Inadvertent password entry detection

Patent metadata

Field	Value
Publication number	US-10708052-B2
Application number	US-201715445590-A
Country	US
Kind code	B2
Filing date	Feb 28, 2017
Priority date	Feb 28, 2017
Publication date	Jul 7, 2020
Grant date	Jul 7, 2020

Abstract

Systems and methods for monitoring data input are disclosed. A dataset entered into a non-password field is received. Based on the dataset meeting one or more criteria for a likely password, a determination as to whether the dataset is inadvertently entered into the non-password field is made. Based on determining that the dataset is inadvertently entered into the non-password field, further processing of the dataset is inhibited.

First claim

What is claimed is:

1. A method, comprising:
receiving, via a user interface, a command to paste a password from a password manager into a clipboard;
receiving, via the user interface, a command to paste the password from the clipboard into a non-password field as a dataset;
storing, by a password manager, at least one password;
allowing, by the password manager, user access to the at least one password;
monitoring, by a password manager program, pasting into and from the clipboard;
determining, by the password manager program, based on the monitoring of pasting into and from the clipboard, that:
the password is pasted from the password manager into the clipboard, and
that the password is pasted from the clipboard into a non-password field;

automatically inhibiting, based on determining that the password is pasted from the password manager into the clipboard and that the password is pasted from the clipboard into a non-password field, further processing of the password;
automatically clearing the clipboard based on the determining that the password is pasted from the clipboard into the non-password field; and
monitoring, until contents of the clipboard are cleared, to support the determining that the password is pasted from the password manager to the clipboard and that the password is pasted from the clipboard into a non-password field.

2. The method of claim 1 , further comprising:
determining, based on the dataset meeting one or more criteria for a likely password, that the dataset is inadvertently entered into the non-password field, where the one or more criteria comprises password complexity rules, and
wherein the automatically inhibiting is further based on determining that the dataset is inadvertently into the non-password field.

3. The method of claim 1 , further comprising:
monitoring entry of entered passwords into a password entry field, the password entry field being different from the non-password field;
determining at least one password token based on the entered passwords; and
determining at least one dataset token based on the dataset,
wherein the automatically inhibiting is further based on determining that any of the at least one dataset token matches any of the at least one password token.

4. The method of claim 3 , wherein the at least one password token and the at least one dataset token comprises a respective hash value calculated by a particular hash function.

5. The method of claim 3 , wherein the at least one password token and the at least one dataset token comprises data bits set in a Bloom filter vector, and
wherein the determining that any of the at least one dataset token matches any of the at least one password token comprises a determination of a likely match according to Bloom filter processing.

6. An input data processor, comprising:
a processor;
a memory, communicatively coupled to the processor;
an input monitor, executed by the processor, that:
receives, via a user interface, a command to paste a password from a password manager into a clipboard;
receives, via the user interface, a command to paste the password from the clipboard into a non-password field as a dataset; and

a password monitor, executed by the processor, that:
stores at least one password; and
allows user access to the at least one password;

a password monitor program, executed by the processor, that:
monitors pasting of the clipboard;
determines, based on monitoring pasting of the clipboard, that the password is pasted from the password manager into the clipboard and that the password is pasted from the clipboard into a non-password field;
automatically inhibits, based on a determination that the password is pasted from the password manager into the clipboard and that the password is pasted from the clipboard into a non-password field, further processing of the password;
automatically clears the clipboard based on a determination that the password is pasted from the clipboard into the non-password field; and
monitors, until contents of the clipboard are cleared, to support the determining that the password is pasted from the password manager to the clipboard and that the password is pasted from the clipboard into a non-password field.

7. The input data processor of claim 6 , wherein the input monitor further:
determines, based on the dataset meeting one or more criteria for a likely password, that the dataset is inadvertently entered into the non-password field, where the one or more criteria comprises password complexity rules, and
further bases automatically inhibiting further processing of the password on a determination that the dataset is inadvertently into the non-password field.

8. The input data processor of claim 6 , further comprising a password token determination process configured to:
monitor entry of entered passwords into a password entry field, the password entry field being different from the non-password field; and
determine at least one password token based on the entered passwords,
wherein the input monitor further:
determines at least one dataset token based on the dataset, and
further bases automatically inhibiting further processing of the password on a determination that any of the at least one dataset token matches any of the at least one password token.

9. The input data processor of claim 8 , wherein the at least one password token and the at least one dataset token comprises a respective hash value calculated by a particular hash function.

10. The input data processor of claim 8 , wherein the at least one password token and the at least one dataset token comprises data bits set in a Bloom filter vector, and
wherein a determination that any of the at least one dataset token matches any of the at least one password token a determination of a likely match according to Bloom filter processing.

11. The input data processor of claim 8 , wherein the password manager monitors continually, to support a determination that the password is pasted from the password manager to the clipboard and that the password is pasted from the clipboard into a non-password field, until contents of the clipboard are cleared.

12. A non-transitory computer readable storage device having computer readable program code embodied therewith, the computer readable program code comprising instructions that, when executed:
receive, via a user interface, a command to paste a password from a password manager into a clipboard;
receive, via the user interface, a command to paste the password from the clipboard into a non-password field as a dataset;
store, by a password manager, at least one password;
allow by the password manager, user access to the at least one password;
monitor, by a password manager program, pasting to and from the clipboard;
determine, by the password manager program, based on the monitoring of pasting from and into the clipboard, that:
the password is pasted from the password manager into the clipboard, and
that the password is pasted from the clipboard into a non-password field;

automatically inhibit, based on determining that the password is pasted from the password manager into the clipboard and that the password is pasted from the clipboard into a non-password field, further processing of the password; and
automatically clear the clipboard based on the determining that the password is pasted from the clipboard into the non-password field; and
monitor, until contents of the clipboard are cleared, to support the determining that the password is pasted from the password manager to the clipboard and that the password is pasted from the clipboard into a non-password field.

Assignees

• Blackberry Ltd

Inventors

• Kominar Jeremy Lawson
• Adams Neil Patrick
• Waterman Nick Mark
• Lepage Marc Anthony

Classifications

• G06F21/31 Primary

  User authentication · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title