Using social graph for account recovery

Patent metadata

Field	Value
Publication number	US-9626725-B2
Application number	US-97832710-A
Country	US
Kind code	B2
Filing date	Dec 23, 2010
Priority date	Dec 23, 2010
Publication date	Apr 18, 2017
Grant date	Apr 18, 2017

Abstract

A social networking system performs account recovery for a user with the help of the user's connections (e.g., friends). The social networking system selects connections of the user based on information indicating likelihood of real-world interactions between the user and the selected connections. Access codes are sent to the selected connections and the user instructed to obtain access codes from the selected connections via a communication that is outside the social networking system, for example, via phone. The user provides the access codes obtained from the selected connections to the social networking system. If the access codes provided by the user match the access codes sent to the selected connections, the user is granted access to the account. Real-world interactions between two users are determined based on sharing of devices between the users or information indicating presence of the users in the same place during same time interval.

First claim

What is claimed is:

1. A computer implemented method comprising:
receiving a request for recovering an account of a user of a social networking system, the social networking system maintaining connections between a plurality of user accounts, and wherein the user is connected to a subset of users of the plurality of users of the social networking system;
detecting, by the social networking system, shared client devices each used by both the user and one of the users of the subset of users connected to the user based on user logins to the social networking system using the shared client devices;
applying, for each shared client device, a weight of a real-world relationship between the user and a corresponding user of the subset of users;
selecting, by the social networking system, an additional subset of the subset of users connected to the user based on the applied weights;
prompting the user to select one or more users of the additional subset to whom a first set of access codes is sent;
responsive to receiving a selection from the user selecting the one or more users, sending the first set of access codes to the selected one or more users;
receiving a second set of access codes from the user; and
responsive to one or more access codes in the second set matching the access codes in the first set, granting access to the account to the user.

2. The computer implemented method of claim 1 , further comprising:
sending instructions to transmit access codes between the selected one or more users and the user via communication based on phone.

3. The computer implemented method of claim 1 , further comprising:
sending instructions to transmit access codes between the selected one or more users and the user via communication outside the social networking system.

4. The computer implemented method of claim 1 , wherein the user is granted access to the account responsive to a number of matching access codes exceeding a predefined threshold value.

5. The computer implemented method of claim 4 , wherein the predefined threshold value is determined based on a type of suspicious activity associated with the account.

6. The computer implemented method of claim 1 , wherein the user is granted access to the account responsive to a number of matching access codes exceeding a predefined percentage of a number of access codes in the first set.

7. The computer implemented method of claim 1 , wherein the request for recovering an account is received responsive to the account being locked upon determination of suspicious activity associated with the account.

8. The computer implemented method of claim 1 , wherein selecting the additional subset comprises receiving the selected additional subset from the user.

9. The computer implemented method of claim 1 , wherein selecting the additional subset comprises selecting a user of the subset of users to include in the additional subset responsive to identifying an image in which both the user and the user of the subset of users are tagged.

10. The computer implemented method of claim 1 , wherein selecting the additional subset comprises selecting a user of the subset of users to include in the additional subset responsive to identifying an event for which both the user and the user of the subset of users sent an RSVP message via the social networking system.

11. The computer implemented method of claim 1 , wherein the weight for a shared client device is based on a frequency of user logins to the social networking system using the shared client device.

12. The computer implemented method of claim 11 , wherein the shared client devices are used for creating sessions for interacting with the social networking system.

13. The computer implemented method of claim 11 , wherein the shared client devices include cameras used for capturing images uploaded to the social networking system.

14. The computer implemented method of claim 1 , wherein the weight for a shared client device is based on a location of user logins to the social networking system using the shared client device.

15. The computer implemented method of claim 14 , wherein the location corresponds to a work place specified in user profiles of the user and the user of the subset of users.

16. The computer implemented method of claim 1 , further comprising:
matching information identifying a client device used by the user to interact with the social networking system to recover the account with stored information identifying the client device used by the user for past interactions; and
wherein the user is granted access to the account responsive to the matching indicating that the client device used by the user to recover the account is same as the client device used by the user for past interactions.

17. The computer implemented method of claim 1 , further comprising determining that at least one selected user in the selected one or more users is not directly connected in the social networking system to the remaining selected users in the selected one or more users.

18. The computer implemented method of claim 1 , further comprising determining that at least one user in the selected one or more users is associated with less than a threshold number of past actions, each also associated with the user, occurring within the social networking system.

19. The computer implemented method of claim 1 , further comprising:
determining clusters of connections of the user, wherein a first pair of connections both belonging to a cluster have higher degree of similarity of characteristics compared with a second pair of connections comprising connections from two different clusters; and
verifying that the selected connections comprise at least one pair that includes connections from two different clusters.

20. The computer implemented method of claim 1 , wherein responsive to the one or more access codes in the second set matching the access codes in the first set, granting access to the account comprises:
sending one or more messages to the user with information regarding the granting of access; and
responsive to sending the one or more messages, waiting for a predetermined time interval before granting account access.

21. A computer implemented method comprising:
receiving a request for recovering an account of a user of a social networking system, the social networking system maintaining connections between a plurality of user accounts, and wherein the user is connected to a subset of users of the plurality of users of the social networking system;
detecting, by the social networking system, shared client devices each used by both the user and one of the users of the subset of users connected to the user based on user logins to the social networking system using the shared client devices;
applying, for each shared client device, a weight of a real-world relationship between the user and a corresponding user of the subset of users;
selecting, by the social networking system, an additional subset of the subset of users connected to the user based on the applied weights;
sending a first set of access codes to one or more users of the additional subset;
receiving a second set of access codes from the user; and
responsive to the access codes in the second set matching the access codes in the first set, granting access to the account to the user.

22. The computer implemented method of claim 21 , further comprising:
sending instructions to transmit access codes between each user in the selec

Assignees

• Rubinstein Yigal Dan
• Brill Jacob Andrew
• Bejar Arturo
• Frank Jonathan H
• Breger David
• Facebook Inc

Inventors

• Rubinstein Yigal Dan
• Brill Jacob Andrew
• Bejar Arturo
• Frank Jonathan H
• Breger David

Classifications

• G06Q10/40 Primary

  Business processes related to social networking or social networking services · CPC title

• H04L51/12

  Electricity · mapped topic

• G06Q50/01 Primary

  Physics · mapped topic

• H04L51/32

  Electricity · mapped topic

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title