System for Performing Web Authentication of a User by Proxy

• US 20090271854A1
• Filed: 04/25/2008
• Published: 10/29/2009
• Est. Priority Date: 04/25/2008
• Status: Active Grant

• Current Assignee: Yodlee Incorporated (Envestnet Incorporated)
• Original Assignee: Yodlee Incorporated (Envestnet Incorporated)
• Inventors: Diego, Doug, Hazlehurst, Peter, Aman, Matthew
• Granted Patent: US 8,261,334 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers

Abstract

A data gathering system is guided by an Internet-capable appliance associated with a user, which has a Pin Vault software instance executing from a digital memory media coupled to the appliance and a Pin Vault file stored in a data repository coupled to the appliance. The Pin Vault file comprises data for authenticating the user to one or more web sites storing information of interest to the user, and the Pin Vault software cooperates with an Internet service to provide, from the Pin Vault, data as needed by the Internet service to log onto and authenticate as the user at the one or more web sites storing information of interest to the user, to gather information on behalf of the user. The data for authentication is never kept at the Internet service.

Claims

1. A data gathering system, comprising:

an Internet-capable appliance associated with a user;

a Pin Vault software instance executing from a digital memory media coupled to the appliance; and

a Pin Vault file stored in a data repository coupled to the appliance, the Pin Vault file comprising data for authenticating the user to one or more web sites storing information of interest to the user;

wherein the Pin Vault software cooperates with an Internet service to provide, from the Pin Vault, data as needed by the Internet service to log onto and authenticate as the user at the one or more web sites storing information of interest to the user, to gather information on behalf of the user.

2. The system of claim 1 wherein the Pin Vault is encrypted, and data sent from the Pin Vault is sent as encrypted to the Internet service, which decrypts the data and discards the data after use to authenticate the user at a web site.

3. The system of claim 1 wherein the data for authenticating comprises user names and passwords associated with URLs of Internet sites.

4. The system of claim 1 wherein the data for authenticating comprises time sensitive tokens that are updated as time passes to be correct when accessed.

5. The system of claim 1 wherein the Pin Vault software comprises a user interface enabling the user to configure the information gathering activity of the Internet service.

6. The system of claim 5 wherein configuration includes adding or deleting sites to be visited by the Internet service, along with storing or deleting associated data for authentication in the Pin vault file.

7. The system of claim 5 wherein user interface includes a status window displaying current status of activity in information gathering at the Internet service.

8. The system of claim 5 wherein the interface enables the user to configure times and periods for the Internet service to access information from specific sites.

9. The system of claim 5 wherein the interface provides for displaying activity history for the information gathering.

10. The system of claim 1 wherein an individual site storing information of interest to the user requires a Completely Automated Public Turing Test to tell Computers and Humans Apart (CAPTCHA) process for authentication, and the Pin Vault software provides for retrieving the CAPTCHA display from the Internet service, displaying it to the user, and conveying the user'"'"'s input as a result to the Internet service for use in authentication.

11. A data gathering system, comprising:

an Internet site executing, from a digital memory media coupled to the site, data-gathering software browsing to Internet sites storing information of interest to the user, logging in and authenticating as the user, and gathering information from the sites for the user; and

Pin Vault software executing on the site from the digital memory media, cooperating across the Internet network with an instance of Pin Vault software executing on an Internet-capable appliance associated with the user, accessing from a Pin Vault software instance executing from a digital memory media coupled to the appliance, authentication data from a Pin Vault file stored on the appliance;

wherein the Internet site follows configuration by the user to gather data on behalf of the user.

12. The system of claim 11 wherein the Pin Vault data is encrypted, and data retrieved by the Internet service from the Pin Vault is received as encrypted at the Internet service, which decrypts the data and discards the data after use to authenticate the user at a web site.

13. The system of claim 11 wherein the data for authenticating comprises user names and passwords associated with URLs of Internet sites.

14. The system of claim 11 wherein the data for authenticating comprises time-sensitive tokens that are updated in the Pin Vault as time passes to be correct when accessed.

15. The system of claim 11 wherein an individual site storing information of interest to the user requires a Completely Automated Public Turing Test to tell Computers and Humans Apart (CAPTCHA) process for authentication, and the Pin Vault software at the Internet service sends the CAPTCHA display to the user, and receives the user'"'"'s input as a result for use in authentication.

17. The method of claim 15 wherein the Pin Vault is encrypted, and data sent from the Pin Vault is sent as encrypted to the Internet service, which decrypts the data and discards the data after use to authenticate the user at a web site.

18. The method of claim 15 wherein the data for authenticating comprises user names and passwords associated with URLs of Internet sites.

19. The method of claim 15 wherein the data for authenticating comprises time sensitive tokens that are updated as time passes to be correct when accessed.

20. The method of claim 15 wherein the Pin Vault software comprises a user interface enabling the user to configure the information gathering activity of the Internet service.

21. The method of claim 20 wherein configuration includes adding or deleting sites to be visited by the Internet service, along with storing or deleting associated data for authentication in the Pin vault file.

22. The method of claim 20 wherein user interface includes a status window displaying current status of activity in information gathering at the Internet service.

23. The method of claim 20 wherein the interface enables the user to configure times and periods for the Internet service to access information from specific sites.

24. The method of claim 20 wherein the interface provides for displaying activity history for the information gathering.

16. A data gathering method, comprising:

executing a Pin Vault software instance from a digital memory media coupled to an Internet-capable appliance, to cooperate with an Internet service to provide, from a Pin Vault stored in a data repository coupled to the appliance, data as needed by the Internet service to log onto and authenticate as the user at one or more web sites storing information of interest to the user, to gather information on behalf of the user.

25. The method of claim 16 wherein an individual site storing information of interest to the user requires a Completely Automated Public Turing Test to tell Computers and Humans Apart (CAPTCHA) process for authentication, and the Pin Vault software provides for retrieving the CAPTCHA display from the Internet service, displaying it to the user, and conveying the user'"'"'s input as a result to the Internet service for use in authentication.

26. A method for gathering data, comprising:

executing, from a digital memory media coupled to an Internet service site, data-gathering software browsing to other Internet sites storing information of interest to a particular user, logging in and authenticating as the user using authentication data retrieved from a Pin Vault file stored on an Internet-capable appliance associated with the user, and gathering information from the sites for the user.

27. The method of claim 26 wherein the Pin Vault data is encrypted, and data retrieved by the Internet service from the Pin Vault is received as encrypted at the Internet service, which decrypts the data and discards the data after use to authenticate the user at a web site.

28. The method of claim 26 wherein the data for authenticating comprises user names and passwords associated with URLs of Internet sites.

29. The method of claim 26 wherein the data for authenticating comprises time-sensitive tokens that are updated in the Pin Vault as time passes to be correct when accessed.

30. The method of claim 26 wherein an individual site storing information of interest to the user requires a Completely Automated Public Turing Test to tell Computers and Humans Apart (CAPTCHA) process for authentication, and the Pin Vault software at the Internet service sends the CAPTCHA display to the user, and receives the user'"'"'s input as a result for use in authentication.