Patent ID: 8132018
Filing Date: 2012-03-06
Classification: G06Q,H04L

Abstract:
1. A method, comprising: receiving an initial authentication request comprising username and password information; determining whether said initial authentication request is valid based on said username and password information; incrementing a username-specific counter and a system counter when said initial authentication request is invalid; setting a first timer to a first time period based on said username-specific counter and said username information; determining by a hardware processor whether to invalidate one or more subsequent authentication requests based on a first record associated with said username information; invalidating only said one or more subsequent authentication requests with said username information during said first time period regardless of whether said subsequent request comprises valid password information; setting a second time period for said system counter; determining whether at least one of said initial or subsequent authorization requests was invalidated within the second time period; and resetting said system counter and said first record when no invalid authentication requests are received during said second time period.