Patent ID: 8452980

Claim:
A method of detecting a fraudulent login attempt across a network, the method comprising: receiving, at a first time, by a server device via a network connection, a login request from a client device, the login request including: a username associated with a user account; and a one-time password (OTP) provided by a token device; calculating, by the server device, whether the first time is more than a predetermined amount of time after a most-recent login to the user account; when the first time is more than the predetermined time since the most-recent login to the user account, accepting, by the server device, the login request according to a first mode of operation; and when the first time is not more than the predetermined time since the most-recent login to the user account, accepting, by the server device, the login request according to a second mode of operation; wherein: the first mode of operation includes: accepting, by the server device, the login request, if the OTP is associated with a time within a first time window; if the OTP is associated with a time which is outside the first time window but is within a second time window, the second time window being larger than the first time window, then: prompting, by the server device, the individual to enter a new OTP; and accepting, by the server device, the login request if the new OTP is associated with a time immediately following the first time; and otherwise, rejecting, by the server device, the login request; and the second mode of operation includes: accepting, by the server device, the login request, if the OTP is associated with a time within the first time window; and otherwise, rejecting, by the server device, the login request.