising: one or more processors; and memory in communication with the one or more processors, the memory comprising code that, when executed, causes the one or more processors to control the device to:
provide an interface for access to a network;
receive a password at the interface;
determine if an index tracking a number of forced failures that have been previously forced indicates that a forced failure is to be performed in response to the received password by determining if the index is less than a desired number of forced failures, wherein the forced failure comprises an access failure that is forced for any password received, whether the password is correct or incorrect; and,
if the index indicates the forced failure response is to be performed:
force an access failure at the device;
increment the index; and,
repeat the receive and the determine operations; or,
if the index does not indicate a forced failure response is to be performed:
send the password from the device to the network.
10. The device of claim 9 , wherein the device comprises a mobile device and the code comprises an application on the mobile device.