Operating system interface for credential management

Patent metadata

Field	Value
Publication number	US-9825934-B1
Application number	US-201414498668-A
Country	US
Kind code	B1
Filing date	Sep 26, 2014
Priority date	Sep 26, 2014
Publication date	Nov 21, 2017
Grant date	Nov 21, 2017

Abstract

A computer-implemented method for providing an operating system level interface for communicating credential data between applications includes detecting, by an operating system, a field configured to receive an authentication credential and identifying a credential management application configured to provide authentication credentials. The method includes requesting, by the operating system and using an operating system interface configured to communicate authentication credentials, the authentication credential from the credential management application. And when the credential management application provides the authentication credential using the operating system interface configured to communicate authentication credentials, the method includes providing the authentication credential for entry into the field.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
detecting, in a displayed application by an operating system, a field configured to receive an authentication credential;
in response to detecting the field and before the field receives the authentication credential:
1) identifying, by the operating system, a credential management application configured to provide the authentication credential,
2) requesting, by the operating system, the authentication credential from the credential management application, and
3) receiving, at the operating system, the requested authentication credential; and

providing, by the operating system, the authentication credential for entry into the field as a redacted text inaccessible to a peripheral device.

2. The method of claim 1 , further comprising, in response to the operating system requesting the authentication credential:
requesting an authenticated personal identification number from a user prior to providing the authentication credential for entry into the field; and
receiving the authenticated personal identification number.

3. The method of claim 1 , wherein requesting the authentication credential comprises searching by the credential management application for the authentication credential in a database of authentication credentials using an identifier of a service provider associated with the detected field.

4. The method of claim 1 , wherein identifying the credential management application comprises:
determining, by the operating system that the credential management application is inactive; and
loading the credential management application.

5. The method of claim 1 , wherein the field is configured to provide the authentication credential to a remote server providing a service.

6. The method of claim 1 , further comprising receiving from the displayed application an identification parameter of a service provider requesting the authentication credential.

7. The method of claim 1 , further comprising, in response to the operating system requesting the authentication credential:
providing, by the operating system, an overlay user interface requesting a re-authentication credential;
receiving, by the operating system, the re-authentication credential; and
providing, by the operating system, the re-authentication credential to the credential management application, wherein the requested authentication credential is received in response to providing the re-authentication credential.

8. The method of claim 7 , wherein the re-authentication credential comprises a personal identification number (PIN), a fingerprint, or a retina scan.

9. The method of claim 7 , wherein receiving the re-authentication credential by the operating system comprises coupling a personal computer device with a second factor authentication device, the second factor authentication device including a user identification.

10. The method of claim 1 , wherein retrieving the authentication credential from the credential application comprises retrieving the authentication credential from one of a plurality of credential management applications.

11. The method of claim 1 , wherein detecting the field configured to receive the authentication credential comprises receiving, by the operating system, a request for the authentication credential when an active application detects a code line for entering the authentication credential.

12. A system, comprising:
a memory comprising instructions;
a processor configured to execute the instructions to:
detect, in a displayed application by an operating system, a field configured to receive an authentication credential;
in response to detecting the field and before the field receives the authentication credential:
1) retrieve, by the operating system, an identification parameter of a service provider requesting the authentication credential,
2) identify, by the operating system, a credential management application configured to provide the authentication credential,
3) request, by the operating system, the authentication credential from the credential management application using the identification parameter of the service provider, and
4) receive, at the operating system, the requested authentication credential; and

provide, by the operating system, the authentication credential for entry into the field as a redacted text inaccessible to a peripheral device.

13. The system of claim 12 , wherein the processor is further configured to execute instructions to search, by the credential management application, for the authentication credential in a database of authentication credentials using the identification parameter of the service provider requesting the authentication credential.

14. The system of claim 12 , wherein the processor is further configured to activate the credential management application in response to the request by the operating system when the credential management application is inactive.

15. The system of claim 12 , wherein the field is configured to provide the authentication credential to a remote server providing a service.

16. A non-transitory machine-readable storage medium comprising machine-readable instructions for causing a processor to execute a method, the method comprising:
detecting, by an operating system, a field configured to receive an authentication credential;
in response to detecting the field and before the field receives the authentication credential:
1) identifying, by the operating system, a credential management application configured to provide the authentication credential,
2) receiving, by the operating system, an identification parameter of a service provider requesting the authentication credential,
3) requesting, by the operating system, the authentication credential from the credential management application using the identification parameter of the service provider, wherein when the credential management application is inactive, the operating system loads the credential management application in response to the request, and
4) receiving, at the operating system, the requested authentication credential; and

providing, by the operating system, the authentication credential for entry into the field as a redacted text inaccessible to a peripheral device.

17. The non-transitory machine-readable medium of claim 16 , further comprising, in response to the operating system requesting the authentication credential:
providing, by the operating system, an overlay user interface requesting a re-authentication credential;
receiving, by the operating system, the re-authentication credential; and
providing, by the operating system, the re-authentication credential to the credential management application, wherein the requested authentication credential is received in response to providing the re-authentication credential.

18. The non-transitory machine-readable medium of claim 17 , wherein the re-authentication credential comprises a personal identification number (PIN), a fingerprint, or a retina scan.

19. The non-transitory machine-readable medium of claim 17 , wherein receiving the re-authentication credential by the operating system comprises coupling a personal computer device with a second factor authentication device, the second factor authentication device including a user identification.

20. The non-transitory machine-readable medium of claim 16 , wherein detecting the field configured to receive the authentication credential comprises receiving, by the operating syst

Assignees

• Google Inc

Inventors

• Alexander Eldridge Lee

Classifications

• G06F21/41

  where a single sign-on provides access to a plurality of computers · CPC title

• H04L63/0815 Primary

  providing single-sign-on or federations · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F40/174

  Form filling; Merging · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title