US 11,868,462 B1Granted

Securely manipulating and utilizing user credentials

AssigneeVim Inc.

InventorsAsaf David, Nicolas Mendzylewski, Moran Shemesh, Chen Rozenes, Daniel Hallel Jakobsen, Nandy Vaisman

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method, system, and apparatus comprising: automatically identifying a login session to a first software system in a Graphical User Interface (GUI) of a user device; automatically extracting user credentials from the login session; automatically manipulating at least a portion of the user credentials to obtain manipulated credentials; automatically verifying that the login session is authentic by: encrypting the user credentials, providing the encrypted credentials to a separate environment, and reconstructing the login session at the separate environment; and automatically adding the manipulated credentials to an account of the user in a second software system that is independent from the separate environment.

Claims23

Dependent claims

A method comprising:

monitoring a display of an end device to identify a login session of a user into a first software system;
automatically scraping, from the login session, user credentials and an address of the login session, the user credentials comprising at least a username and a user password;
determining whether to utilize the user credentials for logging into a second software system, the second software system is different from the first software system, wherein said determining comprises verifying whether or not the login session is fabricated, wherein said verifying comprises:
based on the address of the login session,
reconstructing the login session at a sandbox environment, thereby obtaining a reconstructed login session, the sandbox environment comprising an execution environment that is separate from a backend of the second software system, wherein the sandbox environment has no access to a storage of the second software system;
utilizing the user credentials for logging into the reconstructed login session, thereby logging into the first software system from the sandbox environment;
and
verifying that the user credentials are valid for logging into the reconstructed login session, thereby verifying that the login session is not fabricated;
and
utilizing the user credentials for logging into an account of the user in the second software system, wherein the user credentials can be utilized to automatically login the user into the account without manual user input.

7 more elements

A method comprising:

monitoring a display of an end device to identify a login session of a user into a first software system;
automatically scraping, from the login session user credentials, identifying information of the user, and a session token of the login session, the user credentials comprising at least a username and a user password;
determining whether to utilize the user credentials for logging into a second software system, the second software system is different from the first software system, wherein said determining comprises verifying whether or not the login session is fabricated, wherein said verifying comprises:
providing the session token of the login session and the identifying information to a sandbox environment, wherein the sandbox environment has no access to the user password, the sandbox environment is separate from a backend of the second software system, wherein the sandbox environment has no access to a storage of the second software system;
invoking Application Programming Interface (API) calls from the sandbox environment to the first software system, the API calls providing the session token to the first software system,
obtaining, at the sandbox environment, verification data from the first software system, wherein the verification data is determined by the first software system based on the session token, and
verifying that the login session is not fabricated by crossing the verification data with the identifying information of the user;
and
automatically utilizing the user credentials for logging into an account of the user in the second software system.

6 more elements

A computer program product comprising a non-transitory computer readable medium retaining program instructions, which program instructions when read by a processor, cause the processor to:

monitor a display of an end device to identify a login session of a user into a first software system;
automatically scrape, from the login session user credentials, identifying information of the user and a session token of the login session, the user credentials comprising at least a username and a user password;
determine whether to utilize the user credentials for logging into a second software system, the second software system is different from the first software system, wherein said determine comprises verifying whether or not the login session is fabricated, wherein said verifying comprises:
providing the session token of the login session and the identifying information to a sandbox environment, wherein the sandbox environment has no access to the user password, the sandbox environment is separate from a backend of the second software system, wherein the sandbox environment has no access to a storage of the second software system;
invoking Application Programming Interface (API) calls from the sandbox environment to the first software system, the API calls providing the session token to the first software system,
obtaining, at the sandbox environment, verification data from the first software system, wherein the verification data is determined by the first software system based on the session token, and
verifying that the login session is not fabricated by crossing the verification data with the identifying information of the user;
and
automatically utilize the user credentials for logging into an account of the user in the second software system.

6 more elements

Dependencies are inferred from the claim text.