Emc Corporation

Robert Black

William Duane

Karl Ackerman

Robert S Philpott

Yong Qiao

A method includes engaging in authentication operations each involving apparent use of a legitimate authenticator. Values of one or more authenticator variables are received and stored, where the authenticator variable(s) normally change in a known authenticator-specific way during the authentication operations, such as being calculated from a monotonically increasing dynamic variable. A risk analysis function is applied to the stored values to generate a risk indicator signal indicating a level of risk that the clone authenticator is in use. The risk analysis function includes detection of an abnormal change of the authenticator variable(s), such as use of non-monotonic dynamic variable values. The risk indicator signal is output to an access controller that operates, based on the level of risk indicated by the risk indicator signal, to selectively inhibit an otherwise successful authentication operation involving apparent use of the legitimate authenticator.

Method and system for detection of clone authenticator

A method of detecting a fraudulent login attempt across a network is provided. The method includes (a) receiving, at some time, a login request from a client, the login request including (1) a username associated with a user account, (2) a static password associated with the user account, and (3) a one-time password provided by a token, (b) calculating whether the time is more than a predetermined amount of time after a most-recent login to the account, (c) when the time is more than the predetermined time since the most-recent login, accepting the login request according to a first mode, and (d) when the first time is not more than the predetermined time since the most-recent login, accepting the login request according to a second mode, the second mode rejecting a greater proportion of login attempts than the first mode rejects. An apparatus and computer program product are also provided.

Defeating real-time trojan login attack with delayed interaction with fraudster

A method for disposing of self-powered cards includes eradicating any identifying information from the card without damaging the power source in a manner that would allow unwanted materials to become exposed, and disposing of the power source. In one embodiment, the method includes first identifying the location of the power source. Eradication can take many forms, for example, damaging the magnetic strip (demagnetizing or cutting); obscuring information on the body of the card; and/or disabling the smart chip. Once all identifying information is eradicated without damaging the power source, the power source can be properly disposed of at a waste disposal site. The information can be removed by the owner of the information or by a facility that has security safeguards to protect the information. Because the identifying information is eradicated, any waste disposal site that disposes of power sources can be used, regardless of the sensitivity of the information.

Growing community of inventors

Brookline, MA, United States of America

Robert Black