Systems and methods for password managers

Patent metadata

Field	Value
Publication number	US-12216757-B2
Application number	US-202418425019-A
Country	US
Kind code	B2
Filing date	Jan 29, 2024
Priority date	Jan 27, 2020
Publication date	Feb 4, 2025
Grant date	Feb 4, 2025

Abstract

An authentication system comprises a browser extension and a password manager application. The browser extension can be configured for execution on a first user device. The browser extension can be configured to display a response code and receive a login credential from a server. The response code can comprise a unique session identifier identifying the browser extension and a user browsing session. The password manager application can be configured for execution on a second user device. The second user device can have a scanner configured to scan the response code. The password manager application can be configured to extract the unique session identifier, parse the unique session identifier into session identifier content, send a portion of the session identifier content to the server, receive an approval from a user of the second user device, and send a notification to the server.

First claim

What is claimed is:

1. A system, comprising a first user device including a browser extension and a second user device including a password manager application, wherein:
the browser extension is configured to:
display a code comprising metadata, the metadata including a unique session identifier, a security question, a device identifier, and a browser type identifier; and
receive login credentials from a server; and

the password manager application is configured to:
receive the code;
establish a handshake with the server based on the metadata;
parse the unique session identifier into session identifier content;
send the security question and a portion of the session identifier content to the server; and
receive an approval from the server.

2. The system of claim 1 , wherein the browser extension is further configured to encrypt the received login credentials with a private key.

3. The system of claim 1 , wherein the password manager application is further configured to extract the unique session identifier and the security question.

4. The system of claim 1 , wherein the password manager application is further configured to receive a security question answer from the server, and send a notification to the server, wherein the notification includes the unique session identifier and the login credentials.

5. The system of claim 1 , wherein the unique session identifier identifies the browser extension and a user browsing session, and the browser extension is further configured to perform the login using the credentials.

6. The system of claim 1 , wherein the approval comprises a personal identification number (PIN) or a biometric.

7. The system of claim 1 , wherein the code comprises a bar code or a quick response code.

8. A method, comprising:
receiving a secure login option for a login associated with a website, wherein the website is displayed on a first user device;
generating a unique session identifier and sending the unique session identifier to a server;
displaying a code on the first user device, wherein the code includes metadata comprising the unique session identifier, a security question, a device identifier, a browser type identifier, and a time zone identifier;
establishing a handshake with the server based on the metadata;
receiving credentials for the login associated with the unique session identifier from the server; and
performing the login using the credentials.

9. The method of claim 8 , wherein the login is secured through a password manager application on a second user device.

10. The method of claim 9 , wherein the code is scannable by the second user device.

11. The method of claim 8 , further comprising encrypting the credentials using a private key.

12. The method of claim 8 , further comprising transmitting the metadata to the server to establish the handshake.

13. The method of claim 8 , further comprising receiving a security question answer from the server, wherein the security question answer is associated with a password manager application.

14. The method of claim 8 , wherein the unique session identifier identifies a browser extension and a user browsing session.

15. The method of claim 14 , wherein the second user device includes a scanner configured to scan the code.

16. The method of claim 8 , further comprising receiving a whitelist from the server, wherein the secure login option is available for the website because it is a member of the whitelist.

17. The method of claim 8 , wherein the metadata includes at least one selected from the group of an IP address and a time stamp.

18. A non-transitory computer-accessible medium having stored thereon computer-executable instructions that, when executed by a computer arrangement, cause the computer arrangement to perform procedures comprising:
receiving a secure login option for a login associated with a website, wherein the website is displayed on a first user device;
generating a unique session identifier and sending the unique session identifier to a server;
displaying a code on the first user device, wherein the code includes metadata comprising the unique session identifier, a security question, a device identifier, a browser type identifier, and a time zone identifier;
establishing a handshake with the server based on the metadata;
receiving credentials for the login associated with the unique session identifier from the server; and
performing the login using the credentials.

19. The non-transitory computer-accessible medium of claim 18 , the procedures further comprise receiving an approval, wherein the approval comprises a two-factor authentication.

20. The non-transitory computer-accessible medium of claim 18 , the procedures further comprise receiving a security question answer and sending a notification to a server, wherein the notification includes the unique session identifier and the login credentials.

21. The method of claim 8 , wherein establishing a handshake with the server is performed on a second user device.

Assignees

• Capital One Services Llc

Inventors

• Ilincic Rajko
• Rule Jeffrey

Classifications

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title