International Business Machines Corporation

Kyndryl, Inc.

John Richard Feezell

Cesar Augusto Rodriguez Bravo

Edgar Adolfo Zamora Duran

Craig M Trim

David Alonso Campos Batista

Wayne Francis Tackabury

Anto Ajay Raj John

Faraz Ahmad

Rhonda L Childress

Kevin Jimenez Mendez

Andre Luis Soares

A random password policy for a specific user associated with an entity is generated based on a global password requirement. A new password created by the specific user based on the generated random password policy is identified. That the new password complies with a set of requirements specified by the generated random password policy is confirmed.

Unique password policy creation

Techniques are described with regard to client authentication management. An associated method includes constructing an authentication resolution model specific to a client based upon error patterns respectively included in a plurality of erroneous authentication submissions inconsistent with a proper authentication submission. The method further includes receiving, via an authentication interface, a new erroneous authentication submission inconsistent with the proper authentication submission. Responsive to determining that the new erroneous authentication submission corresponds to an authentication exception defined in the authentication resolution model, the method further includes completing authentication. Responsive to determining that the new erroneous authentication submission corresponds to an authentication warning defined in the authentication resolution model, the method further includes performing at least one client account warning protection activity. Responsive to determining that the new erroneous authentication submission corresponds to an authentication attack defined in the authentication resolution model, performing at least one client account attack protection activity.

Client authentication management based upon modeling

Disclosed is a computer-implemented method for analyzing server for security vulnerabilities. The method includes selecting a first server from a plurality of servers, wherein the first sever includes a plurality of accounts. The method includes identifying, by a password vulnerability scanner, weak accounts in the plurality of accounts including a first weak account. The method includes determining, by a user risk engine, a user risk score for a user associated with the weak account. The method includes determining, by a server risk engine, a server risk score for the first server, wherein the server risk score is based on a set of server factors and a set of data factors. The method includes generating, by a smart risk scorer, an overall risk score for the first server. The method includes categorizing, based on the overall risk score of the first sever, a risk level for the first server.

Advanced risk evaluation for servers

Injection attack identification and mitigation includes tracking characteristics of user input by a user to a computer system via input device(s), building and maintaining a user profile based on the tracking and that provides a baseline of expected characteristics of user input, the baseline defined by the tracked characteristics, monitoring input to the computer system in real time as the input is provided to the computer system, identifying, based on the monitoring and on a comparison of characteristics of the monitored input to the baseline of expected characteristics, a potential malicious code injection as part of the monitored input to the computer system, and performing mitigation processing based on identifying the potential malicious code injection.

Injection attack identification and mitigation

Embodiments are disclosed for preventing network attacks. The techniques include generating a usage profile for a computing device that accesses a network. The techniques also include determining a plurality of actual use real-time indicators for a network connection on the network. The techniques further include determining a plurality of expected use real-time indicators for the network connection. Additionally, the techniques include calculating a risk assessment value for the network connection based on the actual use real-time indicators and the expected use real-time indicators. Further, the techniques include performing a security action for the network connection based on the calculated risk assessment value.

Preventing network attacks

In a computer implemented approach for securely updating vehicle software the computer monitors data associated with a vehicle, determines that a software update is necessary, requests validation of a software update, receives validation of the software update from the network, updates the vehicle software with the received software update, receives an updated blockchain ledger entry associated with the vehicle, and utilizes the updated vehicle software to control the vehicle.

Multi-variable based secure download of vehicle updates

A method, computer system, and a computer program product for enhanced user authentication is provided. The present invention may include obtaining, from a user device, a user name associated with the user device. The present invention may also include obtaining, from the user device, a system name associated with the user device. The present invention may then include identifying, in a database of a security device in communication with the user device, a password associated with the obtained user name and the obtained system name. The present invention may then include, in response to a login prompt of the user device, automatically injecting the identified password from the security device in communication with the user device into the login prompt.

Enhanced password authentication across multiple systems and user identifications

The disclosure is directed to wirelessly injecting passwords from a password vault application on a mobile device into a computing device. A method according to embodiments includes: sending a password using a wireless protocol from a mobile computing device to a universal serial bus human interface device (USB HID device) coupled with a computing device; receiving the password at the USB HID device; and injecting, by the USB HID device, the password as a series of keystrokes into a password field on the computing device.

Wireless injection of passwords

The disclosure is directed to the keyboard injection of passwords from a password vault application on a mobile computing device to a computing system coupled to the keyboard. A method according to embodiments includes: wirelessly receiving a password at a physical keyboard; and transmitting the password from the keyboard to a computing system.

Keyboard injection of passwords

Aspects of the present disclosure relate to identifying a driving mode of an autonomous vehicle. A driving mode of an autonomous vehicle is determined by one or more processing circuits of the autonomous vehicle, the driving mode representing an amount of autonomy of the autonomous vehicle at a particular time. A request for the driving mode of the autonomous vehicle is received from a requesting device. The driving mode is then transmitted to the requesting device.

Identifying a driving mode of an autonomous vehicle

An approach is described of facilitating resolution of a human authentication test. The approach may facilitate user completion of a human authentication test having at least one image while preserving security against bots. A method pertaining to such approach may include facilitating scanning of at least one image of a human authentication test from an interface of a client application. The human authentication test may be received from an image server of an authentication server system for display via the interface of the client application. The at least one image may be scanned via an image capture device. The method further may include sending to an authentication server of the authentication server system the at least one image. The method further may include receiving from the authentication server authentication text corresponding to the at least one image and displaying the authentication text.

Growing community of inventors

Pikeville, TN, United States of America

John Richard Feezell