Using social graph for account recovery

Patent metadata

Field	Value
Publication number	US-2017195315-A1
Application number	US-201715467891-A
Country	US
Kind code	A1
Filing date	Mar 23, 2017
Priority date	Dec 23, 2010
Publication date	Jul 6, 2017
Grant date	—

Abstract

A social networking system performs account recovery for a user with the help of the user's connections (e.g., friends). The social networking system selects connections of the user based on information indicating likelihood of real-world interactions between the user and the selected connections. Access codes are sent to the selected connections and the user instructed to obtain access codes from the selected connections via a communication that is outside the social networking system, for example, via phone. The user provides the access codes obtained from the selected connections to the social networking system. If the access codes provided by the user match the access codes sent to the selected connections, the user is granted access to the account. Real-world interactions between two users are determined based on sharing of devices between the users or information indicating presence of the users in the same place during same time interval.

First claim

What is claimed is:

1 . A computer implemented method comprising:
receiving, at a social networking system, a request for recovering an account of a requesting user of a social networking system, wherein the requesting user is connected to a plurality of users of the social networking system; determining, for each user of the plurality of users, a likelihood of a real-world relationship between the requesting user and the corresponding user; selecting a subset of the plurality of users based on the determined likelihoods of real-world relationships of the plurality of users; sending a first set of access codes to the selected subset of users; receiving a second set of access codes from the requesting user; and responsive to one or more access codes in the second set matching the access codes in the first set, granting access to the account to the requesting user.

2 . The computer implemented method of claim 1 , wherein determining a likelihood of a real-world relationship with a corresponding user comprises:
identifying an image stored by the social networking system with which both the requesting user and the corresponding user are associated; and responsive to identifying the image, selecting the corresponding user.

3 . The computer implemented method of claim 1 , wherein determining a likelihood of a real-world relationship with a corresponding user comprises:
identifying an event with which both the requesting user and the corresponding user are associated; and responsive to identifying the event; selecting the corresponding user.

4 . The computer implemented method of claim 1 , wherein determining a likelihood of a real-world relationship with a corresponding user comprises:
identifying a first device used by the requesting user; identifying a second device used by the corresponding user; and responsive to determining that the first device is same as the second device, selecting the corresponding user.

5 . The computer implemented method of claim 4 , wherein the first device and the second device are client devices used for creating sessions for interacting with the social networking system.

6 . The computer implemented method of claim 4 , wherein the first device and the second device are cameras used for capturing images uploaded to the social networking system.

7 . The computer implemented method of claim 1 , wherein determining a likelihood of a real-world relationship with a corresponding user comprises:
identifying a first location associated with the requesting user; identifying a second location associated with the corresponding user; and responsive to determining that the first location is same as the second location, selecting the corresponding user.

8 . The computer implemented method of claim 7 , wherein the first location and the second location correspond to a work place specified in user profiles of the requesting user and the corresponding user.

9 . The computer implemented method of claim 1 , wherein the requesting user is granted access to the account responsive to a number of matching access codes exceeding a predefined threshold value.

10 . The computer implemented method of claim 9 , wherein the predefined threshold value is determined based on a type of suspicious activity associated with the account.

11 . The computer implemented method of claim 1 , wherein the requesting user is granted access to the account responsive to the number of matching access codes exceeding a predefined percentage of the number of access codes in the first set.

12 . The computer implemented method of claim 1 , wherein the request for recovering an account is received responsive to the account being locked upon determination of suspicious activity associated with the account.

13 . The computer implemented method of claim 1 , further comprising sending instructions to the selected subset of users to transmit access codes to the requesting user via a communication by phone.

14 . The computer implemented method of claim 1 , further comprising sending instructions to the selected subset of users to transmit access codes to the requesting user via a communication outside the social networking system.

15 . The computer implemented method of claim 1 , wherein selecting the subset of the plurality of users comprises receiving the selected subset of users from the requesting user.

16 . The computer implemented method of claim 1 , further comprising:
matching information identifying a client device used by the requesting user to recover the account with information identifying a client device used by the requesting user for past interactions; and wherein the requesting user is granted access to the account responsive to the matching indicating that the client device used by the requesting user to recover the account is same as the client device used by the requesting user for past interactions.

17 . The computer implemented method of claim 1 , further comprising determining that at least one selected user of the subset of users is not directly connected in the social networking system to the remaining users of the subset of users.

18 . The computer implemented method of claim 1 , further comprising:
determining clusters of connections of the requesting user, wherein a first pair of connections both belonging to a cluster have higher degree of similarity of characteristics compared with a second pair of connections comprising connections from two different clusters; and verifying that the selected subset of users comprises a connection of the requesting user from at least two different clusters.

19 . The computer implemented method of claim 1 , wherein responsive to the one or more access codes in the second set matching the access codes in the first set, granting access to the account comprises:
sending a message to the requesting user with information regarding the granting of access; and responsive to sending the message, waiting for a predetermined time interval before granting account access.

20 . A non-transitory, computer-readable medium comprising instructions that, when executed by a processor, cause the processor to:
receive, at a social networking system, a request for recovering an account of a requesting user of a social networking system, wherein the requesting user is connected to a plurality of users of the social networking system; determine, for each user of the plurality of users, a likelihood of a real-world relationship between the requesting user and the corresponding user; select a subset of the plurality of users based on the determined likelihoods of real-world relationships of the plurality of users; send a first set of access codes to the selected subset of users; receive a second set of access codes from the requesting user; and responsive to one or more access codes in the second set matching the access codes in the first set, grant access to the account to the requesting user.

Assignees

• Facebook Inc

Inventors

• Rubinstein Yigal Dan
• Brill Jacob Andrew
• Bejar Arturo
• Frank Jonathan H
• Breger David

Classifications

• G06Q10/40 Primary

  Business processes related to social networking or social networking services · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06Q50/01

  Physics · mapped topic

• H04L51/52

  for supporting social networking services · CPC title

• H04L51/212

  using filtering or selective blocking · CPC title