Authentication bypass infrastructure
Due to the proliferation of protected services that are secured by password wall, a user frequently has to remember multiple complex passwords. There is a need to reduce the number of passwords and maintain adequate security of the protected services. Systems described herein may autogenerate dynamic passwords for those apps that require a password. Protected services may allow user access based on the autogenerated dynamic password. The system may include an API for interacting with multiple apps that each provide protected services. The API may provide dynamic passwords that authenticate a user to access any of the protected services provided by any of the multiple apps.
1. An authentication system for controlling secure access to multiple protected services, the authentication system comprising a processor and a memory, each of the protected services secured by an independently created password, the system comprising:
an authentication token;
a password generation application that autogenerates a dynamic password for any of the multiple protected services using the authentication token as a seed; and
a password validation application that:
receives the dynamic password;
validates that the dynamic password has been generated using the authentication token as the seed; and
provides or denies access to any of the multiple protected services based on the dynamic password.
2. The authentication system of claim 1 further comprising:
a frontend lock-box application that stores the authentication token and secures access to the password generation application; and
a backend lock-box application that links the multiple protected services to the authentication token stored in the frontend lock-box application.
3. The authentication system of claim 2 , wherein the backend lock-box application stores a public cryptographic key that is used to validate the dynamic password.
4. The authentication system of claim 2 further comprising:
a first communication channel that links the frontend lock-box application to the backend lock-box application; and
a second communication channel that links the backend lock-box application to the multiple protected services.
5. The authentication system of claim 4 , wherein:
the first communication channel is encrypted using a first private cryptographic key; and
the second communication channel is encrypted using a second private cryptographic key.
6. The authentication system of claim 1 , wherein the dynamic password is a one-time password.
7. The authentication system of claim 1 further comprising a digital wallet that links the authentication token to the multiple protected services.
8. The authentication system of claim 7 wherein at least one of the multiple protected services is provided by a decentralized application operating on a distributed ledger.
9. The authentication system of claim 1 , wherein the password generation application requires a second-factor authentication that is manually input by a user before autogenerating the dynamic password for any of the multiple protected services.