# US 11,907,356 B2 · System, method, and computer-readable recording medium of creating, accessing, and recovering a user account with single sign on password hidden authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,907,356 B2 - Document ID: US11907356B2 - Status: Granted - Kind: B2 - Application number: 17/143,396 - Filed: 2021-01-07 - Published: 2021-07-15 - Granted: 2024-02-20 - Earliest claimed: 2020-01-09 - Assignees: ARRIS Enterprises LLC - Applicants: ARRIS Enterprises LLC - Inventors: Jalagandeswari Ganapathy; Muralidharan Narayanan; David Brumbaugh - Web page: https://patentgrep.com/patent/US11907356B2 ## CPC - G06F 21/41: where a single sign-on provides access to a plurality of computers - G06F 21/45: Structures or tools for the administration of authentication - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key} - H04L 63/0815: {providing single-sign-on or federations} - H04L 63/0838: {using one-time-passwords} - G06F 2221/2131: Lost password, e.g. recovery of lost or forgotten passwords - H04L 2463/061: applying further key derivation, e.g. deriving traffic keys from a pair-wise master key - H04L 2463/062: applying encryption of the keys - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system, method, and computer-readable recording media for a user account secure with a single sign on (SSO) password hidden authentication. Receiving credential information (CI) and generating the SSO password through at least one client device (CD). Encrypting the SSO password. Storing the SSO password in the CD and an electronic device (ED). Transmit the SSO password and encrypted SSO password to a cloud services platform (CSP), where the CSP stores both. Storing the SSO password in a cloud server (CS). Accessing the user account, if SSO password is unavailable, through the CSP transmitting a one time passcode to a user email, the CD setting a temporary password transferred to the CSP. The CSP confirming a match and transmitting the encrypted SSO password to the CD, the CD decrypting the encrypted SSO password and resetting the temporary password to the SSO password. ## Claims ### Claim 1 A method of a client device for creating and accessing a user account of a user with a single sign on (SSO) password, the method comprising: creating the user account by: receiving credential information via a user input; automatically generating the SSO password, wherein the SSO password is associated with the credential information; encrypting the SSO password using an encryption key retrieved, by the client device, from an electronic device within a network; storing the SSO password in the client device and the electronic device; and transmitting the SSO password and the encrypted SSO password to a cloud services platform for storage at the cloud services platform, wherein the cloud services platform is outside the network; and after creating the user account: determining that the SSO password is not available to an application of the client device; receiving the credential information via user input into the user device; requesting a one time passcode from the cloud services platform to be sent to a user email of the user, receiving entry of an entered passcode by the user; setting a temporary password; sending the credential information, the temporary password, and the entered passcode to the cloud server; receiving an encrypted SSO password from the cloud server based on the entered passcode and the one time passcode; retrieving the encryption key from the electronic device; decrypting the encrypted SSO password using the encryption key as the SSO password; resetting the temporary password to the SSO password; and transmitting the SSO password to the cloud services platform. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: accessing the user account having the SSO password stored therein by: receiving the credential information via an another user input; retrieving the SSO password associated with the credential information; transmitting the credential information and the retrieved SSO password to the cloud services platform; and being allowed access to the user account based on the received SSO password and the SSO password which was stored in the cloud services platform during the creating of the user account. ### Claim 3 (depends on 1) The method according to claim 1, wherein the user credentials include a username of the user. ### Claim 4 (depends on 1) The method according to claim 1, wherein the client device is part of a system that comprises the electronic device of a home network. ### Claim 5 (depends on 4) The method according to claim 4, wherein the user account provides access to a digital voice assistant within the home network within the system. ### Claim 6 (depends on 4) The method according to claim 4, wherein the user account provides access to a local communication agent within the home network. ### Claim 7 (depends on 1) The method according to claim 1, wherein the SSO password is used to manage multiple components within the system. ### Claim 8 (depends on 4) The method according to claim 4, wherein the system comprises a second client device, and wherein the second client device has the same SSO password to access components within the system based off of user account related information. ### Claim 9 A non-transitory computer-readable recording medium in a client device for creating and accessing a user account of a user with a single sign on (SSO) password, the non-transitory computer-readable recording medium storing one or more programs which when executed by a processor of the client device causes the client device to perform one or more operations comprising: creating the user account by: receiving credential information via a user input; automatically generating the SSO password, wherein the SSO password is associated with the credential information; encrypting the SSO password using an encryption key retrieved, by the client device, from an electronic device within a network; storing the SSO password in the client device and the electronic device; and transmitting the SSO password and the encrypted SSO password to a cloud services platform for storage at the cloud services platform, wherein the cloud services platform is outside the network; and determining that the SSO password is not available to an application of the client device; requesting a one time passcode from the cloud services platform to be sent to a user email of the user; receiving entry of an entered passcode by the user; setting a temporary password; sending the credential information, the temporary password, and the entered passcode to the cloud server; receiving an encrypted SSO password from the cloud server based on the entered passcode and the one time passcode; retrieving the encryption key from the electronic device; decrypting the encrypted SSO password using the encryption key as the SSO password; resetting the temporary password to the SSO password; and transmitting the SSO password to the cloud services platform. ### Claim 10 (depends on 9) The non-transitory computer-readable recording medium of claim 9, the one or more programs when executed by the processor further cause the client device to perform one or more further operations comprising: of the one client, accessing the user account having the SSO password stored therein by: receiving the credential information via another user input; retrieving the SSO password associated with the credential information; transmitting the credential information and the retrieved SSO password to the cloud services platform; and being allowed access to the user account based on the received SSO password and the SSO password which was stored in the cloud services platform during the creating of the user account. ### Claim 11 A client device for creating and accessing a user account of a user with single sign on (SSO) password, the client device comprising: a memory storing one or more instructions; a processor configured to execute the one or more instructions to: create the user account by: receiving credential information via a user input; automatically generating the SSO password, wherein the SSO password is associated with the credential information; encrypting the SSO password using an encryption key retrieved, by the client device, from an electronic device within a network; and transmitting the encrypted SSO password and the SSO password to a cloud services platform; and after creating the user account: determine that the SSO password is not available to an application of the client device; receive the credential information via user input; request a one time passcode from the cloud services platform; receive entry of an entered passcode by the user; set a temporary password; send the credential information, temporary password, and the entered passcode to the cloud server; receiving an encrypted SSO password from the cloud server based on the entered passcode and the one time passcode; retrieve the encryption key from the electronic device; decrypt the encrypted SSO password using the encryption key; reset the temporary password to the SSO password; and transmit the SSO password to the cloud services platform, wherein the cloud services platform is outside the network. ### Claim 12 (depends on 11) The client device according to claim 11, wherein the processor is further configured to execute the one or more instructions to: receive credential information via an another user input and to retrieve the stored SSO password associated with the credential information; transmit the credential information and the retrieved SSO password to the cloud server; and be allowed access to the user account based on the received SSO password and credential information which was stored in the cloud server during the creating of the user account. ### Claim 13 (depends on 11) The system according to claim 11, wherein the user credentials include a username of the user. ### Claim 14 (depends on 11) The system according to claim 11, wherein the client device is part of a system that comprises the electronic device of a home network. ### Claim 15 (depends on 14) The system according to claim 14, wherein the user account provides access to a digital voice assistant within the home network. ### Claim 16 (depends on 14) The system according to claim 14, wherein the user account provides access to a local communication agent within the home network.