Dynamic account throttling

摘要

A user account may be throttled to restrict access once aberrant behavior is detected. Upon receiving a request to access the user account, a determination of whether the user account is in a throttled state may be made. In some aspects, when the user account is not in a throttled state, user account access may be determined based at least in part on an access credential. Further, in some aspects, when the user account is in a throttled state, user account access may be determined based at least in part on an access credential and other client information associated with the user account.

主权项

1. A system, comprising:
at least one memory that stores computer-executable instructions; and at least one processor configured to access the at least one memory, wherein the at least one processor is configured to execute the computer-executable instructions to:
receive a first request to log in to a user account;place the user account in a throttled state based at least in part on the first request;receive, on behalf of a user and while the user account is in the throttled state, a second request to log in to the user account, the second request including valid authentication credentials for the user account;authenticate the user based at least in part on the valid authentication credentials;evaluate other client information associated with the second request to determine that the other client information is associated with the user account; andprovide the user with access to the user account while the user account is in the throttled state responsive to a determination that the other client information is associated with the user account.