Rule-based filtering for securing password login

Patent metadata

Field	Value
Publication number	US-11757865-B2
Application number	US-202017078149-A
Country	US
Kind code	B2
Filing date	Oct 23, 2020
Priority date	Oct 23, 2020
Publication date	Sep 12, 2023
Grant date	Sep 12, 2023

Abstract

In an approach for a rule-based filtering system for securing password logins, a processor receives a password input on a user device. A processor determines whether the password requires filtering. Responsive to determining the password requires filtering, a processor filters characters from the password based on a set of filtering rules to create a filtered password. A processor determines whether the filtered password matches a stored password.

First claim

What is claimed is:

1. A computer-implemented method for a rule-based filtering system for securing password logins, the computer-implemented method comprising:
receiving, by one or more processors, a password input on a user device;
determining, by the one or more processors, whether the password requires filtering;
responsive to determining the password requires filtering, filtering, by the one or more processors, characters from the password based on a set of filtering rules stored in a user profile of a user associated with the user device to create a filtered password, wherein the set of filtering rules comprises a first rule in a form of a first regular expression that defines a sequential set of characters to be removed with a defined starting character and a defined ending character that are different from all characters of the stored password and a second rule in the form of a second regular expression that defines a mathematical rule of when a sequence of characters adds up to a defined sum the sequence of characters is to be removed; and
determining, by the one or more processors, whether the filtered password matches a stored password.

2. The computer-implemented method of claim 1 , wherein determining whether the password requires filtering further comprises:
counting, by the one or more processors, a number of characters in the password;
comparing, by the one or more processors, the number of characters in the password to a second number of characters in the stored password; and
responsive to determining there are more characters in the password than in the stored password, determining, by the one or more processors, that the password requires filtering.

3. The computer-implemented method of claim 1 , wherein the set of filtering rules includes at least one regular expression.

4. The computer-implemented method of claim 1 , further comprising:
responsive to determining that the filtered password matches the stored password, enabling, by the one or more processors, a user of the user device to log-in.

5. The computer-implemented method of claim 1 , further comprising:
responsive to a user of the user device opting-in to the rule-based filtering system, requesting, by the one or more processors, the user to input the set of filtering rules;
receiving, by the one or more processors, the set of filtering rules from the user device; and
storing, by the one or more processors, the set of filtering rules in a user profile for the user.

6. The computer-implemented method of claim 1 , wherein one rule of the set of filtering rules defines a specific character to be filtered out of the password.

7. The computer-implemented method of claim 1 , wherein the mathematical rule is that when the defined sequential of characters add up to a pre-defined sum the defined sequential of characters are filtered out of the password.

8. A computer program product for a rule-based filtering system for securing password logins, the computer program product comprising:
one or more computer readable storage device and program instructions collectively stored on the one or more computer readable storage device, the stored program instructions comprising:
program instructions to receive a password input on a user device;
program instructions to determine whether the password requires filtering;
responsive to determining the password requires filtering, program instructions to filter characters from the password based on a set of filtering rules stored in a user profile of a user associated with the user device to create a filtered password, wherein the set of filtering rules comprises a first rule in a form of a first regular expression that defines a sequential set of characters to be removed with a defined starting character and a defined ending character that are different from all characters of the stored password and a second rule in the form of a second regular expression that defines a mathematical rule of when a sequence of characters adds up to a defined sum the sequence of characters is to be removed; and
program instructions to determine whether the filtered password matches a stored password.

9. The computer program product of claim 8 , wherein the program instructions to determine whether the password requires filtering further comprise:
program instructions to count a number of characters in the password;
program instructions to compare the number of characters in the password to a second number of characters in the stored password; and
responsive to determining there are more characters in the password than in the stored password, program instructions to determine that the password requires filtering.

10. The computer program product of claim 8 , wherein the set of filtering rules includes at least one regular expression.

11. The computer program product of claim 8 , further comprising:
responsive to determining that the filtered password matches the stored password, program instructions to enable a user of the user device to log-in.

12. The computer program product of claim 8 , further comprising:
responsive to a user of the user device opting-in to the rule-based filtering system, program instructions to request the user to input the set of filtering rules;
program instructions to receive the set of filtering rules from the user device; and
program instructions to store the set of filtering rules in a user profile for the user.

13. The computer program product of claim 8 , wherein one rule of the set of filtering rules defines a specific character to be filtered out of the password.

14. The computer program product of claim 8 , wherein the mathematical rule is that when the defined sequential of characters add up to a pre-defined sum the defined sequential of characters are filtered out of the password.

15. A computer system for a rule-based filtering system for securing password logins, the computer system comprising:
one or more computer processors;
one or more computer readable storage media;
program instructions collectively stored on the one or more computer readable storage media for execution by at least one of the one or more computer processors, the stored program instructions comprising:
program instructions to receive a password input on a user device;
program instructions to determine whether the password requires filtering;
responsive to determining the password requires filtering, program instructions to filter characters from the password based on a set of filtering rules stored in a user profile of a user associated with the user device to create a filtered password, wherein the set of filtering rules comprises a first rule in a form of a first regular expression that defines a sequential set of characters to be removed with a defined starting character and a defined ending character that are different from all characters of the stored password and a second rule in the form of a second regular expression that defines a mathematical rule of when a sequence of characters adds up to a defined sum the sequence of characters is to be removed; and
program instructions to determine whether the filtered password matches a stored password.

16. The computer system of claim 8 , wherein the program instructions to determine whether the password requires filtering further comprise:
program instructions to count a number of characters in the password;
program instructions to compare the number of characters in the password to a second number of characters in the stored password; and
responsive to determining there are more characters in the password than

Assignees

• IBM
• Int Business Machines Corporations

Inventors

• Rozenbaum Nir
• Guy Nili

Classifications

• G06F21/46 Primary

  by designing passwords or checking the strength of passwords · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• G06F16/24564

  Applying rules; Deductive queries · CPC title

• G06F16/90344

  by using string matching techniques · CPC title