METHODS AND SYSTEMS FOR DATA ENTRY

• US 20150271164A1
• Filed: 07/28/2014
• Published: 09/24/2015
• Est. Priority Date: 03/19/2014
• Status: Active Grant

• Current Assignee: Bluink Ltd.
• Original Assignee: Bluink Ltd.
• Inventors: Hamid, Laurence
• Granted Patent: US 10,079,826 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

User identities, password, etc. represent the barrier between a user'"'"'s confidential data and any other third party seeking to access this data. As multiple software applications, web applications, web services, etc. embody this confidential data it is a tradeoff between easy recollection of said identities, passwords, etc. and data security. Generally for most users the balance is too far to convenience and ease of recollection such that the probability of third party illegally accessing the confidential data increases. Accordingly, it would be beneficial for users as well as organizations providing/controlling access to systems, resources, and data to be provided with an automatic means of entering password and/or security credential information without the user, for example, selecting the password, knowing the password, having access to the password, or entering the password.

Claims

1. A method comprising:

storing a plurality of data within a first device comprising at least a first microprocessor and a memory, the plurality of data representing user credentials relating to access upon at least one second device;

transmitting a signal from the first device to a third device comprising at least a second microprocessor via a communications interface according to a first predetermined standard, the signal comprising a predetermined subset of data within the plurality of data; and

in dependence upon the predetermined subset of data within the signal received at the third device generating signals with the second microprocessor to mimic user actions with at least one of a keyboard and a cursor controller to provide user credential entry into data entry fields upon the at least one second device.

2. The method according to claim 1, wherein the third device is coupled to the at least one second device by at least one of a wired connection, a connector, a wireless connection, and an optical connection.

3. The method according to claim 1, wherein each of the first device and at least one second device are at least one of a portable electronic device and a fixed electronic device and the second device is coupled to the at least one second device by at least one of a connector and a wireless interface according to a second predetermined standard.

4. The method according to claim 1, further comprising;

receiving from a user of the first device user authentication data;

validating the user authentication data;

when the user authentication data is other than validated, other than providing from the first device the predetermined subset of data; and

when the user authentication data is validated, providing from the first device the predetermined subset of data.

5. The method according to claim 1, further comprising;

imaging a code displayed upon a screen of the at least one second device; and

at least one of;

determining in dependence upon the image code a datum within the plurality of data for provision to the at least one second device as part of the predetermined subset of data within the plurality of data; and

determining in dependence upon the image data the predetermined subset of data within the plurality of data.

6. The method according to claim 5, wherein the code displayed upon the screen of the at least one second device is provided by at least one of:

an application to which the predetermined subset of data within the plurality of data relates in execution upon the at least one second device;

a challenge issued by a remote computer system to an application in execution upon the at least one second device which is interpreted by a plug-in application installed upon the at least one second device.

7. The method according to claim 6, wherein when the at least one of is via the plug-in this plug-in prevents spoofing by registering identified text entry fields with a database of text entry fields to determine the visual code.

8. The method according to claim 6, wherein when the at least one of is via the plug-in this plug-in prevents spoofing by adding at least one of a digital signature, a one-time password, and a digital representation of a signature into the visual code to verify that it was at least one of generated by a trusted entity and not being replayed.

9. A method comprising:

determining upon a first device entry location and entry type for at least one field of a plurality of fields within at least one of a form, an entry screen, and a login screen, the entry location and entry type being decoded from a visual code imaged and captured by the first device from the display of a second device.

10. The method according to claim 9, wherein at least one of:

the visual code displayed upon the second device was generated by a plug-in in execution upon the second device to identify instances of provisioning the at least one to the user; and

the visual code displayed upon the second device was generated by a plug-in in execution upon the second device that identifies navigation to a web site, correlates the web site with a database of known web sites having known text entry fields, and upon determining a correlation triggers generation of the visual code.

11. The method according to claim 9, further comprising;

automatically extracting from the visual code an entry location to enter data thereto;

locating within a secure store of the first device data for entry into the entry location; and

determining whether to prompt a user to authenticate release of the data from the first device to the second device for entry into the entry location.

12. The method according to claim 9, further comprising;

automatically extracting from the visual code an entry location to enter data thereto;

locating within a secure store of the first device data for entry into the entry location; and

transmitting to a third device from the first device command data which the third device receives and generates in dependence of signal data for provisioning to the second device such that the second device interprets the signal data as being entry of the data by a user of the second device into the entry location.

13. The method according to claim 9, wherein the visual code is at least one of:

displayed upon the second device automatically as part of the display upon the second device of the at least one of a form, an entry screen, and a login screen; and

as part of a set of visual codes relating to the at least one of a form, an entry screen, and a login screen.

14. The method according to claim 9, wherein

the visual code is a logo associated with at least one of the provider of the software to which the at least one of a form, an entry screen, and a login screen relates and the software itself.

15. The method according to claim 9, wherein

the visual code is information associated with a login screen allowing it to be identified through image processing of an image.

16. The method according to claim 9, further comprising;

receiving from user of the first device user authentication data;

validating the user authentication data;

when the user authentication data is validated transmitting to a third device from the first device command data which the third device receives and generates in dependence of signal data for provisioning to the second device such that the second device interprets the signal data as being entry of the data by a user of the second device into the entry location.

17. A method comprising:

storing a plurality of data within a first device comprising at least a first microprocessor and a memory, the plurality of data representing first user credentials;

transmitting a signal from the first device to a third device comprising at least a second microprocessor via a communications interface according to a first predetermined standard, the signal comprising a predetermined subset of data within the plurality of data; and

in dependence upon the predetermined subset of data within the signal received at the third device generating signals with the second microprocessor to provide a second user credential to the at least one second device.

18. The method according to claim 17, wherein at least one of:

the second user credential provided cannot be entered by the user to the at least one second device;

the second user credential is a selected first user credential of the plurality of first user credentials; and

the second user credential is a signed challenge received on the first device from the at least one second device, the signed challenge comprising data received from the at least one second device and a first user credential of the plurality of first user credentials.

19. The method according to claim 17, further comprising;

imaging a code displayed upon a screen of the at least one second device, wherein the code displayed upon the screen of the at least one second device is provided by at least one of;

an application to which the predetermined subset of data within the plurality of data relates in execution upon the at least one second device;

a challenge issued by a remote computer system to an application in execution upon the at least one second device which is interpreted by a plug-in application installed upon the at least one second device.

20. The method according to claim 19, wherein when the at least one of is via the plug-in this plug-in prevents spoofing by adding at least one of a digital signature, a one-time password, and a digital representation of a signature into the visual code to verify that it was at least one of generated by a trusted entity and not being replayed.