Granted Patent B2

US 12,401,515 · App. 18/570,187 · Granted Aug 26, 2025

Inventors: Colin Constable (San Jose, CA); Kevin Nickels (San Jose, CA)

Assignee: Atsign, Inc.

H04L9/3226H04L9/3073H04L9/3271

Abstract

Claims (112)

1. A system comprising:

a first user device of a user;

a protocol server associated with the user comprising a personal decentralized resource directory of the user; and

a webserver associated with a website;

wherein the first user device is configured to:

send a request to the webserver for a first login page of the website;

wherein the webserver is configured to:

receive the request for the first login page of the website;

generate the first login page of the website, wherein the first login page includes a field that enables the user to enter a handle that uniquely identifies the personal decentralized resource directory of the user; and

provide the first login page of the website to the first user device;

wherein the first user device is further configured to:

receive the first login page of the website;

present the first login page of the website;

receive, from the user, the handle that uniquely identifies the personal decentralized resource directory of the user; and

provide the handle for the personal decentralized resource directory of the user to the webserver;

wherein the webserver is further configured to:

receive the handle for the personal decentralized resource directory of the user from the first user device;

generate a unique challenge code for the handle;

insert the unique challenge code for the handle into a second login page; and

provide the second login page that includes the unique challenge code for the handle to the first user device;

wherein the first user device is further configured to:

receive the second login page that includes the unique challenge code for the handle;

present the second login page that includes the unique challenge code for the handle;

obtain the unique challenge code for the handle from the second login page;

generate a challenge value based on the unique challenge code;

determine, based on the challenge value, a location in the personal decentralized resource directory of the user; and

send a request to the protocol server to store the challenge value in the personal decentralized resource directory of the user at the location;

wherein the webserver is further configured to:

send a request to the protocol server to obtain the challenge value from the location in the personal decentralized resource directory of the user;

receive the challenge value from the protocol server;

generate a server challenge value, using the challenge code sent to the first user device and the handle received from the first user device, to compare to the challenge value received from the protocol server;

determine whether the server challenge value matches the challenge value received from the protocol server;

log the user into the website in response to determining that the server challenge value matches the challenge value received from the protocol server; and

deny a login request to the website for the user in response to determining that the server challenge value does not match the challenge value received from the protocol server.

2. The system of claim 1 , wherein:

the first user device is configured to cryptographically sign the challenge value for the handle using a private key of a public/private key pair for the handle; and

the webserver is further configured to:

send a request to the protocol server to obtain a public key of the public/private key pair for the handle from the personal decentralized resource directory of the user;

receive, from the protocol server, the public key of the public/private key pair for the handle; and

decrypt the challenge value using the public key.

3. The system of claim 2 , wherein the private key of the public/private key pair for the handle is stored on the first user device.

4. The system of claim 1 , wherein:

the first user device is configured to cryptographically sign the challenge value for the handle using a public key of a public/private key pair associated with the website; and

the webserver is further configured to decrypt the challenge value using a private key of the public/private key pair associated with the website.

5. The system of claim 1 , wherein:

the first login page includes a field that allows the user to provide a user-provided code;

the first user device is configured to provide the user-provided code to the webserver along with the handle of the user; and

the webserver is configured to generate the challenge code using the user-provided code.

6. The system of claim 1 , further comprising a second user device of the user, wherein the first login page is presented on the first user device and the user second device is configured to generate the challenge value, determine the location in the personal decentralized resource directory of the user, and send the request to the protocol server to store the challenge value in the personal decentralized resource directory of the user at the location.

7. The system of claim 6 , wherein the challenge code is a scannable code that is presented on the first user device and the second user device is configured to scan the scannable code that is presented on the first user device.

8. The system of claim 1 , wherein:

the personal decentralized resource directory of the user includes shared user information for the user that the user has explicitly shared with an entity associated with the website; and

the webserver is further configured to:

send a request to the protocol server for the shared user information for the user in the personal decentralized resource directory of the user that has been explicitly shared with the entity associated with the website;

receive the shared user information;

use the shared user information to generate at least one web page for the user while the user is logged into the website; and

provide the at least one web page to the first user device.

9. The system of claim 1 , wherein the first user device is further configured to generate the challenge value based on the unique challenge code by generating a hash value of a combination of the handle and the unique challenge code.

10. The system of claim 1 ,

wherein the first user device is further configured to:

generate a nonce value;

generate the challenge value based on the challenge code and the nonce value; and

send a request to the protocol server to store the nonce value in the personal decentralized location of the user at the location that is based on the challenge code;

wherein the webserver is further configured to:

send a request to the protocol server to obtain the nonce from the decentralized resource directory;

receive the nonce from the protocol server; and

use the nonce when generating the server challenge value.

11. A computer-implemented method comprising:

receiving a request from a user device of a user for a first login page of a website;

generating the first login page of the website, wherein the first login page includes a field that enables the user to enter a handle that uniquely identifies a personal decentralized resource directory of the user;

providing the first login page of the website to the user device;

receiving the handle that uniquely identifies the personal decentralized resource directory of the user from the user device;

generating a unique challenge code for the handle;

inserting the unique challenge code for the handle into a second login page;

providing the second login page that includes the unique challenge code for the handle to the user device;

sending a request to a protocol server to obtain a challenge value stored by the user device at a location in the personal decentralized resource directory of the user, wherein the challenge value and the location are generated by the user device based on the challenge code;

receiving the challenge value from the protocol server;

generating a server challenge value, using the challenge code sent to the user device and the handle received from the user device, to compare to the challenge value received from the protocol server;

determining whether the server challenge value matches the challenge value received from the protocol server;

logging the user into the website in response to determining that the server challenge value matches the challenge value received from the protocol server; and

denying a login request to the website for the user in response to determining that the server challenge value does not match the challenge value received from the protocol server.

12. The computer-implemented method of claim 11 , wherein the user device has cryptographically signed the challenge value for the handle using a private key of a public/private key pair for the handle, the method further comprising:

sending a request to the protocol server to obtain a public key of the public/private key pair for the handle from the decentralized resource directory;

receiving, from the protocol server, the public key of the public/private key pair for the handle; and

decrypting the challenge value using the public key.

13. The computer-implemented method of claim 11 , wherein the user device has cryptographically signed the challenge value for the handle using a public key of a public/private key pair associated with the website, the method further comprising decrypting the challenge value received from the protocol server using a private key of the public/private key pair associated with the website.

14. The computer-implemented method of claim 11 , wherein:

the decentralized resource directory includes shared user information for the user that the user has explicitly shared with an entity associated with the website, the method further comprising:

sending a request to the protocol server for the shared user information for the user in the personal decentralized resource directory of the user that has been explicitly shared with the entity associated with the website;

receiving the shared user information;

using the shared user information to generate at least one web page for the user while the user is logged into the website; and

providing the at least one web page to the user device.

15. A computer-implemented method comprising:

sending a request to a webserver for a first login page of a website;

receiving the first login page of the website, wherein the first login page includes a field that enables a user to enter a handle that uniquely identifies a personal decentralized resource directory of the user;

presenting the first login page of the website;

receiving, from the user, the handle that uniquely identifies the personal decentralized resource directory of the user;

providing the handle that uniquely identifies the personal decentralized resource directory of the user to the webserver;

receiving, from the webserver, a second login page that includes a unique challenge code for the handle that was generated by the webserver;

presenting the second login page that includes the unique challenge code for the handle;

obtaining the unique challenge code for the handle from the second login page;

generating a challenge value based on the unique challenge code;

determining, based on the challenge value, a location in the personal decentralized resource directory of the user;

sending a request to a protocol server to store the challenge value in the personal decentralized resource directory of the user at the location as a login challenge response for logging into the website; and

receiving from the webserver, a login result page that indicates a result of the webserver processing the login challenge response.

16. The computer-implemented method of claim 15 , wherein the login result page indicates that the webserver successfully validated the login challenge response.

17. The computer-implemented method of claim 15 , further comprising cryptographically signing the challenge value for the handle using a private key of a public/private key pair for the handle.

18. The computer-implemented method of claim 17 , further comprising retrieving the private key of the public/private key pair for the handle from a user device of the user.

19. The computer-implemented method of claim 15 , further comprising cryptographically signing the challenge value for the handle using a public key of a public/private key pair associated with the website.

20. The computer-implemented method of claim 15 , wherein the first login page includes a field that allows the user to provide a user-provided code, the method further comprising:

receiving, from the user, the user-provided code; and

providing the user-provided code to the webserver along with the handle of the user, wherein the unique challenge code received from the webserver is generated by the webserver based on the user-provided code.

Assignments (3)

Continuity (2)

References Cited (33)