IP Library Granted Patent US 11,030,299
Granted Patent B1
US 11,030,299 · App. 16/773,023 · Granted Jun 8, 2021

Systems and methods for password managers

Inventors: Rajko Ilincic (Annandale, VA); Jeffrey Rule (Chevy Chase, MD)
Assignee: CAPITAL ONE SERVICES, LLC
G06F21/45G06F21/602H04L63/083H04L63/0853H04L63/0861H04L63/101
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,030,299
App. No.
16/773,023
Granted
Jun 8, 2021
Kind
B1
Abstract

An authentication system comprises a browser extension and a password manager application. The browser extension can be configured for execution on a first user device. The browser extension can be configured to display a response code and receive a login credential from a server. The response code can comprise a unique session identifier identifying the browser extension and a user browsing session. The password manager application can be configured for execution on a second user device. The second user device can have a scanner configured to scan the response code. The password manager application can be configured to extract the unique session identifier, parse the unique session identifier into session identifier content, send a portion of the session identifier content to the server, receive an approval from a user of the second user device, and send a notification to the server.

Claims (34)

1. A system, comprising:

a browser extension configured for execution on a first user device, wherein the browser extension is configured to:

display a response code comprising:

a unique session identifier identifying the browser extension and a user browsing session, and

metadata including a security question, a browser type identifier, and a time zone identifier;

receive login credentials from a server; and

encrypt the received login credentials with a private key; and

a password manager application configured for execution on a second user device, the second user device having a scanner configured to scan the response code, wherein the password manager application is configured to:

establish a handshake with the server based on the metadata;

extract the unique session identifier;

extract the security question;

parse the unique session identifier into session identifier content;

send the security question and a portion of the session identifier content to the server;

receive an approval from the second user device;

receive a security question answer from the server, wherein the security question answer is associated with the password manager application; and

send a notification to the server.

2. The system of claim 1 , wherein the approval comprises a personal identification number (PIN).

3. The system of claim 1 , wherein the approval comprises a biometric.

4. The system of claim 1 , wherein the login credentials are stored on the second user device.

5. The system of claim 1 , wherein the login credentials are stored on the server.

6. The system of claim 1 , wherein the password manager application is further configured to validate the metadata.

7. The system of claim 1 , wherein the notification includes the unique session identifier and the login credentials.

8. A method, comprising:

providing a secure login option associated with a login on a website, wherein the website is displayed on a first user device and the login is secured through a password manager application on a second user device;

generating a unique session identifier and sending the unique session identifier to a server, upon selection of the secure login option;

displaying a code on the first user device, wherein the code is scannable by the second user device and includes metadata comprising the unique session identifier, a security question, a browser type identifier, and a time zone identifier;

transmitting the metadata to the server to establish a handshake;

receiving credentials for the login associated with the unique session identifier from the server;

encrypting the credentials using a private key;

receiving a security question answer from the server, wherein the security question answer is associated with the password manager application; and

performing the login using the credentials.

9. The method of claim 8 , further comprising:

receiving a whitelist from the server, wherein the secure login option is available for the website because it is a member of the whitelist, the whitelist being associated with the password manager application.

10. The method of claim 8 , wherein the metadata includes at least one selected from the group of an IP address and a time stamp.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 27, 2020
From: ILINCIC, RAJKO; RULE, JEFFREY
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 051629/0815 →
Cited By (7)
US 12,256,010 US 12,489,746 US 12,511,036 US 12,566,835 US 12,587,518 US 12,627,644 US 12,632,531