Transparent overlay and headless browser execution for welcome flow

• US 9,930,047 B2
• Filed: 09/24/2015
• Issued: 03/27/2018
• Est. Priority Date: 09/24/2015
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, LLC
• Inventors: Beaulieu, Olivier
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US14/864,521
• Publication Number:
  US 20170093873A1
• Time in Patent Office: 915 Days
• Field of Search: 726168, 713168
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Associating a website with a credential manager includes identifying the launch of a first instance of a website to be associated with a credential manager in a web browser, displaying, along with the first instance of the website in the web browser, an overlay prompting a user to enter login data for the website, receiving, through the overlay in the web browser, the login data for the website, accessing a second instance of the website in a headless browser, utilizing the login data to attempt gain access to the second instance of the website, and in response to gaining access to the second instance of the website utilizing the login data, storing the login data in secure storage.

Claims

1. A non-transitory machine readable medium on which instructions are stored, comprising instructions that when executed cause a machine to:

identify a launch of a first instance of a website to be associated with a credential manager in a web browser;

display, along with the first instance of the website in the web browser, an overlay prompting a user to enter login data for the website;

receive, through the overlay in the web browser, the login data for the website;

access a second instance of the website in a headless browser;

utilize the login data to attempt to gain access to the second instance of the website;

in response to failing access to the second instance of the website utilizing the login data;

relay an indication of an unsuccessful login to the overlay in the web browser,

prompt, through the overlay in the web browser, the user to enter a different login data for the website, and

utilize the different login data to attempt to gain access to the second instance of the website in the headless browser;

transfer access from the headless browser to the web browser; and

in response to gaining access to the second instance of the website utilizing the login data, store the login data in secure storage.

2. The machine readable medium of claim 1, wherein the instructions that cause a machine to identify a launch of a first instance of a website to be associated with a credential manager in a web browser comprise instructions that when executed cause the machine to:

display a user interface comprising one or more candidate websites; and

receive a selection of the website.

3. The machine readable medium of claim 2, further comprising instructions that when executed further cause the machine to:

generate test login data for a plurality of the one or more candidate websites;

test automated login requirements of the one or more candidate websites by automatically logging into each of the candidate websites using the test login data; and

in response to detecting a failed automatic login of one of the one or more candidate websites, remove the one of the one or more candidate websites from the one or more candidate websites.

4. The machine readable medium of claim 2, wherein the instructions that cause a machine to display a user interface comprising one or more candidate websites comprise instructions that when executed cause the machine to:

determine a location of the user; and

select the one or more candidate websites based on the location of the user.

5. The machine readable medium of claim 1, wherein the instructions that cause a machine to access a second instance of the website in a headless browser comprise instructions that when executed cause the machine to:

execute the headless browser in a protected environment.

6. The machine readable medium of claim 1, wherein the secure storage is a remote secure storage associated with an account for the user of the credential manager.

7. A system, comprising:

one or more hardware processors; and

a memory, coupled to the one or more processors, on which are stored instructions, comprising instructions that when executed cause at least some of the one or more processors to;

identify a launch of a first instance of a website to be associated with a credential manager in a web browser;

display, along with the first instance of the web site in the web browser, an overlay prompting a user to enter login data for the website;

receive, through the overlay in the web browser, the login data for the website;

access a second instance of the website in a headless browser;

utilize the login data to attempt to gain access to the second instance of the website;

in response to failing access to the second instance of the website utilize the login data;

relay an indication of an unsuccessful login to the overlay in the web browser,

prompt, through the overlay in the web browser, the user to enter a different login data for the website, and

utilize the different login data to attempt to gain access to the second instance of the website in the headless browser;

transfer access from the headless browser to the web browser; and

in response to gaining access to the second instance of the website utilizing the login data, store the login data in secure storage.

8. The system of claim 7, wherein the instructions that cause at least some of the one or more processors to identify a launch of a first instance of a website to be associated with a credential manager in a web browser comprise instructions that when executed cause at least some of the one or more processors to:

display a user interface comprising one or more candidate websites; and

receive a selection of the website.

9. The system of claim 8, wherein the instructions further comprise instructions that when executed cause at least some of the one or more processors to:

generate test login data for a plurality of the one or more candidate websites;

test automated login requirements of the one or more candidate websites by automatically logging into each of the candidate websites using the test login data; and

in response to detecting a failed automatic login of one of the one or more candidate websites, remove the one of the one or more candidate websites from the one or more candidate websites.

10. The system of claim 8, wherein the instructions that cause a machine to display a user interface comprising one or more candidate websites comprise instructions that when executed cause at least some of the one or more processors to:

determine a location of the user; and

select the one or more candidate websites based on the location of the user.

11. The system of claim 7, wherein the instructions that cause at least some of the processors to access a second instance of the website in a headless browser comprise instructions that when executed cause at least some of the processors to:

execute the headless browser in a protected environment.

12. A method comprising:

identifying a launch of a first instance of a website to be associated with a credential manager in a web browser;

displaying, along with the first instance of the website in the web browser, an overlay prompting a user to enter login data for the website;

receiving, through the overlay in the web browser, the login data for the website;

accessing a second instance of the website in a headless browser;

utilizing the login data to attempt to gain access to the second instance of the website;

in response to failing access to the second instance of the website utilizing the login data;

relay an indication of an unsuccessful login to the overlay in the web browser,

prompt, through the overlay in the web browser, the user to enter a different login data for the website, and

utilize the different login data to attempt to gain access to the second instance of the website in the headless browser; and

in response to gaining access to the second instance of the website utilizing the login data, storing the login data in secure storage.

13. The method of claim 12, wherein identifying a launch of a first instance of a website to be associated with a credential manager in a web browser further comprises:

displaying a user interface comprising one or more candidate websites; and

receiving a selection of the website.

14. The method of claim 13, further comprising:

generating test login data for a plurality of the one or more candidate websites;

testing automated login requirements of the one or more candidate websites by automatically logging into each of the candidate websites using the test login data; and

removing the one of the one or more candidate websites from the one or more candidate websites, in response to detecting a failed automatic login of one of the one or more candidate websites.

15. The method of claim 13, wherein displaying a user interface comprising one or more candidate websites further comprises:

determining a location of the user; and

selecting the one or more candidate websites based on the location of the user.

16. The method of claim 12, wherein accessing a second instance of the website in a headless browser further comprises:

executing the headless browser in a protected environment.