Measuring concentration risk in credit portfolios