Authentication translation

• US 10,521,568 B1
• Filed: 02/12/2019
• Issued: 12/31/2019
• Est. Priority Date: 12/09/2011
• Status: Active Grant

• Current Assignee: Carbyne Biometrics, LLC (Bjorn Markus Jakobsson)
• Original Assignee: RightQuestion LLC (Bjorn Markus Jakobsson)
• Inventors: Jakobsson, Bjorn Markus
• Primary Examiner(s): Steinle, Andrew J
• Application Number:
  US16/273,797
• Time in Patent Office: 322 Days
• Field of Search: None
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/128 involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Authentication translation is disclosed. A request to access a resource is received at an authentication translator, as is an authentication input. The authentication input corresponds to at least one stored record. The stored record is associated at least with the resource. In response to the receiving, a previously stored credential associated with the resource is accessed. The credential is provided to the resource.

Claims

1. A system, comprising:

one or more processors configured to;

receive, at a device, a request from a user to access a resource external to the device;

access a record stored on the device, the record comprising credential information associated with the external resource to which the user has requested access;

retrieve at least a portion of the credential information from the record;

establish a connection between the device and the resource external to the device to which the user requested access;

facilitate a login of the user to the external resource at least in part by transmitting, on behalf of the user, from the device and via the established connection, output based at least in part on the at least portion of the credential information retrieved from the record, wherein the user of the device is logged into the external resource based at least in part on the output transmitted from the device on behalf of the user; and

perform a backup of the record to a remote storage entity, wherein the remote storage entity is configured to synchronize records between at least two devices associated with the user; and

a memory coupled to the one or more processors and configured to provide the one or more processors with instructions.

2. The system recited in claim 1, wherein the one or more processors are further configured to:

receive an authentication input from the user;

receive at least one of;

(1) a template stored on the device, and (2) data stored on the device associated with a password, the template comprising at least one of;

(1) fingerprint features, (2) voice biometric features, (3) facial recognition features, (4) iris detection features, and (5) retina features;

compare the authentication input with the at least one of;

(1) the template stored on the device, and (2) the data stored on the device associated with the password; and

perform an action based at least in part on the comparison.

3. The system recited in claim 2, wherein the action comprises at least one of:

(1) accessing a vault on the device, (2) accessing a vault on a remote storage entity, (3) performing decryption, (4) establishing a secure connection, (5) accessing the record comprising the credential information, (6) transmitting the output based at least in part on the at least portion of the credential information retrieved from the record, (7) accessing a username, (8) accessing a domain, (9) renegotiating the secure connection, (10) facilitating the login of the user to the external resource, (11) causing information on the device to be wiped, and (12) releasing of data store contents.

4. The system recited in claim 2, wherein the action comprises accessing a domain, and wherein a first domain and a second domain are associated with different authentication policies.

5. The system recited in claim 2, wherein the one or more processors are further configured to prompt the user to provide the authentication input.

6. The system recited in claim 2, wherein the one or more processors are further configured to determine a liveness of the user based at least in part on the authentication input.

7. The system recited in claim 2, wherein the record is accessed based at least in part on the authentication input.

8. The system recited in claim 1, wherein authentication information on the device is caused to be wiped.

9. The system recited in claim 1, wherein at least a portion of information on the device is stored in a secure storage.

10. The system recited in claim 1 wherein the credential information comprises at least one of a password, a cookie, and a cryptographic key.

11. The system recited in claim 1 wherein the record further comprises at least one of a username, an account number, an address, phone number information, and health care data.

12. The system recited in claim 1 wherein the user is associated with at least two of a first authentication template, a second authentication template, and a password.

13. A method, comprising:

receiving, at a device, a request from a user to access a resource external to the device;

accessing a record stored on the device, the record comprising credential information associated with the external resource to which the user has requested access;

retrieving at least a portion of the credential information from the record;

establishing a connection between the device and the resource external to the device to which the user requested access;

facilitating a login of the user to the external resource at least in part by transmitting, on behalf of the user, from the device and via the established connection, output based at least in part on the at least portion of the credential information retrieved from the record, wherein the user of the device is logged into the external resource based at least in part on the output transmitted from the device on behalf of the user; and

performing a backup of the record to a remote storage entity, wherein the remote storage entity is configured to synchronize records between at least two devices associated with the user.

14. The method of claim 13, further comprising:

receiving an authentication input from the user;

receiving at least one of;

(1) a template stored on the device, and (2) data stored on the device associated with a password, the template comprising at least one of;

(1) fingerprint features, (2) voice biometric features, (3) facial recognition features, (4) iris detection features, and (5) retina features;

comparing the authentication input with the at least one of;

(1) the template stored on the device, and (2) the data stored on the device associated with the password; and

performing an action based at least in part on the comparison.

15. The method of claim 14, wherein the action comprises at least one of:

(1) accessing a vault on the device, (2) accessing a vault on a remote storage entity, (3) performing decryption, (4) establishing a secure connection, (5) accessing the record comprising the credential information, (6) transmitting the output based at least in part on the at least portion of the credential information retrieved from the record, (7) accessing a username, (8) accessing a domain, (9) renegotiating the secure connection, (10) facilitating the login of the user to the external resource, (11) causing information on the device to be wiped, and (12) releasing of data store contents.

16. The method of claim 14, wherein the action comprises accessing a domain, and wherein a first domain and a second domain are associated with different authentication policies.

17. The method of claim 14, further comprising prompting the user to provide the authentication input.

18. The method of claim 14, further comprising determining a liveness of the user based at least in part on the authentication input.

19. The method of claim 14, wherein the record is accessed based at least in part on the authentication input.

20. The method of claim 13, wherein authentication information on the device is caused to be wiped.

21. The method of claim 13, wherein at least a portion of information on the device is stored in a secure storage.

22. The method of claim 13 wherein the credential information comprises at least one of a password, a cookie, and a cryptographic key.

23. The method of claim 13 wherein the record further comprises at least one of a username, an account number, an address, phone number information, and health care data.

24. The method of claim 13 wherein the user is associated with at least two of a first authentication template, a second authentication template, and a password.

25. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

receiving, at a device, a request from a user to access a resource external to the device;

accessing a record stored on the device, the record comprising credential information associated with the external resource to which the user has requested access;

retrieving at least a portion of the credential information from the record;

establishing a connection between the device and the resource external to the device to which the user requested access;

facilitating a login of the user to the external resource at least in part by transmitting, on behalf of the user, from the device and via the established connection, output based at least in part on the at least portion of the credential information retrieved from the record, wherein the user of the device is logged into the external resource based at least in part on the output transmitted from the device on behalf of the user; and

performing a backup of the record to a remote storage entity, wherein the remote storage entity is configured to synchronize records between at least two devices associated with the user.