Patent ID: 11936674
Assignee: SAP SE
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A computer-implemented method, comprising:
monitoring, at a centralized authentication evaluation system (CAES), login attempts associated with a set of websites;
identifying a login attempt to a particular website of the set of websites, wherein the login attempt is associated with login user credentials and a login internet protocol (IP) address of a client device;
determining whether the login user credentials correspond to site-specific user credentials of a set of site-specific user credentials for the particular website; and
in response to determining that the login user credentials correspond to the site-specific user credentials:
incrementing a current valid count value associated with a current IP address in a list of IP addresses of a current window slot (WS) of a current rolling time window (RTW), wherein the login IP address matches the current IP address, and wherein the current IP address is associated with the current valid count value and a current failed count value;
determining a total valid count value and a total failed count value based on the current valid count value, the current failed count value, and a WS valid count value and a WS failed count value associated with a WS IP address in a list of IP addresses of each respective WS of a set of WSs within a first RTW that matches the login IP address;
determining whether the login attempt to the particular website is allowed by a first allowance rule associated with the first RTW, wherein the login attempt is allowed by the first allowance rule if the total valid count value is greater than or equal to a valid count threshold of the first allowance rule and the total failed count value is greater than a failed count threshold of the first allowance rule; and
in response to determining that the login attempt to the particular website is allowed by the first allowance rule, setting a first allowance indicator to indicate that the login attempt to the particular website is to be allowed by the first allowance rule.