Generation of secure passwords in real-time using personal data

Patent metadata

Field	Value
Publication number	US-10325091-B2
Application number	US-201615246625-A
Country	US
Kind code	B2
Filing date	Aug 25, 2016
Priority date	Aug 25, 2016
Publication date	Jun 18, 2019
Grant date	Jun 18, 2019

Abstract

An example system includes a processor to receive personal data including passwords and personal information associated with a user. The processor is to also compute patterns for the passwords based on the personal data. The processor is to further receive a plurality of characters for a proposed password. The processor is to also detect that the proposed password is unsecure based on the personal data and the computed patterns. The processor is to generate a secure password in real-time based on the personal data and the proposed password.

First claim

What is claimed is:

1. A system, comprising a processor to:
receive personal data comprising a list of previously used and currently used passwords and personal information associated with a user;
compute patterns comprising regular expressions for the previously used and currently used passwords based on a comparison of one or more characteristics of the previously used and currently used passwords with the personal information, wherein the processor is to extract nouns from the personal information and extract entities from the nouns, wherein the regular expressions comprise different regular expressions over the extracted entities combined with other random characters;
receive a plurality of characters for a proposed password for the user;
detect that the proposed password is unsecure based on a calculated security score not exceeding a predetermined threshold security score, wherein the calculated security score is based on a total number of the plurality of characters and a comparison of the plurality of characters with the personal information associated with the user and the computed patterns; and
generate a secure password in real-time based on the personal information associated with the user and the proposed password.

2. The system of claim 1 , wherein the processor is to detect that the proposed password is unsecure in real-time as each character of the proposed password is received.

3. The system of claim 1 , wherein the secure password comprises the personal information that is highlighted when displayed.

4. The system of claim 1 , wherein the processor is to:
receive an additional character for the proposed password;
detect that the proposed password with the additional character is unsecure; and
generate an updated secure password based on the personal information and the proposed password with the additional character.

5. The system of claim 1 , wherein the processor is to generate a list of secure passwords including the secure password.

6. The system of claim 1 , wherein the secure password comprises a number of characters that exceeds a predetermined threshold number of characters and a pattern that does not match the computed patterns.

7. The system of claim 1 , wherein the processor is to receive a selection of the secure password or an edit to the proposed password.

8. A computer-implemented method, comprising:
receiving, via a processor, personal data comprising a list of previously used and currently used passwords and personal information associated with a user;
computing, via the processor, patterns comprising regular expressions for the passwords based on a comparison of one or more characteristics of the previously used and currently used passwords with the personal information, wherein the processor is to extract nouns from the personal information and extract entities from the nouns, wherein the regular expressions comprise different regular expressions over the extracted entities combined with other random characters;
receiving, via the processor, a plurality of characters for a proposed password for the user;
detecting, via the processor, that the proposed password is unsecure based on a calculated security score not exceeding a predetermined threshold security score, wherein the security score is calculated based on a total number of the plurality of characters and a comparison of the plurality of characters with the personal information associated with the user and the computed patterns; and
generating, via the processor, a secure password in real-time based on the personal information associated with the user and the proposed password.

9. The computer-implemented method of claim 8 , comprising receiving a selection of the secure password or an edit to the proposed password.

10. The computer-implemented method of claim 8 , comprising highlighting characters in the secure password associated with personal information.

11. The computer-implemented method of claim 8 , comprising
receiving, via the processor, an additional character for the proposed password;
detecting, via the processor, that the proposed password with the additional character is unsecure; and
generating, via the processor, an updated secure password based on the personal information and the proposed password with the additional character.

12. The computer-implemented method of claim 8 , comprising prompting whether a portion of a proposed password is based on the personal information and receiving a confirmation that the portion is based on the personal information.

13. The computer-implemented method of claim 8 , wherein detecting that the proposed password is unsecure further comprises calculating a security score for the proposed password based on a plurality of characteristics and detecting that the security score does not exceed a predetermined threshold score.

14. The computer-implemented method of claim 8 , comprising displaying the generated secure password in a list of secure passwords, wherein characters of each secure password based on the personal information are highlighted.

15. A computer program product for generation of secure passwords, the computer program product comprising a computer-readable storage medium having program code embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program code executable by a processor to cause the processor to:
receive personal data comprising a list of previously used and currently used passwords and personal information associated with a user;
compute patterns comprising regular expressions for the previously used and currently used passwords based on a comparison of one or more characteristics of the previously used and currently used passwords with the personal information, wherein the processor is to extract nouns from the personal information and extract entities from the nouns, wherein the regular expressions comprise different regular expressions over the extracted entities combined with other random characters;
receive a plurality of characters for a proposed password for the user;
detect that the proposed password is unsecure based on a calculated security score not exceeding a predetermined threshold security score, wherein the security score is to be calculated based on a total number of the plurality of characters and a comparison of the plurality of characters with the personal information associated with the user and the computed patterns;
generate a secure password in real-time based on the personal information associated with the user and the proposed password;
display an indication that the proposed password is unsecure and display the secure password; and
receive a selection of the secure password or an edit to the proposed password.

16. The computer program product of claim 15 , comprising program code executable by the processor to detect that the proposed password is unsecure and display the indication and the secure password in real-time.

17. The computer program product of claim 15 , comprising program code executable by the processor to:
receive an additional character for the proposed password;
detect that the proposed password with the additional character is unsecure; and
generate an updated secure password based on the personal information and the proposed password with the additional character.

18. The computer program product of claim 15 , comprising program code executable by the processor to generate a list of secure passwords including the secure password.

19. The computer pro

Assignees

• IBM

Inventors

• Shapiro Eitan

Classifications

• G06F21/46 Primary

  by designing passwords or checking the strength of passwords · CPC title

• G06F21/31

  User authentication · CPC title