IP Library › Granted Patent US 11,921,840
Granted Patent B2
US 11,921,840 · App. 17/307,819 · Granted Mar 5, 2024

Systems and methods for password managers

Inventors: Rajko Ilincic (Annandale, VA); Jeffrey Rule (Chevy Chase, MD)
Assignee: CAPITAL ONE SERVICES, LLC
G06F21/45G06F21/602H04L63/083H04L63/0853H04L63/0861H04L63/101
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,921,840
App. No.
17/307,819
Granted
Mar 5, 2024
Kind
B2
Abstract

An authentication system comprises a browser extension and a password manager application. The browser extension can be configured for execution on a first user device. The browser extension can be configured to display a response code and receive a login credential from a server. The response code can comprise a unique session identifier identifying the browser extension and a user browsing session. The password manager application can be configured for execution on a second user device. The second user device can have a scanner configured to scan the response code. The password manager application can be configured to extract the unique session identifier, parse the unique session identifier into session identifier content, send a portion of the session identifier content to the server, receive an approval from a user of the second user device, and send a notification to the server.

Claims (55)

1. A method, comprising:

receiving a selection of a secure login option associated with a website;

generating a unique session identifier;

sending the unique session identifier to a server;

displaying a code, wherein the code includes metadata comprising the unique session identifier, a security question, a device identifier, a browser type identifier, and a time zone identifier;

establishing a handshake with the server based on the metadata;

receiving credentials for the login associated with the unique session identifier from the server;

encrypting the credentials using a private key;

receiving a security question answer from the server; and

performing the login using the credentials.

2. The method of claim 1 , wherein the website is displayed on a first user device and the login is secured through a password manager application on a second user device.

3. The method of claim 2 , wherein the code is displayed by a first user device and scannable by the second user device.

4. The method of claim 3 , wherein the code is displayed a digital assistant executing on the first user device.

5. The method of claim 2 , wherein the security question answer is associated with the password manager application.

6. The method of claim 1 , wherein the metadata further includes at least one selected from the group of an IP address and a time stamp.

7. The method of claim 6 , wherein the metadata further includes a website address.

8. The method of claim 1 , further comprising receiving a whitelist from the server, the whitelist being associated with the password manager application.

9. The method of claim 8 , wherein the secure login option is available for the website because it is a member of the whitelist.

10. The method of claim 1 , wherein the code comprises at least one selected from the group of a bar code and a quick response code.

11. A system, comprising:

a browser extension configured for execution on a first user device, wherein the browser extension is configured to:

display a response code comprising a unique session identifier and metadata, the metadata including a security question, a device identifier, and a browser type identifier;

receive login credentials from a server; and

encrypt the received login credentials with a private key; and

a password manager application configured for execution on a second user device, wherein the password manager application is configured to:

receive the response code;

establish a handshake with the server;

extract the unique session identifier;

extract the security question;

parse the unique session identifier into session identifier content; and

send the security question and a portion of the session identifier content to the server.

12. The system of claim 11 , wherein:

the unique session identifier identifies the browser extension and a user browsing session, and

metadata further includes a browser type identifier and a time zone identifier.

13. The system of claim 11 , wherein:

the second user device includes a scanner configured to scan the response code,

the password manager application is configured to receive the response code after scanning by the second user device.

14. The system of claim 11 , wherein the password application manager is further configured to establish the handshake with the server based on the metadata.

15. The system of claim 11 , wherein the password manager is further configured to:

receive an approval from the second user device;

receive a security question answer from the server, wherein the security question answer is associated with the password manager application; and

send a notification to the server.

16. The system of claim 15 , wherein the approval comprises at least one selected from the group of a biometric and a personal identification number.

17. The system of claim 15 , wherein the approval comprises a two-factor authentication.

18. The system of claim 11 , wherein the password manager application is further configured to validate the metadata.

19. The system of claim 1 , wherein the notification includes the unique session identifier and the login credentials.

20. A password manager application configured for execution on a client device, wherein the client device is configured to scan a code, and wherein the password application manager is configured to:

receive a scanned code, wherein the scanned code includes metadata comprising a unique session identifier, a security question, a device identifier, a browser type identifier, and a time zone identifier;

establish a handshake with the server based on the metadata;

extract the unique session identifier;

extract the security question;

parse the unique session identifier into session identifier content;

send the security question and a portion of the session identifier content to the server;

receive an approval; and

send a notification to the server.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 4, 2021
From: ILINCIC, RAJKO; RULE, JEFFREY
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 056133/0281 →
Continuity (2)
Continuation 16773023 · Jan 27, 2020
Related Publication 20210256111A1 · Aug 19, 2021