Method and system for enabling automatic access to an online account

• US 8,533,783 B1
• Filed: 02/12/2009
• Issued: 09/10/2013
• Est. Priority Date: 02/12/2009
• Status: Active Grant

• Current Assignee: Intuit, Inc.
• Original Assignee: Intuit, Inc.
• Inventors: Channakeshava, Girish Mallenahally
• Primary Examiner(s): WILLIAMS, JEFFERY L
• Application Number:
  US12/370,491
• Time in Patent Office: 1,671 Days
• Field of Search: None
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Some embodiments provide a system that enables access to an online account. During operation, the system receives a login attempt containing a login for the online account through a login interface associated with the online account. Next, the system receives, from the user, user-initiated communications outside of the login interface requesting automatic access to the online account. The system then identifies the online account using the user-initiated communications. Finally, the system temporarily enables the automatic access to the online account using the login from the login attempt without requiring additional authentication information from the login attempt.

Claims

1. A computer-implemented method for enabling access to an online account associated with a first user, comprising:

a computer receiving from a first device having a phone number that is associated with the online account of the first user, user initiated communications to enable online access to the account by a second user who is different from the first user, wherein the user initiated communications comprises a text message or a phone call to the computer, and includes a predetermined period of time, a login identifier of the first user, and an authentication credential of the first user;

the computer determining, based upon the phone number, the login identifier, and the authentication credential, that the user initiated communications to enable online access to the account was received from the first user;

the computer receiving, from a second device used by the second user, a request to access the online account associated with the first user, wherein the request to access the online account associated with the first user includes the login identifier of the first user, and does not include the authentication credential of the first user;

the computer determining that the request to access the online account associated with the first user is received during the predetermined period of time; and

the computer granting to the second user access to the online account associated with the first user.

2. The computer-implemented method of claim 1, further comprising:

upon receiving a subsequent login attempt from the first user, to the second user, disabling access to the online account associated with the first user.

3. The computer-implemented method of claim 1, further comprising:

using a source of the user-initiated communications to identify the online account.

4. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for enabling access to an online account, the method comprising:

receiving from a first device having a phone number that is associated with the online account of the first user, user initiated communications to enable online access to the account by a second user who is different from the first user, wherein the user initiated communications comprises a text message or a phone call to the computer, and includes a predetermined period of time, a login identifier of the first user, and an authentication credential of the first user;

determining, based upon the phone number, the login identifier, and the authentication credential, that the user initiated communications to enable online access to the account was received from the first user;

receiving, from a second device used by the second user, a request to access the online account associated with the first user, wherein the request to access the online account associated with the first user includes the login identifier of the first user, and does not include the authentication credential of the first user;

determining that the request to access the online account associated with the first user is received during the predetermined period of time; and

granting to the second user access to the online account associated with the first user.

5. The non-transitory computer-readable storage medium of claim 4, wherein the method further comprises:

upon receiving a subsequent login attempt from the first user, to the second user, disabling access to the online account associated with the first user.

6. The non-transitory computer-readable storage medium of claim 4, wherein the method further comprises:

using a source of the user-initiated communications to identify the online account.

7. A system for enabling access to an online account, comprising:

a computer processor; and

a non-transitory computer-readable storage medium storing instructions that when executed by the computer processor cause the computer processor to perform a method for enabling access to an online account, the method comprising;

receiving from a first device having a phone number that is associated with the online account of the first user, user initiated communications to enable online access to the account by a second user who is different from the first user, wherein the user initiated communications comprises a text message or a phone call to the computer, and includes a predetermined period of time, a login identifier of the first user, and an authentication credential of the first user;

determining, based upon the phone number, the login identifier, and the authentication credential, that the user initiated communications to enable online access to the account was received from the first user;

receiving, from a second device used by the second user, a request to access the online account associated with the first user, wherein the request to access the online account associated with the first user includes the login identifier of the first user, and does not include the authentication credential of the first user;

determining that the request to access the online account associated with the first user is received during the predetermined period of time; and

granting to the second user access to the online account associated with the first user.

8. The system of claim 7, wherein the method performed by the computer processor further comprises:

upon receiving a subsequent login attempt from the first user, to the second user, disabling access to the online account associated with the first user.

9. The system of claim 7, wherein the method performed by the computer processor further comprises:

using a source of the user-initiated communications to identify the online account.