Granted Patent B2

US 9,864,851 · App. 14/235,384 · Granted Jan 9, 2018

Inventors: Neil Patrick Adams (Waterloo, CA); Scott Alexander Vanstone (Campbellville, CA); Daniel Richard L. Brown (Mississauga, CA); Dinah Lea Marie Davis (Waterloo, CA); Christopher Labrador (Austin, TX); Alfred John Menezes (Waterloo, CA)

Assignees: BlackBerry Limited; Certicom Corp.

G06F21/31G06F21/33H04L9/0869H04L9/3226H04L63/06H04L63/083

Abstract

Claims (102)

1. A method comprising:

connecting a computing device to an on-line resource over a network to register a user of the computing device, the on-line resource identified by an on-line resource identifier;

receiving, at the computing device, from the on-line resource, at least one registration credential request for a credential to use in registering the user with the on-line resource, each of the at least one registration credential request comprising a registration credential request identifier;

in response to receiving the at least one registration credential request, for each of the at least one registration credential request:

automatically generating, at the computing device, a random credential that satisfies one or more criteria associated with the registration credential request;

storing, at the computing device, the automatically generated random credential in association with the on-line resource identifier and the registration credential request identifier in a data store accessible to the computing device; and

submitting, from the computing device, the automatically generated random credential to the on-line resource as a response to the registration credential request; and

after the computing device has submitted the automatically generated random credential to the on-line resource:

receiving a request to access the on-line resource through a user input interface of the computing device;

receiving, at the computing device, from the on-line resource, at least one authentication credential request;

identifying, for each of the at least one authentication credential request, the random credential associated with the authentication credential request; and

submitting at least one associated random credential to the on-line resource to gain access to the on-line resource.

2. The method of claim 1 wherein before the generating, the method further comprises:

receiving a user credential through a user input interface of the computing device; and,

storing the user credential in association with the on-line resource identifier.

3. The method of claim 1 , wherein the at least one authentication credential request is received at the computing device in response to the request for access to the on-line resource, wherein each of the at least one authentication credential comprises an authentication credential request identifier, and wherein the identifying comprises:

comparing each of the at least one authentication credential request identifier with the registration credential request identifiers stored in the data store in association with the on-line resource identifier for the on line resource to identify the random credentials associated with each of the authentication credential requests.

4. The method of claim 1 wherein before submitting the at least one associated random credential to the on-line resource, the method further comprises:

soliciting a confirmation user credential from the user;

receiving the confirmation user credential through the user input interface;

comparing the confirmation user credential with the user credential stored in association with the on-line resource identifier; and,

when the confirmation user credential matches the stored user credential, submitting each of the at least one associated random credential to the on-line resource.

5. The method of claim 1 wherein the storing further comprises storing a date on which the random credential was generated in association with the random credential, and wherein after the user is registered, the method further comprises:

checking the stored date for comparison with an update period; and,

when the update period has elapsed since the stored date, connecting to the on-line resource to update the random credential to identify the user.

6. The method of claim 1 wherein the registration credential request identifier comprises a content entry field identifier of a registration portal webpage sent from the on-line resource, the method further comprises:

identifying the content entry field identifier from the webpage; and,

saving the content entry field identifier as the registration credential request identifier.

7. The method of claim 1 wherein the at least one registration credential request comprises a request for at least one of a username, password, challenge question or challenge answer.

8. The method of claim 1 wherein the computing device comprises a mobile wireless communications device.

9. The method of claim 1 wherein after the computing device has submitted the random credential to the on-line resource and the user has been registered, the method further comprises:

receiving an instruction to access the on-line resource from a requesting device, the requesting device seeking access to the on-line resource and the instruction including the on-line resource identifier and one or more authentication credential request identifiers;

matching the received on-line resource identifier and one or more authentication credential request identifiers with the stored on-line resource identifier and stored registration credential request identifiers in the data store to identify the associated random credential for each of the one or more authentication credential request identifiers; and,

forwarding the one or more authentication credential request identifiers and associated random credentials to the requesting device for submission to the on-line resource.

10. The method of claim 9 wherein before forwarding the one or more authentication credential request identifiers and associated random credentials to the requesting device, the method further comprises:

soliciting a confirmation user credential from the user;

receiving the confirmation user credential through the user input interface;

comparing the confirmation user credential with the user credential stored in association with the on-line resource identifier; and,

when the confirmation user credential matches the stored user credential, forwarding the one or more authentication credential request identifiers and associated random credentials to the requesting device.

11. A computing device, comprising:

one or more processors; and

a non-transitory computer-readable storage medium coupled to the one or more processors and storing programming instructions for execution by the one or more processors, the programming instructions instruct the one or more processors to:

connect to an on-line resource over a network to register a user of the computing device, the on-line resource identified by an on-line resource identifier;

receive, from the on-line resource, at least one registration credential request for a credential to use in registering the user with the on-line resource, each of the at least one registration credential request comprising a registration credential request identifier;

in response to receiving the at least one registration credential request, for each of the at least one registration credential request:

automatically generate a random credential that satisfies one or more criteria associated with the registration credential request;

store the automatically generated random credential in association with the on-line resource identifier and the registration credential request identifier in a data store accessible to the computing device; and

submit the automatically generated random credential to the on-line resource as a response to the registration credential request; and

after submitting the automatically generated random credential to the on-line resource:

receive a request to access the on-line resource through a user input interface of the computing device;

receive, from the on-line resource, at least one authentication credential request;

identify, for each of the at least one authentication credential request, the random credential associated with the authentication credential request; and

submit at least one associated random credential to the on-line resource to gain access to the on-line resource.

12. The computing device of claim 11 , wherein before the generating, the computing device is configured to:

receive a user credential through a user input interface of the computing device; and

store the user credential in association with the on-line resource identifier.

13. The computing device of claim 11 , wherein the at least one authentication credential request is received in response to the request for access to the on-line resource, wherein each of the at least one authentication credential comprises an authentication credential request identifier, and wherein the identifying comprises:

comparing each of the at least one authentication credential request identifier with the registration credential request identifiers stored in the data store in association with the on-line resource identifier to identify the random credentials associated with each of the authentication credential requests.

14. The computing device of claim 11 , wherein before submitting the at least one associated random credential to the on-line resource, the computing device is configured to:

solicit a confirmation user credential from the user;

receive the confirmation user credential through the user input interface;

compare the confirmation user credential with the user credential stored in association with the on-line resource identifier; and

when the confirmation user credential matches the stored user credential, submit each of the at least one associated random credential to the on-line resource.

15. The computing device of claim 11 , wherein the storing further comprises storing a date on which the random credential was generated in association with the random credential, and wherein after the user is registered, the computing device is further configured to:

check the stored date for comparison with an update period; and

when the update period has elapsed since the stored date, connect to the on-line resource to update the random credential to identify the user.

16. The computing device of claim 11 , wherein the registration credential request identifier comprises a content entry field identifier of a registration portal webpage sent from the on-line resource, the computing device further configured to:

identify the content entry field identifier from the webpage; and

save the content entry field identifier as the registration credential request identifier.

17. The computing device of claim 11 , wherein the at least one registration credential request comprises a request for at least one of a username, password, challenge question or challenge answer.

18. A system comprising:

a computing device to:

connect the computing device to an on-line resource over a network to register a user of the computing device, the on-line resource identified by an on-line resource identifier;

receive, at the computing device, from the on-line resource, at least one registration credential request for a credential to use in registering the user with the on-line resource, each of the at least one registration credential request comprising a registration credential request identifier;

in response to receiving the at least one registration credential request, for each of the at least one registration credential request:

automatically generate, at the computing device, a random credential that satisfies one or more criteria associated with the registration credential request;

store the automatically generated random credential in association with the on-line resource identifier and the registration credential request identifier in a data store accessible to the computing device; and

submit, from the computing device, the automatically generated random credential to the on-line resource as a response to the registration credential request; and

after submitting the automatically generated random credential to the on-line resource:

receive a request to access the on-line resource through a user input interface of the computing device;

receive, from the on-line resource, at least one authentication credential request;

identify, for each of the at least one authentication credential request, the random credential associated with the authentication credential request; and

submit at least one associated random credential to the on-line resource to gain access to the on-line resource; and

a host server accessible on the network, the host server operative to:

receive registration information stored by the computing device in the data store, the registration information comprising the random credential stored in association with the on-line resource identifier and the registration credential request identifier;

store the registration information in a data store accessible to the host server; and,

transmit the registration information to a replacement computing device.

19. The system of claim 18 wherein the host server is further operative to:

store the registration information in encrypted form; and,

transmit a cryptographic key to the replacement computing device with the encrypted registration information, the cryptographic key operative with a cryptographic algorithm executed by the replacement computing device to decrypt the registration information.

20. One or more non-transitory computer-readable media storing instructions which, when executed, cause a computing device to:

connect to an on-line resource over a network to register a user of the computing device, the on-line resource identified by an on-line resource identifier;

receive, from the on-line resource, at least one registration credential request for a credential to use in registering the user with the on-line resource, each of the at least one registration credential request comprising a registration credential request identifier;

in response to receiving the at least one registration credential request, for each of the at least one registration credential request:

automatically generate a random credential that satisfies one or more criteria associated with the registration credential request;

storing the automatically generated random credential in association with the on-line resource identifier and the registration credential request identifier in a data store accessible to the computing device; and

submitting the automatically generated random credential to the on-line resource as a response to the registration credential request; and

after submitting the automatically generated random credential to the on-line resource:

receive a request to access the on-line resource through a user input interface of the computing device;

receive, from the on-line resource, at least one authentication credential request;

identify, for each of the at least one authentication credential request, the random credential associated with the authentication credential request; and

submit at least one associated random credential to the on-line resource to gain access to the on-line resource.

Assignments (8)

Continuity (1)