IP Library › Granted Patent US 10,360,351
Granted Patent B1
US 10,360,351 · App. 15/042,636 · Granted Jul 23, 2019

Authentication translation

Inventor: Bjorn Markus Jakobsson (Portola Valley, CA)
Assignee: RightQuestion, LLC
G06F21/10G06F21/121G06F21/128H04L63/083H04L63/0861H04L63/10H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,360,351
App. No.
15/042,636
Granted
Jul 23, 2019
Kind
B1
Abstract

Authentication translation is disclosed. A request to access a resource is received at an authentication translator, as is an authentication input. The authentication input corresponds to at least one stored record. The stored record is associated at least with the resource. In response to the receiving, a previously stored credential associated with the resource is accessed. The credential is provided to the resource.

Claims (48)

1. A system, comprising:

one or more processors configured to:

receive, at an authentication translator at a device, an authentication input and an indication of a request, by a user of the device, to access a resource external to the device;

in response to determining, by the authentication translator at the device, a match using the received authentication input, obtain access to a record stored on the device, wherein the record is associated at least with the external resource;

retrieve, from the stored record accessed at least in part by determining, by the authentication translator at the device, the match using the received authentication input, a previously stored credential associated with the external resource, wherein the previously stored credential is different from the received authentication input, and wherein the previously stored credential retrieved from the record stored on the device comprises at least one of a cryptographic key and a cookie;

establish a connection between the device and the external resource to which the user requested access; and

facilitate a login of the user to the external resource at least in part by transmitting, on behalf of the user, from the device and via the established connection, output based at least in part on the at least one of the cryptographic key and the cookie retrieved from the record accessed at least in part by determining, by the authentication translator at the device, the matching using the received authentication input, wherein the user of the device is logged into the external resource based at least in part on the output transmitted from the device on behalf of the user; and

a memory coupled to the one or more processors and configured to provide the one or more processors with instructions.

2. The system of claim 1 wherein the authentication input is received in response to a user-supplied biometric input matching a template.

3. The system of claim 1 wherein the device further includes a biometric input component.

4. The system of claim 1 wherein the one or more processors are further configured to facilitate a session renegotiation.

5. The system of claim 1 wherein the one or more processors are further configured to receive, from a remote system, an encrypted container that includes at least one template containing biometric features.

6. The system of claim 1 wherein the authentication input comprises user agent information.

7. The system of claim 1 wherein the one or more processors are further configured to receive a password change request from the external resource and wherein the one or more processors are configured to update the previously stored credential without user input.

8. The system of claim 1 wherein access to another stored record associated with another resource is obtained using a different authentication input.

9. The system of claim 1 wherein the authentication input comprises a biometric input, and wherein access to the record stored on the device including the previously stored credential associated with the external resource is obtained at least in part by determining a match using the biometric input.

10. The system of claim 1 wherein the authentication translator at the device is associated with a plurality of records stored on the device, wherein the plurality of records comprise previously stored credentials associated with a plurality of external resources, and wherein the accessed record is included in the plurality of records.

11. The system of claim 1 further comprising a secure storage and an insecure storage, wherein the record is stored in the insecure storage, and wherein obtaining access to the record comprises loading the record to the secure storage.

12. The system of claim 11 wherein the record stored in the insecure storage is encrypted, and wherein obtaining access to the record further comprises decrypting the record loaded to the secure storage.

13. The system of claim 4 wherein the established connection via which the output was transmitted is associated with a first session, and wherein facilitating the session renegotiation comprises replacing a first key associated with the first session with a second key associated with a renegotiated session.

14. The system of claim 1 wherein the record stored on the device further comprises at least one of a username, a password, an account number, address information, phone information, and health care data.

15. The system of claim 1 wherein the match is determined at least in part by using at least one of a password and a template, the template comprising at least one of a fingerprint feature, a voice biometric feature, a facial recognition feature, an iris detection feature, and a retina scan feature.

16. The system of claim 1 , wherein the one or more processors are further configured to:

encrypt and authenticate at least a portion of the record; and

perform a backup of the encrypted and authenticated record to a remote storage entity, wherein the remote storage entity is configured to synchronize records between at least two devices associated with the user.

17. A method, comprising:

receiving, at an authentication translator at a device, an authentication input and an indication of a request, by a user of the device, to access a resource external to the device;

in response to determining, by the authentication translator at the device, a match using the received authentication input, obtaining access to a record stored on the device, wherein the record is associated at least with the external resource;

retrieving, from the stored record accessed at least in part by determining, by the authentication translator at the device, the match using the received authentication input, a previously stored credential associated with the external resource, wherein the previously stored credential is different from the received authentication input, and wherein the previously stored credential retrieved from the record stored on the device comprises at least one of a cryptographic key and a cookie;

establishing, using one or more processors, a connection between the device and the external resource to which the user requested access; and

facilitating a login of the user to the external resource at least in part by transmitting, on behalf of the user, from the device and via the established connection, output based at least in part on the at least one of the cryptographic key and the cookie retrieved from the record accessed at least in part by determining, by the authentication translator at the device, the match using the received authentication input, wherein the user of the device is logged into the external resource based at least in part on the output transmitted from the device on behalf of the user.

18. The method of claim 17 further comprising facilitating a session renegotiation.

19. The method of claim 17 further comprising receiving, from a remote system, an encrypted container that includes at least one template containing biometric features.

20. The method of claim 17 further comprising receiving a password change request from the external resource and updating the previously stored credential without user input.

21. The method of claim 17 wherein access to another stored record associated with another resource is obtained using a different authentication input.

22. The method of claim 17 wherein the authentication input is received in response to a user-supplied biometric input matching a template.

23. The method of claim 17 wherein the device further includes a biometric input component.

24. The method of claim 17 wherein the authentication input comprises user agent information.

25. The method of claim 17 wherein the authentication input comprises a biometric input, and wherein access to the record stored on the device including the previously stored credential associated with the external resource is obtained at least in part by determining a match using the biometric input.

26. The method of claim 17 wherein the authentication translator at the device is associated with a plurality of records stored on the device, wherein the plurality of records comprise previously stored credentials associated with a plurality of external resources, and wherein the accessed record is included in the plurality of records.

27. The method of claim 17 wherein the record is stored in an insecure storage, and wherein obtaining access to the record comprises loading the record to a secure storage.

28. The method of claim 27 wherein the record stored in the insecure storage is encrypted, and wherein obtaining access to the record further comprises decrypting the record loaded to the secure storage.

29. The method of claim 18 wherein the established connection via which the output was transmitted is associated with a first session, and wherein facilitating the session renegotiation comprises replacing a first key associated with the first session with a second key associated with a renegotiated session.

30. The method of claim 17 wherein the record stored on the device further comprises at least one of a username, a password, an account number, address information, phone information, and health care data.

31. The method of claim 17 wherein the match is determined at least in part by using at least one of a password and a template, the template comprising at least one of a fingerprint feature, a voice biometric feature, a facial recognition feature, an iris detection feature, and a retina scan feature.

32. The method of claim 17 , further comprising:

encrypt and authenticate at least a portion of the record; and

perform a backup of the encrypted and authenticated record to a remote storage entity, wherein the remote storage entity is configured to synchronize records between at least two devices associated with the user.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 21, 2023
From: CARBYNE LLC
To: CARBYNE BIOMETRICS, LLC
Reel/Frame 063049/0162 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 22, 2022
From: RIGHTQUESTION, LLC
To: CARBYNE LLC
Reel/Frame 062191/0638 →
Continuity (3)
Continuation 13706254 · Dec 5, 2012
Provisional Application 61569112 · Dec 9, 2011
Provisional Application 61587387 · Jan 17, 2012
Cited By (1)
US 12,363,093