Method and system for automatic authentication

• US 8,640,213 B2
• Filed: 08/09/2011
• Issued: 01/28/2014
• Est. Priority Date: 02/07/2011
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Najafi, Maryam, Cayetano, Alexander Antido, Toyoshiba, Len Osamu, Lee, Shirley
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US13/206,360
• Publication Number:
  US 20130042310A1
• Time in Patent Office: 903 Days
• Field of Search: 726 5- 7
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

A system and method for automatic authentication includes automatically calculating a security code on a computer running a security program. The security program resides on the same computer as a web browser. In response to a user signing into a web based account on a web site accessed by the web browser, automatically verifying that the security program is registered with the web based account. In response to a second factor security code entry request on the web based account, automatically entering the security code into the web based account. The security code is transmitted to the web site transparently to the user for login.

Claims

1. A method of authenticating a user, the method comprising:

automatically calculating a security code on a computer running a security program;

monitoring, by the security program, a uniform resource locator (URL) entered by a user into a browser executing on the computer to access a web based account, wherein the web based account requires a login process for authentication of the user and generates a second factor security code entry request in connection with the login process;

automatically verifying whether the security program is registered with the web based account; and

automatically transmitting the security code by the security program to the web based account during the login process when the security program is registered with the web based account, wherein the security code is automatically transmitted to the web based account without the user manually entering the security code into the browser, wherein the automatically transmitting comprises;

automatically entering the security code into the browser when the security program is registered with the web based account; and

determining that the user has provided a user name and a user password, and wherein the automatically entering occurs after the user has provided the user name and the user password.

2. The method of claim 1 wherein the security program calculates the security code periodically.

3. The method of claim 1 further comprising automatically monitoring activity of the browser.

4. The method of claim 1 further comprising maintaining a list of web pages that generate the second factor security code entry request, and prompting the user to register the security program with unregistered web based accounts.

5. The method of claim 1 further comprising:

maintaining a list of web sites that generate the second factor security code entry request, and

for a particular web site, automatically determining a web page that generates the second factor security code entry request.

6. The method of claim 1 further comprising, in response to a failure of the automatically entering the security code, prompting the user to manually enter the security code.

7. A method of authenticating a login attempt, the method comprising:

automatically generating a security code within a first program running on a computer;

identifying, by the first program, a user initiated login attempt by a second program running on the computer;

automatically entering the security code into the user initiated login attempt when identified by the first program, wherein the automatically entering is performed without a user manually entering the security code into the user initiated login attempt; and

determining that the user has provided a user name and a user password in the user initiated login attempt, and wherein the automatically entering occurs in response to the user providing the user name and the user password.

8. The method of claim 7 wherein the first program periodically generates a new security code.

9. The method of claim 7 wherein the second program is a web browser, and further comprising automatically monitoring uniform resource locators (URLs) the user enters into the web browser.

10. The method of claim 7 further comprising maintaining a list of uniform resource locators (URLs) that require the security code, and prompting the user to register the first program with unregistered URLs.

11. The method of claim 7 further comprising:

maintaining a list of web sites within the first program that generate a security code request, and

for a particular web site, automatically determining from the list a web page that generates the security code request.

12. The method of claim 7 further comprising, in response to a failure of the automatically entering the security code, prompting the user to manually enter the security code.

13. A system comprising:

a processor;

a display;

memory coupled to the processor, wherein the memory comprises instructions that when executed cause the system to perform a method of authenticating a login attempt, the method comprising;

automatically generating a security code within a first program running on a computer;

in response to a user navigating to a uniform resource locator (URL) within a second program running on the computer, automatically verifying that the first program is registered with the URL;

identifying, by the first program, a user initiated login attempt within the second program;

automatically transmitting the security code into the user initiated login attempt by the second program when the first program is registered with the URL; and

determining that the user has provided a user name and a user password in the user initiated login attempt, and wherein the automatically transmitting occurs in response to the user providing the user name and the user password.

14. The system of claim 13 wherein the first program automatically generates a new security code periodically.

15. The system of claim 13 wherein the second program is a web browser, and wherein the method further comprises automatically monitoring URLs the user enters into the web browser.

16. The system of claim 13 wherein the method further comprises automatically searching the URL for a location that requires the security code.

17. The system of claim 13 wherein the method further comprises, in response to a failure of the automatically transmitting the security code, prompting the user to manually enter the security code.