IP Library Granted Patent US 11,269,987
Granted Patent B2
US 11,269,987 · App. 16/564,012 · Granted Mar 8, 2022

Security credentials management for client applications

Inventors: Sophie D. Green (Andover, GB); David James Nice (Southampton, GB); Ledina Hido-Evans (Winchester, GB); Stewart O. M. Francis (Hampshire, GB); Thomas Foyle (Southampton, GB)
Assignee: International Business Machines Corporation
G06F21/45G06F21/40G06F21/602
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,269,987
App. No.
16/564,012
Granted
Mar 8, 2022
Kind
B2
Abstract

Method and system are provided for security credentials management for client applications. The method includes: detecting a user is entering security credentials for authentication of a client application; hashing at least a portion of the entered credentials to obtain current hashed credentials and storing the current hashed credentials; and comparing the current hashed credentials to previously stored hashed credentials for the client application. If the current hashed credentials and the previously stored hashed credentials match, the method may store the credentials for automatic completion of the credentials for the client application.

Claims (39)

1. A computer-implemented method for security credentials management for client applications, comprising:

detecting a user is entering security credentials for authentication of a client application;

hashing at least a portion of the entered credentials to obtain current hashed credentials and storing the current hashed credentials;

comparing the current hashed credentials to previously stored hashed credentials for the client application;

if the current hashed credentials and the previously stored hashed credentials match, storing the detected security credentials for automatic completion of the security credentials required for the client application; and

determining that there is a threshold probability that the user is using a multi-factor authentication method based on a cadence of entering a security credentials.

2. The computer-implemented method of claim 1 , further comprising:

splitting the entered security credentials into a first part and a second part based on analysis of the entered security credentials to identify a pause or change in cadence of input between the first part and the second part,

wherein hashing and comparing the entered credentials is carried out for one or both of the first and second parts separately.

3. The computer-implemented method of claim 2 , further comprising:

determining that the first part or the second part is an assumed variable token portion by analyzing the input of the credentials and the other of the first part or the second part is an assumed fixed password portion.

4. The computer-implemented method of claim 3 , wherein, if the current hashed credentials and the previously stored hashed credentials of the assumed variable token portion match, storing the security credentials for automatic completion of the security credentials of the client application.

5. The computer-implemented method of claim 3 , wherein, if the current hashed credentials and the previously stored hashed credentials of the assumed variable token portion do not match and the current hashed credentials and the previously stored hashed credentials of the assumed fixed password portion match, storing the assumed fixed password portion for automatic completion of partial credentials of the client application.

6. The computer-implemented method of claim 3 , wherein, if the current hashed credentials and the previously stored hashed credentials of the assumed fixed password portion do not match, repeating the method for subsequent input credentials before storing credentials for automatic completion of the credentials of the client application.

7. The computer-implemented method of claim 1 , wherein the method is carried out at a client computing device for storing credentials at the client computing device for automatic completion of the credentials for client applications.

8. The computer-implemented method of claim 1 , wherein the method is carried out for a client computing device at a remote service for storing credentials at the client computing device for automatic completion of the credentials for client applications.

9. A computer system for security credentials management for client applications, comprising:

a processor and a memory configured to provide computer program instructions to the processor to execute the function of the components:

a credentials detecting component for detecting a user is entering security credentials for authentication of a client application;

a hashing component for hashing at least a portion of the entered credentials to obtain current hashed credentials and a hash storing component for storing the current hashed credentials;

a comparing component for comparing the current hashed credentials to previously stored hashed credentials for the client application;

an automatic credentials component for, if the current hashed credentials and the previously stored hashed credentials match, a credentials storing component for storing the detected security credentials for automatic completion of the security credentials for the client application; and

a multi-factor authentication recognition component for determining that there is a threshold probability that the user is using a multi-factor authentication method based on a cadence of entering a security credential.

10. The computer system of claim 9 , further comprising:

a credentials splitting component for splitting the entered security credentials into a first part and a second part based on analysis of the entered security credentials to identify a pause or change in cadence of input between the first part and the second part;

wherein the hashing component and the comparing component operate on one or both of the first and second parts separately.

11. The computer system of claim 10 , further comprising:

a part identifying component for determining that the first part or the second part is an assumed variable token portion by analyzing the input of the credentials and the other of the first part or the second part is an assumed fixed password portion.

12. The computer system of claim 10 , wherein, if the comparing component determines that the current hashed credentials and the previously stored hashed credentials of the assumed variable token portion match, the credentials storing component stores the credentials for automatic completion of the credentials of the client application.

13. The computer system of claim 10 , wherein, if the comparing component determines that the current hashed credentials and the previously stored hashed credentials of the assumed variable token portion do not match and the current hashed credentials and the previously stored hashed credentials of the assumed fixed password portion match, the credentials storing component stores the assumed fixed password portion for automatic completion of partial credentials of the client application.

14. The computer system of claim 10 , wherein, if the comparing component determines that the current hashed credentials and the previously stored hashed credentials of the assumed fixed password portion do not match, the credentials storing component waits for subsequent input credentials before storing credentials for automatic completion of the credentials of the client application.

15. The computer system of claim 9 , wherein the system is carried out at a client computing device for storing credentials at the client computing device for automatic completion of the credentials for client applications.

16. The computer system of claim 9 , wherein the system is carried out for a client computing device at a remote service for storing credentials at the client computing device for automatic completion of the credentials for client applications.

17. A computer program product for security credentials management for client applications, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

detect a user is entering security credentials for authentication of a client application;

hash at least a portion of the entered credentials to obtain current hashed credentials and storing the current hashed credentials;

compare the current hashed credentials to previously stored hashed credentials for the client application;

if the current hashed credentials and the previously stored hashed credentials match, store the detected security credentials for automatic completion of the security credentials for the client application; and

determine that there is a threshold probability that the user is using a multi-factor authentication method based on a cadence of entering a security credentials.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 9, 2019
From: GREEN, SOPHIE D.; NICE, DAVID JAMES; HIDO-EVANS, LEDINA; FRANCIS, STEWART O. M.; FOYLE, THOMAS
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 050306/0337 →
Continuity (1)
Related Publication 20210073370A1 · Mar 11, 2021