Cognitive password entry system

Patent metadata

Field	Value
Publication number	US-9942234-B2
Application number	US-201514953654-A
Country	US
Kind code	B2
Filing date	Nov 30, 2015
Priority date	Sep 29, 2015
Publication date	Apr 10, 2018
Grant date	Apr 10, 2018

Abstract

An aspect includes a cognitive password entry system. A processor detects a login attempt targeting a website for a user identifier having a previously stored instance of a password associated with the user identifier. A number of login attempts is monitored since the password was manually entered at the website. The processor determines whether a prompting period has been reached based on the number of login attempts meeting a prompting period threshold. The stored instance of the password is used as an entered password for the login attempt based on determining that the prompting period has not been reached. A cognitive aid prompt is output based on determining that the prompting period has been reached.

First claim

What is claimed:

1. A computer-implemented method for cognitive password entry, the method comprising:
detecting, by a processor, a login attempt targeting a website for a user identifier having a previously stored instance of a password associated with the user identifier;
monitoring a number of login attempts using the stored instance of the password to auto-complete a password field on the website;
determining whether a prompting period has been reached based on the number of login attempts meeting a prompting period threshold;
activating access to a cookie associated with the user identifier to propagate the previously stored instance of the password to the website based on determining that the prompting period has not been reached;
using the stored instance of the password as an entered password for the login attempt based on determining that the prompting period has not been reached;
temporarily deactivating access to the cookie associated with the user identifier to prevent the previously stored instance of the password from propagating to the website based on determining that the prompting period has been reached;
outputting a cognitive aid prompt based on determining that the prompting period has been reached, the cognitive aid prompt comprising a context to assist a user in remembering the password associated with the user identifier;
using the stored instance of the password as the entered password for the login attempt based on receiving an indication that a user remembers the password in response to the cognitive aid prompt or based on detecting a partial match between the stored instance of the password and an entry received in response to the cognitive aid prompt; and
reactivating access to the cookie associated with the user identifier responsive to a successful login after outputting the cognitive aid prompt.

2. The computer-implemented method of claim 1 , wherein the outputting of the cognitive aid prompt is user enabled.

3. The computer-implemented method of claim 1 , wherein the cognitive aid prompt comprises a request to enter the password.

4. The computer-implemented method of claim 1 , wherein the cognitive aid prompt comprises an associative context.

5. The computer-implemented method of claim 1 , further comprising:
initiating an interactive password coaching session comprising a sequence of two or more password coaching tips based on determining that the stored instance of the password and an entry received in response to the cognitive aid prompt do not match.

6. The computer-implemented method of claim 1 , wherein the prompting period is user configurable.

7. The computer-implemented method of claim 1 , wherein the prompting period threshold is dynamically adjusted according to a prompting policy based on one or more of: an elapsed time since a last successful login, a level of password complexity, and a device type used to access the website.

8. The computer-implemented method of claim 7 , wherein the prompting policy establishes and adjusts a user-specific rate of decay of the prompting period threshold.

9. The computer-implemented method of claim 1 , further comprising:
receiving a deferral request in response to the cognitive aid prompt;
using the stored instance of the password as the entered password in response to the deferral request; and
resetting the prompting period based on the deferral request.

Assignees

• IBM

Inventors

• Deluca Lisa Seacat
• Kozloski James R
• Mizrachi Boaz
• Pickover Clifford A

Classifications

• G06F21/45 Primary

  Structures or tools for the administration of authentication · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F21/36

  by graphic or iconic representation · CPC title