Secure password log in on insecure devices
AssigneeEMC IP Holding Company LLC
InventorsSeth Jacob Rothschild, Benjamin Santaus, Orlando Xavier Nieves, Radia J. Perlman
Life of this patent
Estimating the term…
Abstract
One example method includes logging into websites through devices including insecure devices. A logon device may store credentials. The logon device is configured to connect with an insecure device and then communicate with a website for authentication purposes without exposing a user's credentials to the insecure device. After the user is authenticated, the session is transferred to the insecure device.
Claims19
A method, comprising:
- receiving a request, at a logon device, to log in to a website from a device;
- determining whether the logon device stores credentials for the website in response to the request;
- setting security levels for credentials stored on the logon device, wherein each security level is associated with a different password;
- logging in to the website, by the logon device using the credentials for the website stored in the logon device, wherein the credentials are never in the clear to the device;
- and
- transferring a session between the logon device and the website to the device such that the session continues between the device and the website.
A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
- receiving a request, at a logon device, to log in to a website from a device;
- determining whether the logon device stores credentials for the website in response to the request;
- setting security levels for credentials stored on the logon device, wherein each security level is associated with a different password;
- logging in to the website, by the logon device using the credentials for the website stored in the logon device, wherein the credentials are never in the clear to the device;
- and
- transferring a session between the logon device and the website to the device such that the session continues between the device and the website.
Dependencies are inferred from the claim text.