Patent ID: 8959618
Filing Date: 2015-02-17
Classification: G06F

Abstract:
1. A method comprising: receiving one or more attempts to log in from a client device into an account; monitoring, by a processing device, activities associated with the account in view of a password expiry policy that comprises a plurality of behavior deviations that deviate from a behavior norm associated with the account, wherein the plurality of behavior deviations comprise an attempt to log in from the client device that does not have a client certificate to secure a connection from the client device to the processing device; in response to determining that a number of occurrences of the plurality of behavior deviations exceeds a determined threshold, expiring a stored password associated with the account; receiving a next login request to the account from the client device, the login request comprising an input password; determining whether the client device has the client certificate; in response to determining that the client device does not have the client certificate, tagging the login request with a flag; validating the input password with the stored password associated with the account; in response to determining that the input password matches the stored password, each time receiving a subsequent attempt to log in from the client device that does not have the client certificate, the method further comprising: