Email-based authentication for sign in and security

Patent metadata

Field	Value
Publication number	US-2022086133-A1
Application number	US-202117473919-A
Country	US
Kind code	A1
Filing date	Sep 13, 2021
Priority date	Sep 14, 2020
Publication date	Mar 17, 2022
Grant date	—

Abstract

The present invention is related to systems and methods that improve the security of computer networks. These systems and methods may be utilized in various applications such as electronic commerce, secure document access, and electronic authentication. The systems and methods include methods for accessing secure accounts without the use of passwords in order to eliminate the need for passwords. In addition, systems and methods further deter automated attacks online using email authentication.

First claim

What is claimed is:

1 . A method for improving security of a computer network by utilizing Simple Mail Transfer Protocol (SMTP), the method comprising:
receiving, via SMTP, a message that requests authentication of a user from a customer device, wherein the message contains a token; authenticating a sender of the message utilizing at least one DomainKeys Identified Mail (DKIM), Domain-based Message Authentication, Reporting & Conformance (DMARC), and/or Sender Policy Framework (SPF) protocols; decoding the token contain in the message to form a decoded token; conditionally performing additional security checks on the message based on the decoded token; and authenticating the user when the sender of the message is authenticated and the additional security checks are successful.

2 . The method of claim 1 , wherein the authenticating the user grants the user access to a secure webpage.

3 . The method of claim 1 , wherein the additional security checks are performed when the decoded token indicates that the message was generated via a copy and paste routine.

4 . The method of claim 3 , wherein the additional security checks include performing a multi-factor authentication.

5 . The method of claim 1 , wherein authenticating the user generates an Oauth token.

6 . The method of claim 5 , wherein the Oauth token grants the user access to webpages hosted by a plurality of third parties.

7 . A system for improving security of a computer network utilizing Simple Mail Transfer Protocol (SMTP), the system comprising:
a memory; a communication interface that is communicatively coupled to a client device via network; and a processor that is communicatively coupled to the memory and the communication interface, wherein the processor is configured to: receive, using the communication interface, a message that requests authentication of a user from a customer device via SMTP, wherein the message contains a token; authenticate a sender of the message utilizing at least one DomainKeys Identified Mail (DKIM), Domain-based Message Authentication, Reporting & Conformance (DMARC), and/or Sender Policy Framework (SPF) protocols; decode the token contain in the message to form a decoded token; conditionally perform additional security checks on the message based on the decoded token; and authenticate the user when the sender of the message is authenticated and the additional security checks are successful.

8 . The system of claim 7 , wherein the user is granted access to a secure webpage when the user is authenticated.

9 . The system of claim 7 , wherein the additional security checks are performed when the decoded token indicates that the message was generated via a copy and paste routine.

10 . The system of claim 9 , wherein the additional security checks include performing a multi-factor authentication.

11 . The system of claim 7 , wherein an Oauth token is generated when the user is authenticated.

12 . The system of claim 11 , wherein the Oauth token grants the user access to webpages hosted by a plurality of third parties.

13 . A non-transitory computer readable storage medium that stores instructions for improving security of a computer networking by utilizing Simple Mail Transfer protocol, wherein the instructions when executed by a processor, cause the processor to execute a method, the method comprising:
receiving, via SMTP, a message that requests authentication of a user from a customer device, wherein the message contains a token; authenticating a sender of the message utilizing at least one DomainKeys Identified Mail (DKIM), Domain-based Message Authentication, Reporting & Conformance (DMARC), and/or Sender Policy Framework (SPF) protocols; decoding the token contain in the message to form a decoded token; conditionally performing additional security checks on the message based on the decoded token; and authenticating the user when the sender of the message is authenticated and the additional security checks are successful.

14 . The non-transitory computer readable storage medium of claim 13 , wherein the authenticating the user grants the user access to a secure webpage.

15 . The non-transitory computer readable storage medium of claim 13 , wherein the additional security checks are performed when the decoded token indicates that the message was generated via a copy and paste routine.

16 . The non-transitory computer readable storage medium of claim 15 , wherein the additional security checks include performing a multi-factor authentication.

17 . The non-transitory computer readable storage medium of claim 13 , wherein authenticating the user generates an Oauth token.

18 . The non-transitory computer readable storage medium of claim 17 , wherein the Oauth token grants the user access to webpages hosted by a plurality of third parties.

Assignees

• Swoop Ip Holdings Llc

Inventors

• Killoran Jr John P
• Trebitowski Brandon
• Baca Isaiah
• Killoran Patrick

Classifications

• H04L51/18

  Commands or executable codes · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L63/0807 Primary

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• H04L51/046

  Interoperability with other network applications or services · CPC title