Patent ID: 8578476

Claim:
A method of determining a risk associated with a login transaction, the method comprising: receiving, by a processor, a password associated with a login transaction, the login transaction comprising a login attempt by a user to gain access to a resource; during authentication of the login transaction based on the received password: a) retrieving, by the processor, a valid password associated with the user; b) determining, by the processor, whether the received password matches the valid password; and c) in response to a determination that the received password does not match the valid password: retrieving, by the processor, user information associated with the user; determining, by the processor, whether the received password is derived from the user information; and determining, by the processor, a risk score associated with the login transaction based on a determination that the received password is derived from the user information, wherein the risk score indicates a degree of risk associated with the login transaction.