首页>
外国专利>
PROTECTING AGAINST MALICIOUS DISCOVERY OF ACCOUNT EXISTENCE
PROTECTING AGAINST MALICIOUS DISCOVERY OF ACCOUNT EXISTENCE
展开▼
机译:防范恶意的帐户存在发现
展开▼
页面导航
摘要
著录项
相似文献
摘要
A sign-in system can be protected against enumeration attacks while providing an improved sign-in experience for legitimate users by disclosing whether or not an account exists. An account within a specified domain can be identified by an account identifier such as a username. Before a threshold throttling value is reached, account existence/non-existence information can be provided in response to an access request. In response to reaching or exceeding a specified threshold throttling value, account existence/non-existence information can cease to be provided. Entering a valid account identifier/authenticating credential credentials pair provides access to the computer system regardless of whether or not the threshold was reached or exceeded or not reached.
展开▼