Methods and systems for online access credential transition

• US 10,158,616 B1
• Filed: 07/20/2016
• Issued: 12/18/2018
• Est. Priority Date: 07/20/2016
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Kanevsky, Dimitri, Yung, Marcel
• Primary Examiner(s): Kabir, Jahangir
• Application Number:
  US15/214,754
• Time in Patent Office: 881 Days
• Field of Search: 726 5- 6, 726 18- 19
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Systems and methods for online access credential transition are described, including receiving a first string of elements associated with a subsequent online access credential, during a credential transition period, receiving a second string of elements associated with an attempted subsequent online access credential, performing a matching operation to determine a degree of matching between the first string of elements and the second string of elements, and based on the degree of matching between the first string of elements and the second string of elements, providing online feedback, and prompting another attempted subsequent online access credential.

Claims

1. A computer-implemented method, comprising:

receiving, at data processing hardware, a first string of elements associated with a current online access credential for an online access attempt;

during a credential training period, receiving, at the data processing hardware, a second string of elements associated with a new online access credential for the online access attempt;

determining, by the data processing hardware, whether the first string of elements and the second string of elements match;

in response to determining that the first string of elements and the second string of elements fail to match;

performing, by the data processing hardware, a matching operation to determine a degree of matching between the first string of elements and the second string of elements; and

based on the degree of matching between the first string of elements and the second string of elements;

providing, by the data processing hardware, training feedback; and

prompting, by the data processing hardware, another string of elements; and

in response to determining that the first string of elements and the second string of elements do match;

determining, by the data processing hardware, whether a duration of the credential training period has satisfied a threshold duration;

in response to determining that the duration of the credential training period satisfies the threshold duration, changing, by the data processing hardware, the association of the current online access credential from the first string of elements to the second string of elements for subsequent online access attempts; and

in response to determining that the duration of the credential training period fails to satisfy the threshold duration;

providing, by the data processing hardware, an indication of a successful online access attempt; and

maintaining, by the data processing hardware, the association between the first string of elements and the current online access credential until receipt of another string of elements.

2. The computer-implemented method of claim 1, wherein the credential training period is indicative of a credential reset period for online access.

3. The computer-implemented method of claim 1, wherein the duration of the credential training period is adjusted based on at least one of the degree of matching, a number of unsuccessful attempts associated with the new online access credential, an online user account setting, and an elapsed time of the credential training period.

4. The computer-implemented method of claim 1, wherein the training feedback is modified based on at least one of a number of unsuccessful attempts associated with the new online access credential, an online user account setting, and an elapsed time of the credential training period.

5. The computer-implemented method of claim 1, wherein the first string of elements comprises first individually hashed elements of the current online access credential and the second string of elements comprises second individually hashed elements of the new online access credential, and the matching operation comprises comparing respective first individually hashed elements and second individually hashed elements.

6. A non-transitory computer-readable medium configured to perform executable instructions stored in a storage, the executable instructions comprising:

receiving a first string of elements associated with a current online access credential for an online access attempt;

during a credential training period, receiving a second string of elements associated with a new online access credential for the online access attempt;

determining whether the first string of elements and the second string of elements match;

in response to determining that the first string of elements and the second string of elements fail to match;

performing a matching operation to determine a degree of matching between the first string of elements and the second string of elements; and

based on the degree of matching between the first string of elements and the second string of elements;

providing training feedback; and

prompting another string of elements; and

in response to determining that the first string of elements and the second string of elements do match;

determining whether a duration of the credential training period has satisfied a threshold duration;

in response to determining that the duration of the credential training period satisfies the threshold duration, changing the association of the current online access credential from the first string of elements to the second string of elements for subsequent online access attempts; and

in response to determining that the duration of the credential training period fails to satisfy the threshold duration;

providing an indication of a successful online access attempt; and

maintaining the association between the first string of elements and the current online access credential until receipt of another string of elements.

7. The non-transitory computer-readable medium of claim 6, wherein the credential training period is indicative of a credential reset period for online access.

8. The non-transitory computer-readable medium of claim 6, wherein duration of the credential training period is adjusted based on at least one of the degree of matching, a number of unsuccessful attempts associated with the new online access credential, an online user account setting, and an elapsed time of the credential training period.

9. The non-transitory computer-readable medium of claim 6, wherein the training feedback is modified based on at least one of a number of unsuccessful attempts associated with the new online access credential, an online user account setting, and an elapsed time of the credential training period.

10. The non-transitory computer-readable medium of claim 6, wherein the first string of elements comprises first individually hashed elements of the current online access credential and the second string of elements comprises second individually hashed elements of the new online access credential, and the matching operation comprises comparing respective first individually hashed elements and second individually hashed elements.

11. A device comprising:

one or more hardware processors;

a storage configured to receive a first string of elements associated with a current online access credential for an online access attempt, and during a credential training period, receive a second string of elements associated with a new online access credential for the online access attempt;

a comparator, executed by the one or more hardware processors, configured to perform a matching operation to determine a degree of matching between the first string of elements and the second string of elements;

a memory state engine configured to determine whether a duration of the credential training period has satisfied a threshold duration; and

a learning controller, executed by the one or more hardware processors, configured to;

in response to the comparator determining that the first string of elements and the second string of elements fail to match, provide training feedback based on the degree of matching between the first string of elements and the second string of elements and prompt another string of elements;

in response to the comparator determining that the first string of elements and the second string of elements match and the memory state engine determining that the duration of the credential training period satisfies the threshold duration, change the association of the current online access credential from the first string of elements to the second string of elements for subsequent online access attempts; and

in response to the comparator determining that the first string of elements and the second string of elements match and the memory state engine determining that the duration of the credential training period fails to satisfy the threshold duration, maintain an association between the first string of elements and a current online access credential until the storage receives another string of elements.

12. The device of claim 11, wherein the credential training period is indicative of a credential reset period for online access.

13. The device of claim 11, wherein the duration of the credential training period is adjusted based on at least one of the degree of matching, a number of unsuccessful attempts associated with the new online access credential, an online user account setting, and an elapsed time of the credential training period.

14. The device of claim 11, wherein the training feedback is modified based on at least one of a number of unsuccessful attempts associated with the new online access credential, an online user account setting, and an elapsed time of the credential training period.

15. The device of claim 11, wherein the learning controller is further configured to, in response to the comparator determining that the first string of elements and the second string of elements match and the memory state engine determining that the duration of the credential training period fails to satisfy the threshold duration, provide an indication of a successful online access attempt.

16. The device of claim 11, wherein the first string of elements comprises first individually hashed elements of the current online access credential and the second string of elements comprises second individually hashed elements of a new subsequent online access credential, and the matching operation comprises comparing respective first individually hashed elements and second individually hashed elements.