FIELD: information technologies.
SUBSTANCE: invention relates to means of processing a request from potentially unauthorised user to access the resource. Identifier of the first communication session is obtained, which is connected to the user account. Identifier of the second communication session is obtained, which is connected to the user account. Creating the first user behaviour model associated with the first communication session, based on user behaviour during the first communication session. Creating the second user behaviour model connected to the second communication session, based on user behaviour during the second communication session. Ban on user activity is imposed within the first and second appropriate communication session, if one of the first user behaviour models and the second user behaviour models differs from the stored model of authorised user behaviour associated with the user account.
EFFECT: technical result consists in reducing probability of cracking user accounts.
34 cl, 5 dwg
