Method and apparatus for automated password entry

• US 9,565,181 B2
• Filed: 03/26/2014
• Issued: 02/07/2017
• Est. Priority Date: 03/28/2013
• Status: Active Grant

• Current Assignee: Wendell D. Brown
• Original Assignee: Wendell D. Brown
• Inventors: Brown, Wendell D.
• Primary Examiner(s): Sholeman, Abu
• Assistant Examiner(s): Zhu, Zhimei
• Application Number:
  US14/226,406
• Publication Number:
  US 20140298432A1
• Time in Patent Office: 1,049 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method and apparatus are provided for protecting security credentials (e.g., username/password combinations) and/or other sensitive data in a “password vault.” A password vault device may be or may be incorporated into a portable (or even wearable) electronic device, such as a smart phone, smart watch, smart glasses, etc. When a security credential is requested during a user'"'"'s operation of the password vault device or some other computing/communication device, such as when the user is accessing an online site or service via a browser program, the request is passed to the password vault, and the appropriate security credential is retrieved, delivered, and entered into the requesting interface.

Claims

1. A method of protecting and automatically delivering a security credential with a portable credential vault device, the method comprising:

receiving multiple security credentials of a user at the credential vault device;

storing the security credentials and information identifying remote computer systems associated with the security credentials; and

operating a processor of the credential vault device to;

receive a request for a first security credential, via vault interface logic executing on a requesting device operable by the user to access a first remote computer system associated with the first security credential;

retrieve at least a first portion of the first security credential from storage, wherein the first portion is less than the entire first security credential; and

automatically deliver only the first portion of the first security credential to the requesting device;

wherein;

the vault interface logic enters the first portion of the first security credential on behalf of the user; and

the user enters a remaining portion of the first security credential, without receiving the remaining portion from the credential vault device; and

further operating the processor of the credential vault device to, without activity by the user;

receive a request to generate a new password for use by the user to access a second remote computer system;

identify format requirements of the new password; and

generate the new password so as to satisfy the format requirements.

2. The method of claim 1, wherein receiving the multiple security credentials comprises:

receiving the multiple security credentials when the user registers the multiple security credentials with the vault interface logic.

3. The method of claim 1, further operating the processor to, prior to automatically delivering the first security credential:

alert the user to the request for the first security credential; and

receive from the user input signifying authorization of delivery of the first security credential.

4. The method of claim 3, wherein the alert is configured to identify one or more of the first security credential and the first remote computer system.

5. The method of claim 1, further comprising operating the processor to:

generate a new password security credential complying with a set of specified format requirements;

store the new password security credential; and

automatically deliver the new password security credential on behalf of the user, in response to a request initiated by a corresponding remote computer system;

wherein the new password security credential is generated, stored, and delivered without informing the user of the new password security credential.

6. The method of claim 1, further comprising operating the processor to:

disable delivery of one or more stored security credentials unless the credential vault device is located proximate to the requesting device.

7. The method of claim 1, further comprising operating the processor to:

disable delivery of a subset of the stored security credentials during a predetermined time period.

8. The method of claim 1, wherein the requesting device is one of:

a computing device; and

a communication device comprising a processor.

9. The method of claim 1, further comprising:

establishing a wireless communication link between the credential vault device and the requesting device.

10. The method of claim 1, further comprising:

further storing the multiple security credentials remote from the credential vault device.

11. A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform a method of protecting and automatically delivering a security credential with a portable credential vault device, the method comprising:

receiving multiple security credentials of a user at the credential vault device;

storing the security credentials and information identifying remote computer systems associated with the security credentials;

receiving a request for a first security credential, via vault interface logic executing on a requesting device operable by the user to access a first remote computer system associated with the first security credential;

retrieving at least a first portion of the first security credential from storage, wherein the first portion is less than the entire first security credential; and

automatically delivering only the first portion of the first security credential to the requesting device, wherein;

the vault interface logic enters the first portion of the first security credential on behalf of the user; and

the user enters a remaining portion of the first security credential, without receiving the remaining portion from the credential vault device; and

without activity by the user;

receiving a request to generate a new password for use by the user to access a second remote computer system;

identifying format requirements of the new password; and

generating the new password so as to satisfy the format requirements.

12. An apparatus for protecting and delivering a security credential, comprising:

a processor;

one or more communication modules operable to facilitate electronic communication between the apparatus and at least one external device;

non-transitory storage for storing security credentials required to enable access to one or more remote computer systems by a user of the apparatus;

an alert component for alerting the user; and

memory storing instructions that, when executed by the processor, cause the apparatus to;

receive a security credential request associated with a first remote computer system;

identify the requested security credential;

automatically deliver only a first portion of the security credential in response to the request, wherein;

the first portion is less than the entire security credential; and

the user enters a remaining portion of the first security credential, without receiving the remaining portion from the credential vault device; and

without activity by the user;

receive a request to generate a new password for use by the user to access a second remote computer system;

identify format requirements of the new password; and

generate the new password so as to satisfy the format requirements.

13. The apparatus of claim 12, wherein the apparatus is part of a wearable device.

14. The apparatus of claim 12, wherein:

the security credential request is received from an external computing device operated by the user to attempt to access the first remote computer system; and

the security credential comprises one or more of a user identifier and a password.

15. The apparatus of claim 14, wherein the memory stores further instructions that, when executed by the processor, cause the apparatus to, without action by the user:

automatically initiate a communication connection with the first remote computer system; and

update the security credential by changing the password.

16. The apparatus of claim 12, further comprising:

one or more input controls operable by the user; and

a display component.

17. The apparatus of claim 12, wherein the memory stores further instructions that, when executed by the processor, cause the apparatus to, after said generating:

receive a request for the new password from the second remote computer system; and

automatically deliver the new password in response to the request;

wherein the new password is not revealed to the user prior to said automatic delivery.

18. The apparatus of claim 12, further comprising:

a wireless communication link between the apparatus and a first external device operated by the user to access the second remote computer system.