Thwarting one-time password theft
AssigneeNortonLifeLock Inc.
InventorVenkadesan Marimuthu
Life of this patent
Estimating the term…
Abstract
Thwarting one-time password (OTP) theft. In one embodiment, a method may include receiving, at a messaging application executing on the mobile device, a text message from a website that includes an original OTP. The method may also include encrypting, by the messaging application, the original OTP included in the text message to thwart theft of the original OTP from the text message.
Claims19
A computer-implemented method for thwarting one-time password (OTP) theft, at least a portion of the method being performed by a mobile device comprising at least one processor, the method comprising:
- receiving, at a messaging application executing on the mobile device, a text message from a website that includes an original OTP;
- encrypting, by the messaging application, the original OTP included in the text message to thwart theft of the original OTP from the text message;
- storing, by the messaging application, the text message including the encrypted OTP;
- detecting, at an OTP plugin application, entry of the encrypted OTP into the website loaded into a browser application;
- decrypting, by the OTP plugin application, the encrypted OTP to reveal the original OTP;
- and
- replacing, by the OTP plugin application, the encrypted OTP with the original OTP prior to submission of the original OTP to the website.
A computer-implemented method for thwarting one-time password (OTP) theft, at least a portion of the method being performed by a mobile device comprising at least one processor, the method comprising:
- receiving, at a messaging application executing on the mobile device, a text message from a website that includes an original OTP;
- upon receipt of the text message at the messaging application, automatically encrypting, by the messaging application, the original OTP included in the text message, with a format preserving encryption algorithm, to thwart theft of the original OTP from the text message;
- storing, by the messaging application, the text message including the encrypted OTP;
- and
- displaying, by the messaging application, the text message with the encrypted OTP being visible.
A computer-implemented method for thwarting one-time password (OTP) theft, at least a portion of the method being performed by a network device comprising at least one processor, the method comprising:
- detecting, at an OTP plugin application executing on the network device, entry of an encrypted OTP into a website loaded into a browser application executing on the network device;
- decrypting, by the OTP plugin application, the encrypted OTP to reveal an original OTP;
- and
- replacing, by the OTP plugin application, the encrypted OTP with the original OTP prior to submission of the original OTP to the website.
Dependencies are inferred from the claim text.