IP Library Granted Patent US 9,825,934
Granted Patent B1
US 9,825,934 · App. 14/498,668 · Granted Nov 21, 2017

Operating system interface for credential management

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,825,934
App. No.
14/498,668
Granted
Nov 21, 2017
Kind
B1
Abstract

A computer-implemented method for providing an operating system level interface for communicating credential data between applications includes detecting, by an operating system, a field configured to receive an authentication credential and identifying a credential management application configured to provide authentication credentials. The method includes requesting, by the operating system and using an operating system interface configured to communicate authentication credentials, the authentication credential from the credential management application. And when the credential management application provides the authentication credential using the operating system interface configured to communicate authentication credentials, the method includes providing the authentication credential for entry into the field.

Claims (52)

1. A computer-implemented method, comprising:

detecting, in a displayed application by an operating system, a field configured to receive an authentication credential;

in response to detecting the field and before the field receives the authentication credential:

1) identifying, by the operating system, a credential management application configured to provide the authentication credential,

2) requesting, by the operating system, the authentication credential from the credential management application, and

3) receiving, at the operating system, the requested authentication credential; and

providing, by the operating system, the authentication credential for entry into the field as a redacted text inaccessible to a peripheral device.

2. The method of claim 1 , further comprising, in response to the operating system requesting the authentication credential:

requesting an authenticated personal identification number from a user prior to providing the authentication credential for entry into the field; and

receiving the authenticated personal identification number.

3. The method of claim 1 , wherein requesting the authentication credential comprises searching by the credential management application for the authentication credential in a database of authentication credentials using an identifier of a service provider associated with the detected field.

4. The method of claim 1 , wherein identifying the credential management application comprises:

determining, by the operating system that the credential management application is inactive; and

loading the credential management application.

5. The method of claim 1 , wherein the field is configured to provide the authentication credential to a remote server providing a service.

6. The method of claim 1 , further comprising receiving from the displayed application an identification parameter of a service provider requesting the authentication credential.

7. The method of claim 1 , further comprising, in response to the operating system requesting the authentication credential:

providing, by the operating system, an overlay user interface requesting a re-authentication credential;

receiving, by the operating system, the re-authentication credential; and

providing, by the operating system, the re-authentication credential to the credential management application, wherein the requested authentication credential is received in response to providing the re-authentication credential.

8. The method of claim 7 , wherein the re-authentication credential comprises a personal identification number (PIN), a fingerprint, or a retina scan.

9. The method of claim 7 , wherein receiving the re-authentication credential by the operating system comprises coupling a personal computer device with a second factor authentication device, the second factor authentication device including a user identification.

10. The method of claim 1 , wherein retrieving the authentication credential from the credential application comprises retrieving the authentication credential from one of a plurality of credential management applications.

11. The method of claim 1 , wherein detecting the field configured to receive the authentication credential comprises receiving, by the operating system, a request for the authentication credential when an active application detects a code line for entering the authentication credential.

12. A system, comprising:

a memory comprising instructions;

a processor configured to execute the instructions to:

detect, in a displayed application by an operating system, a field configured to receive an authentication credential;

in response to detecting the field and before the field receives the authentication credential:

1) retrieve, by the operating system, an identification parameter of a service provider requesting the authentication credential,

2) identify, by the operating system, a credential management application configured to provide the authentication credential,

3) request, by the operating system, the authentication credential from the credential management application using the identification parameter of the service provider, and

4) receive, at the operating system, the requested authentication credential; and

provide, by the operating system, the authentication credential for entry into the field as a redacted text inaccessible to a peripheral device.

13. The system of claim 12 , wherein the processor is further configured to execute instructions to search, by the credential management application, for the authentication credential in a database of authentication credentials using the identification parameter of the service provider requesting the authentication credential.

14. The system of claim 12 , wherein the processor is further configured to activate the credential management application in response to the request by the operating system when the credential management application is inactive.

15. The system of claim 12 , wherein the field is configured to provide the authentication credential to a remote server providing a service.

16. A non-transitory machine-readable storage medium comprising machine-readable instructions for causing a processor to execute a method, the method comprising:

detecting, by an operating system, a field configured to receive an authentication credential;

in response to detecting the field and before the field receives the authentication credential:

1) identifying, by the operating system, a credential management application configured to provide the authentication credential,

2) receiving, by the operating system, an identification parameter of a service provider requesting the authentication credential,

3) requesting, by the operating system, the authentication credential from the credential management application using the identification parameter of the service provider, wherein when the credential management application is inactive, the operating system loads the credential management application in response to the request, and

4) receiving, at the operating system, the requested authentication credential; and

providing, by the operating system, the authentication credential for entry into the field as a redacted text inaccessible to a peripheral device.

17. The non-transitory machine-readable medium of claim 16 , further comprising, in response to the operating system requesting the authentication credential:

providing, by the operating system, an overlay user interface requesting a re-authentication credential;

receiving, by the operating system, the re-authentication credential; and

providing, by the operating system, the re-authentication credential to the credential management application, wherein the requested authentication credential is received in response to providing the re-authentication credential.

18. The non-transitory machine-readable medium of claim 17 , wherein the re-authentication credential comprises a personal identification number (PIN), a fingerprint, or a retina scan.

19. The non-transitory machine-readable medium of claim 17 , wherein receiving the re-authentication credential by the operating system comprises coupling a personal computer device with a second factor authentication device, the second factor authentication device including a user identification.

20. The non-transitory machine-readable medium of claim 16 , wherein detecting the field configured to receive the authentication credential comprises receiving, by the operating system, a request for the authentication credential when an active application detects a code line for entering the authentication credential.

Assignments (2)
CHANGE OF NAME Recorded Dec 5, 2017
From: GOOGLE INC.
To: GOOGLE LLC
Reel/Frame 044695/0115 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 29, 2014
From: ALEXANDER, ELDRIDGE LEE
To: GOOGLE INC.
Reel/Frame 033846/0179 →