Secure System and Method for Sharing Online Accounts
A secure system and method for sharing online accounts includes: a web service; a shared account residing on the web service; a client device requiring access to the shared account; and a proxy server; whereby the client device makes requests to the web service through the proxy server to access the shared account.
1 - 34 . (canceled)
35 . A system and method for sharing online accounts comprising:
a proxy server;
whereby a client device makes requests to a web service through the proxy server to access a shared account.
36 . The system and method for sharing online accounts of claim 1 , wherein a client device communicates with the proxy server via an option selected from a HTTP/HTTPS proxy interface, a CGI web proxy interface, and a SOCKS proxy interface.
37 . The system and method for sharing online accounts of claim 1 , whereby a Proxy Auto-Configuration (PAC) script is further used to configure a client device to use the proxy server.
38 . The system and method for sharing online accounts of claim 1 , further comprising a browser extension on a client device, whereby the browser extension is used to facilitate communication between a client device and the proxy server.
39 . The system and method for sharing online accounts of claim 1 , wherein the proxy server is further configured to intercept and store browser cookies created by a web service.
40 . The system and method for sharing online accounts of claim 1 , wherein the proxy server is further configured to encrypt browser cookies created by a web service before forwarding said cookies to a client device.
41 . The system and method for sharing online accounts of claim 1 , wherein the proxy server is further configured to store a credential associated with a shared account.
42 . The system and method for sharing online accounts of claim 1 , wherein the proxy server is further configured to modify a credential associated with a shared account.
43 . The system and method for sharing online accounts of claim 1 , further comprising a trusted computing device on the proxy server, wherein the trusted computing device is used to preclude misuse of a credential associated with a shared account.
44 . The system and method for sharing online accounts of claim 1 , wherein a secure multi-party computation (MPC) protocol is used between the proxy server and a client device.
45 . The system and method for sharing online accounts of claim 1 , wherein a credential associated with a shared account is shared across at least two client devices using a secret sharing algorithm.
46 . The system and method for sharing online accounts of claim 1 , wherein the proxy server further maintains a log of requests made by a client device.
47 . The system and method for sharing online accounts of claim 1 , wherein a client device further attaches a digital signature to requests made to the proxy server.
48 . The system and method for sharing online accounts of claims 12 and 13 , wherein the log of requests further includes digital signatures provided by a client device.
49 . The system and method for sharing online accounts of claim 13 , wherein at least two client devices produce a threshold signature, which is further attached to requests made to the proxy server.
50 . The system and method for sharing online accounts of claim 1 , wherein the proxy server performs an authentication process with a web service using a credential associated with a shared account.
51 . The system and method for sharing online accounts of claim 16 , wherein the proxy server further performs a multi-factor authentication process with a web service.
52 . The system and method for sharing online accounts of claim 1 , wherein the proxy server is further configured to reject certain requests of a client device depending on the content of the request.
53 . The system and method for sharing online accounts of claim 18 , wherein at least one of machine learning, an access control matrix, regular expressions, a policy scripting language, a markup language, and an authentication token, is used to define which requests are rejected.
54 . The system and method for sharing online accounts of claim 19 , wherein a policy can be created by at least one of recording allowable request types during a standard browsing session and automatically crawling the pages of a web service.
55 . The system and method for sharing online accounts of claim 1 , wherein the proxy server is further configured to store an API key associated with an API of a web service.
56 . The system and method for sharing online accounts of claim 21 , wherein the proxy server is further configured to allow only certain requests to the API based on their contents.
57 . The system and method for sharing online accounts of claim 21 , wherein the proxy server is further configured to modify the API response prior to forwarding them to a client device.