Context-based possession-less access of secure information
Systems, software, techniques and apparatuses are disclosed herein for facilitating context-based possession-less access to secure information. More specifically, the systems, software, techniques and apparatuses described herein eliminate the need for enterprises to provide employees with direct access to confidential or sensitive enterprise information. Instead, the confidential or sensitive enterprise information can be indirectly provided to and hidden by an access systems used by the employees to request the information prior to being provided to a corresponding resource. For example, in some embodiments, the confidential or sensitive enterprise information is provided to an access system with formatting instructions for hiding the confidential or sensitive enterprise information in a browser session.
1. A transparent proxy system for providing a zero password login platform comprising: one or more processors; and
one or more non-transitory computer readable storage media having program instructions stored thereon which, when executed by the one or more processors, cause the transparent proxy system to:
provide user credentials to an access system for accessing a user account corresponding to a protected resource;
determine that a user has authorization to provide secure information to the protected resource, wherein the user has a corresponding user account with the protected resource;
direct a browser session to display to the user via the access system an indication that the secure information is available, wherein a selection of the indication by the user causes the access system to generate a request for the secure information;
responsive to receiving from the access system the request for the secure information, verify an identity of the user and an intent for a use of the secure information;
access the secure information when the identity of the user and the intent for the use of the secure information are verified; and
provide the secure information to the access system with formatting instructions for hiding the secure information in the browser session, wherein the user is prohibited from gaining access to the secure information, and wherein the access system provides the secure information to the protected resource.
2. The transparent proxy system of claim 1 , wherein the instructions, when executed by the one or more processors, further cause the transparent proxy system to generate formatting instructions for hiding the secure information in the browser session.
3. The transparent proxy system of claim 2 , wherein the formatting instructions comprise instructions commands for making portions of the browser session non-transparent to the user.
4. The transparent proxy system of claim 2 , wherein the formatting instructions further comprise instructions commands for adding one or more additional non-transparent layers to the portions of the browser session.
5. The transparent proxy system of claim 2 , wherein the formatting instructions further comprise instructions commands for automatically submitting a page of the browser session that includes the secure information without active participation from the user.
6. The transparent proxy system of claim 1 , wherein the user is an employee or contractor associated with an enterprise.
7. The transparent proxy system of claim 1 , wherein to verify the intent for the use of the secure information, the instructions, when executed by the one or more processors, further cause the transparent proxy system to process usage parameters received via an administrative dashboard to determine whether the intent of the request for secure information is acceptable, and wherein the usage parameters define a scope of acceptable intents.
8. The transparent proxy system of claim 7 , wherein the request for secure information comprises a request for payment information for a particular purchase and verifying the intent of the request comprises verifying that the particular purchase is acceptable.
9. The transparent proxy system of claim 8 , wherein the purchase is acceptable if the purchase is within monetary limits and deemed appropriate as defined by the usage parameters.
10. The transparent proxy system of claim 1 , wherein the request for secure information comprises the user submitting a page of the browser session at the access system.
11. The transparent proxy system of claim 1 , wherein the secure information comprises secure enterprise identification information.
12. The transparent proxy system of claim 11 , wherein the secure enterprise identification information comprises enterprise credit card payment information.
13. The transparent proxy system of claim 1 , wherein to determine that the user has authorization to provide the secure information to the protected resource, the instructions, when executed by the one or more processors, further cause the transparent proxy system to identify a group of users to which the user belongs, wherein each user of the group has permission to use particular secure information within one or more protected resources.
14. The transparent proxy system of claim 1 , wherein to verify the identity of the user the instructions, when executed by the one or more processors, further cause the transparent proxy system to authenticate the user via a mobile device associated with the user.
15. The transparent proxy system of claim 14 , wherein to authenticate the user via the mobile device associated with the user, the instructions, when executed by the one or more processors, further cause the transparent proxy system to request geolocation information including one or more of GPS information or Internet Protocol address information from the mobile device, wherein the user is authenticated when the geolocation information is within a predetermined geofence area.
16. The transparent proxy system of claim 14 , wherein to authenticate the user via the mobile device associated with the user, the instructions, when executed by the one or more processors, further cause the transparent proxy system to request proximity information indicating a proximity between the mobile device and the resource access system, wherein the user is authenticated when the mobile device is within a predetermined distance to the resource access system.
17. The transparent proxy system of claim 16 , wherein an established Bluetooth connection is indicative of the mobile device and the resource access system being within the predetermined distance.
18. The transparent proxy system of claim 14 , wherein to authenticate the user via the mobile device associated with the user, the instructions, when executed by the one or more processors, further cause the transparent proxy system to request fingerprint, retina, face, voice or biometric based identification from the user via the mobile device.
19. A method of operating a transparent proxy system for providing a zero password login platform, the method comprising:
via one or more processors, providing user credentials to an access system for accessing a user account corresponding to a protected resource,
wherein the access system comprises a hardware component;
directing a browser session to display to a user via the access system an indication that secure information is available, wherein a selection of the indication by the user causes the access system to generate a request for the secure information;
receiving from the access system the request for the secure information; responsive to receiving the request for secure information from the access system, verifying an identity of the user and an intent for a use of the secure information; accessing the secure information when the identity of the user and the intent for the use of the secure information are verified; and
providing the secure information to the access system with formatting instructions for hiding the secure information in the browser session, wherein the user is prohibited from gaining access to the secure information, and wherein the access system provides the secure information to the protected resource.
20. A non-transitory computer readable storage media having program instructions stored thereon for providing a zero password login platform which, when executed by one or more processors, cause the one or more processor to:
provide user credentials to an access system for accessing a user account corresponding to a protected resource;
determine that a user has authorization to provide secure information to the protected resource, wherein the user has a corresponding user account with the protected resource;
direct a browser session to display to the user via the access system an indication that the secure information is available, wherein a selection of the indication by the user causes the access system to generate a request for the secure information;
responsive to receiving from the access system the request for the secure information, verify an identity of the user and an intent for a use of the secure information;
access the secure information when the identity of the user and the intent for the use of the secure information are verified; and
provide the secure information to the access system with formatting instructions for hiding the secure information in the browser session, wherein the user is prohibited from gaining access to the secure information, and wherein the
access system provides the secure information to the protected resource.