Multi-factor authentication transfer

• US 20080115198A1
• Filed: 10/31/2006
• Published: 05/15/2008
• Est. Priority Date: 10/31/2006
• Status: Abandoned Application

• Current Assignee: Intuit, Inc.
• Original Assignee: Intuit, Inc.
• Inventors: Flora, John, Hsu, Paul J., Spies, JWM
• Application Number:
  US11/591,224
• Publication Number:
  US 20080115198A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party

Abstract

A system that uses multi-factor authentication while retrieving information is described. During operation, the system requests and receives multiple authentication factors from a user of an application on a first host. These multiple authentication factors are associated with a document on a second host, and include authentication information that enables access to the document. Furthermore, the system uses the multiple authentication factors to access the document. While accessing the document, the system retrieves information from the document by navigating through the document, identifying the information, and aggregating the information.

Claims

1. A method for retrieving information, comprising:

requesting multiple authentication factors from a user of an application on a first host, wherein the multiple authentication factors are associated with a document on a second host, and wherein the multiple authentication factors include authentication information that enable access to the document;

receiving the multiple authentication factors from the user;

using the multiple authentication factors to access the document; and

while accessing the document, retrieving the information from the document by;

navigating through the document;

identifying the information; and

aggregating the information.

2. The method of claim 1, further comprising providing the information to the user.

3. The method of claim 1, further comprising storing the information on the first host.

4. The method of claim 1, further comprising storing the multiple authentication factors on the first host.

5. The method of claim 1, further comprising repeating the accessing and retrieving operations after a time interval.

6. The method of claim 5, wherein the accessing and retrieving operations are repeated periodically.

7. The method of claim 5, wherein the accessing and retrieving operations are repeated when the information is changed.

8. The method of claim 1, wherein the first host is a client computer and the second host is a server computer.

9. The method of claim 1, wherein the document includes a website or a web page.

10. The method of claim 1, wherein the application includes a financial application.

11. The method of claim 10, wherein the financial application includes Quicken™

.

12. The method of claim 10, wherein the financial application includes TurboTax™

.

13. The method of claim 1, wherein the multiple authentication factors include a dynamic factor that is updated after a time interval.

14. The method of claim 13, wherein the dynamic factor includes a Rivest-Shamir-Adleman (RSA) token.

15. The method of claim 1, wherein aggregating the information involves scraping the information from the document.

16. The method of claim 1, wherein the information includes financial information for the user.

17. The method of claim 1, wherein the information includes multiple email accounts for the user.

18. The method of claim 1, wherein the information includes medical information for the user.

19. A computer program product for use in conjunction with a computer system, the computer program product comprising a computer-readable storage medium and a computer-program mechanism embedded therein for configuring the computer system, the computer-program mechanism including:

instructions for requesting multiple authentication factors from a user of an application on a first host, wherein the multiple authentication factors are associated with a document on a second host, and wherein the multiple authentication factors include authentication information that enable access to the document;

instructions for receiving the multiple authentication factors from the user;

instructions for using the multiple authentication factors to access the document; and

instructions for retrieving the information from the document by;

instructions for navigating through the document;

instructions for identifying the information; and

instructions for aggregating the information.

20. A computer system, comprising:

a processor;

memory;

a program module, wherein the program module is stored in the memory and configured to be executed by the processor, the program module including;

instructions for requesting multiple authentication factors from a user of an application on a first host, wherein the multiple authentication factors are associated with a document on a second host, and wherein the multiple authentication factors include authentication information that enable access to the document;

instructions for receiving the multiple authentication factors from the user;

instructions for using the multiple authentication factors to access the document; and

instructions for retrieving the information from the document by;

instructions for navigating through the document;

instructions for identifying the information; and

instructions for aggregating the information.