| 主权项 |
1. A method for disabling a device associated with a virtual identity, the method comprising:
receiving, at an identity repository computer system and from the device, a request to use the virtual identity, wherein: the request comprises a passcode guess and a device identifier, wherein the passcode guess comprises a hash of a salted password; and the identity repository computer system stores device identifiers for a plurality of registered devices that have previously been paired with the virtual identity; determining, by the identity repository computer system, that the device identifier received from the device matches at least one of the device identifiers of the plurality of registered devices that are paired with the virtual identity, thereby indicating that the device is a registered device that was previously paired with the virtual identity; determining, by the identity repository computer system, that the passcode guess does not authorize use of the virtual identity even though it is received from a registered device; incrementing, by the identity repository computer system, a number of incorrect passcode guesses received within a time interval that is specific to the device; determining, by the identity repository computer system, that the number of incorrect passcode guesses received from the device within the time interval is greater than or equal to a threshold; and storing, by the identity repository computer system, an indication that subsequent requests associated with the device identifier should not authorize use of the virtual identity, while still allowing any of the other registered devices in the plurality of registered devices to authorize use of the virtual identity. |
