METHOD FOR FAULT-TOLERANT USER INFORMATION AUTHENTICATION

• US 20100115583A1
• Filed: 11/03/2008
• Published: 05/06/2010
• Est. Priority Date: 11/03/2008
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Motika, Franco, Kelley, Edward Emile, Delia, Wayne Michael
• Application Number:
  US12/263,540
• Publication Number:
  US 20100115583A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A method for user information authentication which includes setting user information for a user account, such user information being the set user information; inputting user information by a user for the user account into a device, such user information being the input user information; evaluating the input user information for correspondence with the set user information according to fault-tolerant user information rules, wherein such rules evaluate the input user information for content and closeness to the set user information and noting if the input user information is a valid user information, a fault-tolerant user information, or an invalid user information; authorizing access to the user account if the input user information is a valid user information. In one embodiment of the invention, the method includes incrementing an invalid user information counter only if the user information is an invalid user information. In another embodiment of the invention, the method includes providing a message to the user if the user information is a fault-tolerant user information, the message being descriptive of the input user information'"'"'s correspondence with the fault tolerant user information rules.

Claims

1. A method for user information authentication comprising the steps of:

setting user information for a user account, such user information being the set user information;

inputting user information by a user for the user account into a device, such user information being the input user information;

evaluating the input user information for correspondence with the set user information according to fault-tolerant user information rules, wherein such rules evaluate the input user information for content and closeness to the set user information and noting if the input user information is a valid user information, a fault-tolerant user information, or an invalid user information;

authorizing access to the user account if the input user information is a valid user information; and

incrementing an invalid user information counter only if the user information is an invalid user information.

2. The method of claim 1 wherein the valid user information means that the input user information has exact correspondence with the set user information, the fault-tolerant user information means that the input user information deviates from the set user information by at least one character but less than a predetermined number of characters and the invalid user information means that the input user information deviates from the set user information by more than the predetermined number of characters.

3. The method of claim 1 further comprising authorizing access to the user account if the user information is a fault-tolerant user information.

4. The method of claim 1 further comprising denying access to the user account if the user information is a fault-tolerant user information.

5. The method of claim 1 further comprising providing a message to the user if the user information is a fault-tolerant user information, the message being descriptive of the input user information'"'"'s correspondence with the fault tolerant user information rules.

6. The method of claim 5 further comprising authorizing access to the user account if the user information is a fault-tolerant user information.

7. The method of claim 5 further comprising denying access to the user account if the user information is a fault-tolerant user information.

8. The method of claim 1 wherein the user information is a password.

9. The method of claim 1 wherein the user information is a user'"'"'s account information.

10. A method for user information authentication comprising the steps of:

setting a user information for a user account, such user information being the set user information;

inputting a user information by a user for the user account into a device, such user information being the input user information;

evaluating the input user information for correspondence with the set user information according to fault-tolerant user information rules, wherein such rules evaluate the input user information for content and closeness to the set user information and noting if the input user information is a valid user information, a fault-tolerant user information, or an invalid user information;

authorizing access to the user account if the input user information is a valid user information; and

providing a message to the user if the user information is a fault-tolerant user information, the message being descriptive of the input user information'"'"'s correspondence with the fault tolerant user information rules.

11. The method of claim 10 wherein the valid user information means that the input user information has exact correspondence with the set user information, the fault-tolerant user information means that the input user information deviates from the set user information by at least one character but less than a predetermined number of characters and the invalid user information means that the input user information deviates from the set user information by more than the predetermined number of characters.

12. The method of claim 10 further comprising authorizing access to the user account if the user information is a fault-tolerant user information.

13. The method of claim 10 further comprising denying access to the user account if the user information is a fault-tolerant user information.

14. The method of claim 10 further comprising incrementing an invalid user information counter only if the user information is an invalid user information.

15. The method of claim 14 further comprising authorizing access to the user account if the user information is a fault-tolerant user information.

16. The method of claim 14 further comprising denying access to the user account if the user information is a fault-tolerant user information.

17. The method of claim 10 wherein the user information is a password.

18. The method of claim 10 wherein the user information is a user'"'"'s account information.

19. A method for a user information authentication service provided to a user comprising the steps of:

setting user information for a user account, such user information being the set user information;

receiving user information from a user for the user account, such user information being the input user information;

evaluating the input user information for correspondence with the set user information according to fault-tolerant user information rules, wherein such rules evaluate the input user information for content and closeness to the set user information and noting if the input user information is a valid user information, a fault-tolerant user information, or an invalid user information;

authorizing access to the user account if the input user information is a valid user information; and

incrementing an invalid user information counter only if the user information is an invalid user information.

20. A method for a user information authentication service provided to a user comprising the steps of:

setting a user information for a user account, such user information being the set user information;

receiving a user information by a user for the user account, such user information being the input user information;

evaluating the input user information for correspondence with the set user information according to fault-tolerant user information rules, wherein such rules evaluate the input user information for content and closeness to the set user information and noting if the input user information is a valid user information, a fault-tolerant user information, or an invalid user information;

authorizing access to the user account if the input user information is a valid user information; and

providing a message to the user if the user information is a fault-tolerant user information, the message being descriptive of the input user information'"'"'s correspondence with the fault tolerant user information rules.