Email-based authentication for sign in and security
The present invention is related to systems and methods that improve the security of computer networks. These systems and methods may be utilized in various applications such as electronic commerce, secure document access, and electronic authentication. The systems and methods include methods for accessing secure accounts without the use of passwords in order to eliminate the need for passwords. In addition, systems and methods further deter automated attacks online using email authentication.
1. A method for improving security of a computer network by utilizing Simple Mail Transfer Protocol (SMTP), the method comprising:
receiving, via SMTP, a message that requests authentication of a user from a customer device, wherein the message contains a token;
authenticating a sender of the message utilizing at least one DomainKeys Identified Mail (DKIM), Domain-based Message Authentication, Reporting & Conformance (DMARC), and/or Sender Policy Framework (SPF) protocols;
decoding the token contain in the message to form a decoded token;
conditionally performing additional security checks on the message based on the decoded token, wherein the additional security checks are performed when the decoded token indicates that the message was generated via a copy and paste routine; and
authenticating the user when the sender of the message is authenticated and the additional security checks are successful.
2. The method of claim 1 , wherein the authenticating the user grants the user access to a secure webpage.
3. The method of claim 1 , wherein the additional security checks include performing a multi-factor authentication.
4. The method of claim 1 , wherein authenticating the user generates an Oauth token.
5. The method of claim 4 , wherein the Oauth token grants the user access to webpages hosted by a plurality of third parties.
6. A system for improving security of a computer network utilizing Simple Mail Transfer Protocol (SMTP), the system comprising:
a memory;
a communication interface that is communicatively coupled to a client device via network; and
a processor that is communicatively coupled to the memory and the communication interface,
wherein the processor is configured to:
receive, using the communication interface, a message that requests authentication of a user from a customer device via SMTP, wherein the message contains a token;
authenticate a sender of the message utilizing at least one DomainKeys Identified Mail (DKIM), Domain-based Message Authentication, Reporting & Conformance (DMARC), and/or Sender Policy Framework (SPF) protocols;
decode the token contain in the message to form a decoded token;
conditionally perform additional security checks on the message based on the decoded token, wherein the additional security checks are performed when the decoded token indicates that the message was generated via a copy and paste routine; and
authenticate the user when the sender of the message is authenticated and the additional security checks are successful.
7. The system of claim 6 , wherein the user is granted access to a secure webpage when the user is authenticated.
8. The system of claim 6 , wherein the additional security checks include performing a multi-factor authentication.
9. The system of claim 6 , wherein an Oauth token is generated when the user is authenticated.
10. The system of claim 9 , wherein the Oauth token grants the user access to webpages hosted by a plurality of third parties.
11. A non-transitory computer readable storage medium that stores instructions for improving security of a computer networking by utilizing Simple Mail Transfer protocol, wherein the instructions when executed by a processor, cause the processor to execute a method, the method comprising:
receiving, via SMTP, a message that requests authentication of a user from a customer device, wherein the message contains a token;
authenticating a sender of the message utilizing at least one DomainKeys Identified Mail (DKIM), Domain-based Message Authentication, Reporting & Conformance (DMARC), and/or Sender Policy Framework (SPF) protocols;
decoding the token contain in the message to form a decoded token;
conditionally performing additional security checks on the message based on the decoded token, wherein the additional security checks are performed when the decoded token indicates that the message was generated via a copy and paste routine; and
authenticating the user when the sender of the message is authenticated and the additional security checks are successful.
12. The non-transitory computer readable storage medium of claim 11 , wherein the authenticating the user grants the user access to a secure webpage.
13. The non-transitory computer readable storage medium of claim 11 , wherein the additional security checks include performing a multi-factor authentication.
14. The non-transitory computer readable storage medium of claim 11 , wherein authenticating the user generates an Oauth token.
15. The non-transitory computer readable storage medium of claim 14 , wherein the Oauth token grants the user access to webpages hosted by a plurality of third parties.