Systems and methods for protecting the security of authentication credentials utilized to access sensitive data during online transactions

1. A computer-implemented method for protecting the security of authentication credentials utilized to access sensitive data during online transactions, at least a portion of the method being performed by one or more computing devices comprising at least one processor, the method comprising:

registering, by the one or more computing devices and utilizing a set of cryptographic keys, a proxy service with a third-party service provider of sensitive online transactions;

identifying, by the one or more computing devices, user credentials for accessing the third-party service provider;

encrypting, by the one or more computing devices, the user credentials utilizing the set of cryptographic keys;

sending, by the one or more computing devices, the encrypted user credentials in a request for authentication tokens;

accessing, by the one or more computing devices and responsive to the request, the authentication tokens for sharing with an access manager of the user credentials; and

performing, by the one or more computing devices, a security action that protects against a data privacy invasion by utilizing the authentication tokens to validate a user requesting access to a website hosted by the third-party service provider without the user credentials.

2. The computer-implemented method of claim 1 , wherein registering the proxy service with the third-party service provider comprises:

enabling a set of application programming interfaces (APIs) configured to generate the authentication tokens;

querying the third-party service provider for an asymmetric cryptographic key pair;

generating another asymmetric cryptographic key pair for the proxy service; and

utilizing the asymmetric cryptographic key pair and the another asymmetric cryptographic key pair to register the proxy service with the third-party service provider.

3. The computer-implemented method of claim 2 , wherein generating the another asymmetric cryptographic key pair for the proxy service comprises wrapping a public key in a certificate.

4. The computer-implemented method of claim 1 , wherein identifying the user credentials for accessing the third-party service provider comprises:

querying the access manager to determine whether the user credentials are available; and

requesting, utilizing an API, a public key for the third-party service provider in the set of cryptographic keys.

5. The computer-implemented method of claim 1 , wherein encrypting, utilizing the set of cryptographic keys, the user credentials comprises utilizing a public key for the third-party service provider in the set of cryptographic keys to generate a payload.

6. The computer-implemented method of claim 5 , wherein the payload comprises a symmetric key associated with an encrypted public key and an encrypted symmetric key associated with the user credentials.

7. The computer-implemented method of claim 1 , wherein accessing, responsive to the request, the authentication tokens for sharing with an access manager of the user credentials comprises:

signing a payload comprising the encrypted user credentials;

sending a package comprising the signed payload to the third-party service provider utilizing an authentication tokens API;

receiving the authentication tokens from the third-party service provider; and

sharing the authentication tokens with the access manager.

8. The computer-implemented method of claim 1 , wherein performing the security action that protects against a data privacy invasion comprises:

requesting the authentication tokens from the access manager; and

sending the authentication tokens to the third-party service provider to provide the user access to the website hosted by the third-party service provider without the user credentials, wherein the authentication tokens comprise on-demand limited lifespan authentication tokens.

9. The computer-implemented method of claim 8 , wherein sending the authentication tokens to the third-party service provider comprises:

designating the authentication tokens as temporary user credentials; and

utilizing the temporary user credentials to complete credentials fields for accessing the website.

10. The computer-implemented method of claim 1 , wherein the proxy service comprises an isolation platform for generating a version of the website hosted by the third-party service provider.

11. A system for protecting the security of authentication credentials utilized to access sensitive data during online transactions, the system comprising:

at least one physical processor;

physical memory comprising computer-executable instructions and one or more modules that, when executed by the physical processor, cause the physical processor to:

register, by a registration module and utilizing a set of cryptographic keys, a proxy service with a third-party service provider of sensitive online transactions;

identify, by a credentials module, user credentials for accessing the third-party service provider;

encrypt, by an encryption module, the user credentials utilizing the set of cryptographic keys;

send, by a tokens module, the encrypted user credentials in a request for authentication tokens;

access, by an access module and responsive to the request, the authentication tokens for sharing with an access manager of the user credentials; and

perform, by a security module, a security action that protects against a data privacy invasion by utilizing the authentication tokens to validate a user requesting access to a website hosted by the third-party service provider without the user credentials.

12. The system of claim 11 , wherein the registration module registers the proxy service with the third-party service provider by:

enabling a set of application programming interfaces (APIs) configured to generate the authentication tokens;

querying the third-party service provider for an asymmetric cryptographic key pair;

generating another asymmetric cryptographic key pair for the proxy service; and

utilizing the asymmetric cryptographic key pair and the another asymmetric cryptographic key pair to register the proxy service with the third-party service provider.

13. The system of claim 12 , wherein the registration module generates the another asymmetric cryptographic key pair for the proxy service by wrapping a public key in a certificate.

14. The system of claim 11 , wherein the credentials module identifies the user credentials for accessing the third-party service provider by:

querying the access manager to determine whether the user credentials are available; and

requesting, utilizing an API, a public key for the third-party service provider in the set of cryptographic keys.

15. The system of claim 11 , wherein the encryption module utilizes the set of cryptographic keys to encrypt the user credentials by utilizing a public key for the third-party service provider in the set of cryptographic keys to generate a payload.

16. The system of claim 15 , wherein the payload comprises a symmetric key associated with an encrypted public key and an encrypted symmetric key associated with the user credentials.

17. The system of claim 11 , wherein the access module accesses, responsive to the request, the authentication tokens for sharing with an access manager of the user credentials by:

signing a payload comprising the encrypted user credentials;

sending a package comprising the signed payload to the third-party service provider utilizing an authentication tokens API;

receiving the authentication tokens from the third-party service provider; and

sharing the authentication tokens with the access manager.

18. The system of claim 11 , wherein the security module performs the security action that protects against a data privacy invasion by:

requesting the authentication tokens from the access manager; and

sending the authentication tokens to the third-party service provider to provide the user access to the website hosted by the third-party service provider without the user credentials, wherein the authentication tokens comprise on-demand limited lifespan authentication tokens.

19. The system of claim 11 , wherein the security module sends the authentication tokens to the third-party service provider by:

designating the authentication tokens as temporary user credentials; and

utilizing the temporary user credentials to complete credentials fields for accessing the website.

20. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

register, utilizing a set of cryptographic keys, a proxy service with a third-party service provider of sensitive online transactions;

identify user credentials for accessing the third-party service provider;

encrypt the user credentials utilizing the set of cryptographic keys;

send the encrypted user credentials in a request for authentication tokens;

access, responsive to the request, the authentication tokens for sharing with an access manager of the user credentials; and

perform a security action that protects against a data privacy invasion by utilizing the authentication tokens to validate a user requesting access to a website hosted by the third-party service provider without the user credentials.