Method and System for Automatic Login Initiated Upon a Single Action with Encryption

• US 20100211796A1
• Filed: 04/30/2010
• Published: 08/19/2010
• Est. Priority Date: 08/18/2006
• Status: Active Grant

• Current Assignee: Smarticon Technologies, LLC
• Original Assignee: Smarticon Technologies, LLC
• Inventors: Gailey, Kurt, Godby, Kirkland M.
• Granted Patent: US 8,700,788 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2115 Third party

Abstract

A method and system for secure automatic user login to a destination website in a single action, without the use of a file manager, cookies, or without storing user login information in a data folder having restricted access or that is external to the user PC. A user computer having a display, a mouse, and a browser is activated for establishing an Internet connection. The connection may be established from the user computer to the destination website with a single mouse click or a single touch on a displayed vendor icon or other symbol placed on a displayed graphic of the user PC display such as the desktop, task bar, or tool bar during a prior setup process. During the setup, an encrypted token is produced encrypting the user credential information. The encrypted token may be stored in the user data folder.

Claims

1. A method for secure automatic login to a destination website on the Internet, comprising the steps of:

configuring a user PC, the user PC including a browser, for storing a predetermined icon graphic, user credential information, and a URL for the destination website in a user data folder in the user PC;

producing an encrypted token encrypting the user credential information and storing the encrypted token in the user data folder;

storing the predetermined icon graphic in the user data folder;

associating launching the browser with executing a single action on the user PC; and

thereafter executing the single action on the predetermined icon at the user PC to establish a secure connection to the destination website using the encrypted token.

2. The method of claim 1, wherein the login is accomplished without the use of cookies or a file manager program, or without storing user login information in a data folder having restricted access or that is external to the user PC.

3. The method of claim 1, wherein the step of configuring a user PC comprises the step of:

launching a browser to access a principal server via a link to an affiliate server corresponding to the destination website;

running an executable application on the user PC downloaded from a file on the principal server via the affiliate server to configure the user PC for the single action connection;

assembling a serialized URL string for the affiliate server; and

storing the URL string in the user data folder.

4. The method of claim 1, wherein the step of producing an encrypted token comprises the steps of:

performing first level encrypting at the user PC of a serialized string of data representing the user login credential information;

transferring the encrypted serialized string to the affiliate web server;

decrypting the serialized string at the affiliate web server;

encrypting the serialized string of user login credential information using a second level encryption algorithm to produce the encrypted token; and

returning the encrypted token to the user PC.

5. The method of claim 1, wherein the step of storing the predetermined icon comprises the step of:

writing the predetermined icon associated with the destination website from the affiliate web server to a file in the user data folder.

6. The method of claim 1, wherein the step of associating launching the browser with executing the single action comprises the steps of:

reading the destination URL information from the user data folder;

launching the browser to the destination web site associated with the icon; and

attaching the encrypted token to a message packet containing the URL information.

7. The method of claim 1, wherein the step of executing the single action comprises the step of:

selecting the predetermined icon using a pointer positioned at the predetermined icon on a displayed graphic on the user PC.

8. A method of installing a single action connection from a user PC to a destination website, comprising the steps of:

placing a predetermined icon on a displayed graphic of the installing user PC having a browser application, during a setup process comprising the steps of;

running an executable application on the user PC downloaded from a file on a principal web server via an affiliate web server to configure the user PC for the single action entering login credential data for the user and a URL for the destination website into a system configuration registry of the user PC;

encrypting the login credential data to produce an encrypted token;

designating a file in a user data folder of the user PC; and

writing the encrypted token and the predetermined icon for the destination website from the affiliate web server to a file in the user data folder.

9. The method of claim 8, wherein the step of encrypting comprises the steps of:

forming the encrypted token having data representing user login credentials, application identification, and installer version encrypted therein; and

returning the encrypted token to the installing user PC.

10. The method of claim 9, wherein the step of forming the encrypted token further comprises the steps of:

forming a serialized string of the login credential data to be encrypted;

encrypting the serialized string of data representing the user login credential information at the user PC;

transferring the encrypted serialized string to the affiliate web server;

decrypting the serialized string at the affiliate web server;

producing an encrypted token by encrypting the serialized string of user login credential information at the affiliate web server.

11. The method of claim 10, wherein the step of encrypting the string of serialized data comprises the step of:

encrypting the serialized string using a first level symmetric algorithm.

12. The method of claim 10, wherein the step of producing an encrypted token comprises the steps of:

encrypting the serialized string of user login credential information using a second level symmetric algorithm to produce the encrypted token; and

returning the encrypted token to the user PC.

13. A method for secure login to a destination website on the Internet, comprising the steps of:

installing a single action connection to the destination website from the user PC according to the method of claim 8;

associating launching the browser with executing a single action on the user PC; and

thereafter executing the single action on the predetermined icon at the user PC to establish a secure connection to the destination website.

14. The method of claim 13, wherein the login is accomplished without the use of cookies or a database external to the user PC for storing login data.

15. The method of claim 13, wherein the step of executing the single action comprises the step of:

selecting the predetermined icon that is indicated by a pointer positioned at the predetermined icon on the displayed graphic.