METHOD AND APPARATUS FOR AUTOMATED PASSWORD ENTRY

• US 20140298432A1
• Filed: 03/26/2014
• Published: 10/02/2014
• Est. Priority Date: 03/28/2013
• Status: Active Grant

• Current Assignee: Wendell Brown
• Original Assignee: Wendell Brown
• Inventors: Brown, Wendell D.
• Granted Patent: US 9,565,181 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method and apparatus are provided for protecting security credentials (e.g., username/password combinations) and/or other sensitive data in a “password vault.” A password vault device may be or may be incorporated into a portable (or even wearable) electronic device, such as a smart phone, smart watch, smart glasses, etc. When a security credential is requested during a user'"'"'s operation of the password vault device or some other computing/communication device, such as when the user is accessing an online site or service via a browser program, the request is passed to the password vault, and the appropriate security credential is retrieved, delivered, and entered into the requesting interface.

Claims

1. A method of protecting and automatically delivering a security credential with a portable credential vault device, the method comprising:

receiving multiple security credentials of a user at the credential vault device;

storing the security credentials and information identifying remote computer systems associated with the security credentials; and

operating a processor of the credential vault device to;

receive a request for a first security credential, via vault interface logic executing on a requesting device operable by the user to access a first remote computer system associated with the first security credential;

retrieve the first security credential from storage; and

automatically deliver the first security credential to the requesting device;

wherein the vault interface logic enters the first security credential on behalf of the user.

2. The method of claim 1, wherein receiving the multiple security credentials comprises:

receiving the multiple security credentials when the user registers the multiple security credentials with the vault interface logic.

3. The method of claim 1, further operating the processor to, prior to automatically delivering the first security credential:

alert the user to the request for the first security credential; and

receive from the user input signifying authorization of delivery of the first security credential.

4. The method of claim 3, wherein the alert is configured to identify one or more of the first security credential and the first remote computer system.

5. The method of claim 1, further comprising operating the processor to:

generate a new password security credential complying with a set of specified format requirements;

store the new password security credential; and

automatically deliver the new password security credential on behalf of the user, in response to a request initiated by a corresponding remote computer system;

wherein the new password security credential is generated, stored, and delivered without informing the user of the new password security credential.

6. The method of claim 1, further comprising operating the processor to:

disable delivery of one or more stored security credentials unless the credential vault device is located proximate to the requesting device.

7. The method of claim 1, further comprising operating the processor to:

disable delivery of one or more stored security credentials during a predetermined time period of a day.

8. The method of claim 1, further comprising operating the processor to:

receive from the requesting device a second request for a second security credential associated with a second remote computer system, the second security credential comprising a login identifier and a password; and

automatically deliver a portion of the second security credential to the requesting device;

wherein the user enters a remaining portion of the second security credential at the requesting device in order to access the second remote computer system.

9. The method of claim 1, wherein the requesting device is one of:

a computing device; and

a communication device comprising a processor.

10. The method of claim 1, further comprising:

establishing a wireless communication link between the credential vault device and the requesting device.

11. The method of claim 1, further comprising:

further storing the multiple security credentials remote from the credential vault device.

12. A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform a method of method of protecting and automatically delivering a security credential with a portable credential vault device, the method comprising:

receiving multiple security credentials of a user at the credential vault device;

storing the security credentials and information identifying remote computer systems associated with the security credentials;

receiving a request for a first security credential, via vault interface logic executing on a requesting device operable by the user to access a first remote computer system associated with the first security credential;

retrieving the first security credential from storage; and

automatically delivering the first security credential to the requesting device;

wherein the vault interface logic enters the first security credential on behalf of the user.

13. An apparatus for protecting and delivering a security credential, comprising:

a processor;

one or more communication modules operable to facilitate electronic communication between the apparatus and at least one external device;

non-transitory storage for storing security credentials required to enable access to a remote computer system by a user of the apparatus;

an alert component for alerting the user; and

memory storing instructions that, when executed by the processor, cause the apparatus to;

receive a security credential request;

identify the requested security credential;

alert the user regarding the security credential request, via activation of the alert component; and

upon approval by the user, transmit the security credential in response to the request.

14. The apparatus of claim 13, wherein the apparatus is part of a wearable device.

15. The apparatus of claim 13, wherein:

the security credential request is received from an external computing device operated by the user to attempt to access a first remote computer system; and

the security credential comprises one or more of a user identifier and a password.

16. The apparatus of claim 13, further comprising:

one or more input controls operable by the user to provide said approval; and

a display component.

17. The apparatus of claim 13, wherein the memory stores further instructions that, when executed by the processor, cause the apparatus to:

receive a request to generate a new password for use by the user to access a second remote computer system;

identify format requirements of the new password; and

generate the new password so as to satisfy the format requirements.

18. The apparatus of claim 17, wherein said receiving, identifying, and generating are performed without any activity by the user.

19. The apparatus of claim 17, wherein the memory stores further instructions that, when executed by the processor, cause the apparatus to, after said generating:

receive a request for the new password from the second remote computer system; and

automatically deliver the new password in response to the request;

wherein the new password is not revealed to the user prior to said automatic delivery.

20. The apparatus of claim 17, further comprising:

a wireless communication link between the apparatus and a first external device operated by the user to access the remote computer system.