Authentication Misappropriation Scoring for Credential Lockout

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current authentication systems fail to effectively distinguish between incorrect user credentials entered by authorized users and those attempted by third parties attempting to misappropriate access, leading to potential security breaches.

Innovation Solution

A system that evaluates multiple misappropriation factors, including session duration, log-on attempt number, closeness to valid credentials, behavior match scores, and device trustworthiness, to generate a cumulative misappropriation score, which enforces a credential lockout when the score exceeds a threshold.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the system denies access for any incorrect credential submission, then security is maintained, but legitimate users may be locked out due to typing errors or forgotten credentials

Engineering Contradiction:

ImprovesecurityVSAvoiduser access

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system applies different evaluation criteria to different log-on attempts by analyzing the specific characteristics of each attempt (time of day, device location, credential pattern, user behavior history) to determine whether to enforce strict security or allow flexible access

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system dynamically adjusts the misappropriation score threshold and evaluation parameters based on the accumulated score from multiple attempts, changing the security response from permissive to restrictive as the likelihood of misappropriation increases

Inventive Principle:

Principle #35Parameter changes

2Ease of operation

If the system allows multiple log-on attempts, then legitimate users can correct errors, but third parties can perform brute force attacks to guess credentials

Engineering Contradiction:

Improveuser accessVSAvoidbrute force attack risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system dynamically adjusts the misappropriation score threshold and evaluation criteria based on the accumulated score from multiple attempts, changing security responses from permissive to restrictive as misappropriation likelihood increases

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system continuously monitors and accumulates misappropriation scores from each log-on attempt, using this feedback to dynamically adjust security responses and determine when to enforce credential lockout

Inventive Principle:

Principle #23Feedback

3Reliability

If the system implements credential lockout after failed attempts, then misappropriation is prevented, but legitimate users experience service disruption

Engineering Contradiction:

ImprovesecurityVSAvoidservice availability

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system applies credential lockout selectively based on the misappropriation score, affecting only accounts showing signs of misappropriation attempts while leaving legitimate accounts unaffected

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system dynamically adjusts the misappropriation score threshold and evaluation parameters based on accumulated attempt data, changing security responses to balance lockout enforcement with service continuity

Inventive Principle:

Principle #35Parameter changes

4Reliability

If the system monitors and analyzes log-on attempt patterns, then misappropriation can be detected, but system complexity and processing overhead increase

Engineering Contradiction:

Improvemisappropriation detectionVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system uses a unified misappropriation score framework that evaluates multiple factors (time, device, credential pattern, user history) through a single scoring mechanism, reducing complexity while maintaining comprehensive detection capability

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS11341231B2Data security system for analyzing historical authentication entry attempts to identify misappropriation of security credential and enforce password change

Publication Date: 2022.05.24 BANK OF AMERICA CORP

AI summary

Embodiments of the invention are directed to a system, method, or computer program product structured for identifying potential misappropriation attempts into a technology resource and enforcing a credential lockout. In some embodiments, a system is structured for receiving a user credential associated with a first log-on attempt to access a technology resource, determining whether the user credential matches a stored valid credential, and, if it does not match, performing a misappropriation assessment. The misappropriation assessment includes evaluating and weighting a plurality of potential misappropriation factors, determining a misappropriation score from the weighted plurality of potential misappropriation factors, and adding the misappropriation score to a cumulative misappropriation score for the technology resource. The system is also structured for determining whether the cumulative misappropriation score has reached or exceeded a threshold and, if it has, enforcing a credential lockout for the technology resource.