Apparatus and method for convenient and secure access to websites

• US 20090328169A1
• Filed: 01/25/2006
• Published: 12/31/2009
• Est. Priority Date: 01/25/2006
• Status: Abandoned Application

• Current Assignee: Securebit LLC
• Original Assignee: Securebit LLC
• Inventors: Hutchison, Keith, Hutchison, Lonny
• Application Number:
  US11/339,353
• Publication Number:
  US 20090328169A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A website access application accesses an encrypted central repository on a user'"'"'s computer to store and access a variety of user-based website login and authentication information in the repository. The central repository provides a single point of access for the authentication information and, by accessing the repository; the process of user identification and authentication for multiple websites can be automated. A single user-selected keystroke combination can be utilized to initiate user sessions with multiple disparate secure websites by accessing the user website login information contained in the central repository and extracting the user login and authentication information contained therein. Additionally, the website access application will track and report on the times savings associated with the streamlined login process for accessing secure websites. In yet another preferred embodiment of the present invention, the website access application will analyze the user authentication information for various websites and provide suggestions to enhance the relative strength of the authentication information. Finally, the website access application supports a wide variety of user authentication protocols, thereby ensuring secure access to the repository.

Claims

1. An apparatus comprising:

a processor;

a memory coupled to said processor;

a website database residing in said memory; and

a website access application residing in said memory, said website access application accessing said website database and extracting user identification and user authentication information for a user from said website database and said website database application using said user identification and said user authentication to log said user into a website.

2. The apparatus of claim 1 further comprising a security mechanism, said security mechanism being configured to evaluate the adequacy of said user identification and user authentication information and blocking access to said website if said user identification and user authentication information is deemed not secure.

3. The apparatus of claim 1 wherein said website database comprises a plurality of website records, each of said plurality of records comprising a website URL and at least a user login ID and a user password for a user of a website identified by said website URL.

4. The apparatus of claim 1 further comprising a security mechanism, said security mechanism providing encryption functionality for said website access application.

5. The apparatus of claim 1 further comprising an authentication mechanism, said authentication mechanism authenticating said user prior to allowing said user to access said website access application, said authentication mechanism authenticating said user by at least one of OS authentication, typed authentication, mathematical authentication, voice authentication, fingerprint authentication, retinal scan authentication, facial authentication, DNA authentication, mouse authentication, date/time authentication, hardware authentication, certificate authentication, signature authentication, card authentication, drawing authentication, color authentication, RFID authentication, sound authentication, picture authentication, security token authentication, and GPS authentication.

6. The apparatus of claim 1 wherein said website database comprises a plurality of website records, each of said plurality of records comprising a website URL and at least a user login ID and a user password for a user of a website identified by said website URL.

7. The apparatus of claim 1 wherein said website access application further comprises a user interface, said user interface being configured to allow said user to access said website database and create or update a plurality of website records, each of said plurality of website records comprising a website URL and at least a user login ID and a user password for a user of a website identified by said website URL.

8. The apparatus of claim 1 further comprising a security mechanism, said security mechanism being configured to remove cookies from said memory at the end of an Internet browsing session.

9. The apparatus of claim 1 further comprising:

a security mechanism, said security mechanism, said security mechanism being configured to evaluate the adequacy of said user identification and user authentication information and blocking access to said website if said user identification and user authentication information is deemed not secure;

an authentication mechanism, said authentication mechanism authenticating said user prior to allowing said user to access said website access application, said authentication mechanism authenticating said user by at least one of OS authentication, typed authentication, mathematical authentication, voice authentication, fingerprint authentication, retinal scan authentication, facial authentication, DNA authentication, mouse authentication, date/time authentication, hardware authentication, certificate authentication, signature authentication, card authentication, drawing authentication, color authentication, RFID authentication, sound authentication, picture authentication, security token authentication, GPS authentication; and

a user interface, said user interface being configured to allow said user to access said website database and create or update a plurality of website records, each of said plurality of website records comprising a website URL and at least a user login ID and a user password for said user of a website identified by said website URL.

10. The apparatus of claim 1 further comprising a user feedback mechanism residing in said memory, said user feedback mechanism being configured to navigate to a website and collect user feedback regarding said website access application upon un-installation of said website access application.

11. A method comprising the steps of:

a) navigating to a website;

b) using a website access application to access a website database to extract user identification and authentication data required for gaining access to said website; and

c) logging a user into said website using said user identification and authentication data.

12. The method of claim 11 further comprising the steps of:

capturing said user identification and authentication data for said website; and

storing said user identification and authentication data in said website database for later access to said website.

13. The method of claim 11 further comprising the step of evaluating the adequacy of said user identification and user authentication information and blocking access to said website if said user identification and user authentication information is deemed not secure.

14. The method of claim 11 further comprising the step of authenticating said user via an authentication mechanism prior to accessing said website database to verify the identity of said user.

15. The method of claim 14 where said step of authenticating said user via an authentication mechanism comprises the step of authenticating said user via at least one of OS authentication, typed authentication, mathematical authentication, voice authentication, fingerprint authentication, retinal scan authentication, facial authentication, DNA authentication, mouse authentication, date/time authentication, hardware authentication, certificate authentication, signature authentication, card authentication, drawing authentication, color authentication, RFID authentication, sound authentication, picture authentication, security token authentication, and GPS authentication.

16. The method of claim 11 further comprising the steps of:

navigating to a pre-designated website upon un-installation of said website access application; and

collecting user feedback regarding said website access application.

17. The method of claim 11 further comprising the step of repeating steps a, b, and c for a plurality of websites.

18. The method of claim 17 wherein said step of repeating steps a, b, and c for a plurality of websites is performed in conjunction with an operating system command.

19. A program product comprising:

a website database;

a website access application, said website access application; and

signal bearing media bearing said website access application.

20. The program product of claim 19 wherein said signal bearing media comprises recordable media.

21. The program product of claim 19 wherein said signal bearing media comprises transmission media.

22. The program product of claim 19 further comprising a security mechanism, said security mechanism being configured to provide security and

23. The program product of claim 19 wherein said website access application further comprises a user interface, said user interface being configured to provide an interface to said website access a

24. The program product of claim 19 further comprising an authentication mechanism, said authentication mechanism being configured to authenticate a user via at least one of OS authentication, typed authentication, mathematical authentication, voice authentication, fingerprint authentication, retinal scan authentication, facial authentication, DNA authentication, mouse authentication, date/time authentication, hardware authentication, certificate authentication, signature authentication, card authentication, drawing authentication, color authentication, RFID authentication, sound authentication, picture authentication, security token authentication, and GPS authentication.

25. The program product of claim 19 further comprising a user feedback mechanism, said user feedback mechanism being configured to navigate to a website and collect user feedback regarding said website access application.

26. The program product of claim 19 wherein said website access application is configured to repeatedly log a user into a plurality of websites in conjunction with an operating system command.