Patent ID: 7093291

Claim:
An authentication intrusion detection system responsive to an attempted intrusion into a local computer system to which access is gained by prospective users entering a personal identifier followed by a secret authenticator, said authentication intrusion detection system comprising: a local computer system authenticator file communicating with said local computer system and having stored therein the secret authenticators corresponding to the personal identifiers entered by prospective users; an authenticator broker system to intercept and redirect the identifier and secret authenticator of a prospective user from the local computer system; an authenticator broker file communicating with said authenticator broker system and having stored therein the secret authenticators corresponding to the personal identifiers entered by the prospective users at the local computer system and stored in the local computer system authenticator file, whereby a prospective user can gain access to the local computer system when the authenticator entered by the prospective user matches the authenticator stored in said authenticator broker file; and a decoy authenticator file communicating with the authenticator broker system to assign a decoy authenticator for the secret authenticator entered by the prospective user at the local computer system and stored in the local computer system authenticator file, wherein said decoy authenticator file is a mapping file and wherein a replacement identifier is randomly assigned by said mapping file for the identifier entered by the prospective user and intercepted by said authenticator broker system.