Authentication translation
Authentication translation is disclosed. A request to access a resource is received at an authentication translator, as is an authentication input. The authentication input corresponds to at least one stored record. The stored record is associated at least with the resource. In response to the receiving, a previously stored credential associated with the resource is accessed. The credential is provided to the resource.
1. A system, comprising:
a first processor configured to:
based at least in part on a request from a user to access an external resource, communicate with a second processor using a restricted interface, wherein the second processor is configured to access at least one record stored at least in part in a secure storage;
wherein the at least one record is associated at least with the external resource, and wherein the at least one record comprises:
a biometric template; and
a credential comprising at least one of a password, a cookie, or a cryptographic key;
in response to determining a match between a biometric input and the biometric template, retrieve, from the at least one record, the credential, wherein the biometric input corresponds to at least one of a fingerprint, a feature usable for facial recognition, a voiceprint, a feature usable for a retina scan, or a typing feature, and wherein the biometric input is received subsequent to presenting of a prompt;
establish a connection with the external resource;
facilitate a login of the user to the external resource at least in part by transmitting, via the established connection, output based at least in part on the credential retrieved from the at least one record, and wherein the user is logged in to the external resource based at least in part on the output; and
facilitate wiping of at least a portion of the at least one record; and
a memory coupled to the first processor and configured to provide the first processor with instructions.
2. The system recited in claim 1 wherein the first processor is unable to directly access the secure storage.
3. The system recited in claim 1 wherein the second processor comprises a dedicated processor, and wherein the secure storage is connected to the dedicated processor.
4. The system recited in claim 1 wherein the secure storage is connected to a sensor.
5. The system recited in claim 4 wherein the sensor comprises at least one of a camera and a fingerprint reader.
6. The system recited in claim 1 wherein at least some of the at least one record is stored in plaintext in the secure storage.
7. The system recited in claim 1 wherein the prompt comprises a prompt to provide biometric information, and wherein the prompt is visually presented.
8. The system recited in claim 1 wherein the prompt comprises a prompt to provide biometric information, and wherein the prompt is aurally presented.
9. The system recited in claim 1 wherein the prompt is presented in response to a user failing to provide acceptable biometric information within a timeout period.
10. The system recited in claim 1 wherein facilitating wiping of the at least portion of the at least one record comprises facilitating remote wiping of the at least portion of the at least one record.
11. The system recited in claim 1 wherein the at least portion of the at least one record is automatically wiped based at least in part on a policy.
12. The system recited in claim 1 wherein the biometric template is wiped in response to determining that the biometric template has not been matched within a duration of time.
13. The system recited in claim 1 wherein the at least portion of the at least one record is backed up to a remote entity.
14. A method, comprising:
based at least in part on a request from a user to access an external resource, using a first processor to communicate with a second processor using a restricted interface, wherein the second processor is configured to access at least one record stored at least in part in a secure storage;
wherein the at least one record is associated at least with the external resource, and wherein the at least one record comprises:
a biometric template; and
a credential comprising at least one of a password, a cookie, or a cryptographic key;
in response to determining a match between a biometric input and the biometric template, retrieving, from the at least one record, the credential, wherein the biometric input corresponds to at least one of a fingerprint, a feature usable for facial recognition, a voiceprint, a feature usable for a retina scan, or a typing feature, and wherein the biometric input is received subsequent to presenting of a prompt;
establishing a connection with the external resource;
facilitating a login of the user to the external resource at least in part by transmitting, via the established connection, output based at least in part on the credential retrieved from the at least one record, and wherein the user is logged in to the external resource based at least in part on the output; and
facilitating wiping of at least a portion of the at least one record.
15. The method of claim 14 wherein the first processor is unable to directly access the secure storage.
16. The method of claim 14 wherein the second processor comprises a dedicated processor, and wherein the secure storage is connected to the dedicated processor.
17. The method of claim 14 wherein the secure storage is connected to a sensor.
18. The method of claim 17 wherein the sensor comprises at least one of a camera and a fingerprint reader.
19. The method of claim 14 wherein at least some of the at least one record is stored in plaintext in the secure storage.
20. The method of claim 14 wherein the prompt comprises a prompt to provide biometric information, and wherein the prompt is visually presented.
21. The method of claim 14 wherein the prompt comprises a prompt to provide biometric information, and wherein the prompt is aurally presented.
22. The method of claim 14 wherein the prompt is presented in response to a user failing to provide acceptable biometric information within a timeout period.
23. The method of claim 14 wherein facilitating wiping of the at least portion of the at least one record comprises facilitating remote wiping of the at least portion of the at least one record.
24. The method of claim 14 wherein the at least portion of the record is automatically wiped based at least in part on a policy.
25. The method of claim 14 wherein the biometric template is wiped in response to determining that the biometric template has not been matched within a duration of time.
26. The method of claim 14 wherein the at least portion of the at least one record is backed up to a remote entity.
27. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
based at least in part on a request from a user to access an external resource, using a first processor to communicate with a second processor using a restricted interface, wherein the second processor is configured to access at least one record stored at least in part in a secure storage;
wherein the at least one record is associated at least with the external resource, and wherein the at least one record comprises:
a biometric template; and
a credential comprising at least one of a password, a cookie, or a cryptographic key;
in response to determining a match between a biometric input and the biometric template, retrieving, from the at least one record, the credential wherein the biometric input corresponds to at least one of a fingerprint, a feature usable for facial recognition, a voiceprint, a feature usable for a retina scan, or a typing feature, and wherein the biometric input is received subsequent to presenting of a prompt;
establishing a connection with the external resource;
facilitating a login of the user to the external resource at least in part by transmitting, via the established connection, output based at least in part on the credential retrieved from the at least one record, and wherein the user is logged in to the external resource based at least in part on the output; and
facilitating wiping of at least a portion of the at least one record.