# US 12,081,539 B1 · Automated secure access to online accounts

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,081,539 B1
- Document ID: US12081539B1
- Status: Granted
- Kind: B1
- Application number: 18/534,650
- Filed: 2023-12-10
- Granted: 2024-09-03
- Earliest claimed: 2023-12-10
- Assignees: Grip Security Ltd
- Applicants: Grip Security Ltd
- Inventors: Lior Chaim Yaari; Idan Pinchas Fast; Alon Shenkler
- Web page: https://patentgrep.com/patent/US12081539B1

## CPC

- H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords}
- G06F 21/45: Structures or tools for the administration of authentication
- G06F 2221/2131: Lost password, e.g. recovery of lost or forgotten passwords
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method of increasing security of access to online accounts, comprising resetting access credentials of one or more accounts of one or more online services of one or more users, by transmitting an access credentials reset request, intercepting one or more credentials reset messages transmitted via one or more correspondence channels associated with the one or more users, the one or more credentials reset messages comprise a credentials reset network address, and accessing the credentials reset network address to replace existing access credentials for the one or more accounts with increased security credentials. Wherein one or more automated access agents adapted to automatically login the one or more users into the one or more online services uses the increased security credentials to login to the one or more accounts.

## Claims

### Claim 1

A method of increasing security of access to online accounts, comprising:
using at least one processor for:
resetting access credentials of at least one account of at least one online service of at least one user, by:
transmitting an access credentials reset request,
intercepting at least one credentials reset message transmitted via at least one correspondence channel associated with the at least one user, the at least one credentials reset message comprises a credentials reset network address, and
accessing the credentials reset network address to replace existing access credentials for the at least one account with increased security credentials;
revoking permission of the at least one user to access the at least one account by resetting the access credentials to replace the existing access credentials with updated credentials and discarding the updated credentials;
wherein at least one automated access agent configured to automatically login the at least one user into the at least one online service uses the increased security credentials to login to the at least one account.

### Claim 2 (depends on 1)

The method of claim 1, wherein the increased security credentials are generated in real-time and are updated in a secure credentials repository accessible to the at least one automated access agent.

### Claim 3 (depends on 1)

The method of claim 1, wherein the increased security credentials are predefined and retrieved from a secure credentials repository accessible to the at least one automated access agent.

### Claim 4 (depends on 1)

The method of claim 1, wherein the at least one credentials reset message is detected by analyzing messages received by the user via his associated at least one correspondence channel.

### Claim 5 (depends on 4)

The method of claim 4, wherein the messages are analyzed using natural language processing.

### Claim 6 (depends on 1)

The method of claim 1, wherein the at least one correspondence channel is a member of a group consisting of: at least one email account associated with the at least one user, phone number of at least one client device associated with the at least one user, and a unique network identifier of at least one client device associated with the at least one user.

### Claim 7 (depends on 1)

The method of claim 1, further comprising encrypting the increased security credentials stored in a secure credentials repository.

### Claim 8 (depends on 1)

The method of claim 1, wherein the at least one account is a shared account accessible to a plurality of users.

### Claim 9 (depends on 1)

The method of claim 1, wherein resetting the access credentials to the at least one account is done periodically according to a predefined time interval.

### Claim 10 (depends on 1)

The method of claim 1, wherein resetting the access credentials to the at least one account is done on command in response to a reset command.

### Claim 11 (depends on 1)

The method of claim 1, wherein the at least one automated access agent is invoked automatically in response to a login action of the at least one user for accessing the at least one account.

### Claim 12 (depends on 1)

The method of claim 1, wherein the at least one automated access agent is configured to automatically log the at least one user into a plurality of accounts of a plurality of online services after initiating a plurality of credentials reset sequences in which the access credentials to each of the plurality of accounts is updated to include respective increased security credentials, the respective increased security credentials of the plurality of accounts are stored in a secure credentials repository.

### Claim 13 (depends on 12)

The method of claim 12, wherein the at least one user logs into each of the plurality of accounts by activating the at least one automated access agent using a single set of access credentials.

### Claim 14 (depends on 1)

The method of claim 1, wherein the at least one automated access agent is executed by at least one client device used by the at least one user to log into the at least one account, the at least one automated access agent is implemented by at least one of: a web browser configured to embed automated access functionality, and at least one dedicated application.

### Claim 15 (depends on 1)

The method of claim 1, wherein the at least one automated access agent is executed by at least one remote server in communication, via at least one network, with at least one client device used by the at least one user to log into the at least one account.

### Claim 16 (depends on 15)

The method of claim 15, wherein the at least one online service comprises a Software as a Software (SaaS) service.

### Claim 17

A method of increasing security of access to online accounts, comprising:
using at least one processor for:
resetting access credentials of at least one account of at least one online service of at least one user, by:
transmitting an access credentials reset request,
intercepting at least one credentials reset message transmitted via at least one correspondence channel associated with the at least one user, the at least one credentials reset message comprises a credentials reset network address, and
accessing the credentials reset network address to replace existing access credentials for the at least one account with increased security credentials;
applying at least one privacy filter to prevent exposure of private data contained in the messages;
wherein at least one automated access agent configured to automatically login the at least one user into the at least one online service uses the increased security credentials to login to the at least one account;
wherein the at least one credentials reset message is detected by analyzing messages received by the user via his associated at least one correspondence channel.

### Claim 18

A system for increasing security of access to online accounts, comprising:
at least one processor configured to execute a code, the code comprising:
code instructions to reset access credentials of at least one account of at least one online service of at least one user, by:
transmitting an access credentials reset request,
intercepting at least one credentials reset message transmitted via at least one correspondence channel associated with the at least one user, the credentials reset message comprises a credentials reset network address, and
accessing the credentials reset network address to replace existing access credentials for the at least one account with increased security credentials;
revoking permission of the at least one user to access the at least one account by resetting the access credentials to replace the existing access credentials with updated credentials and discarding the updated credentials;
wherein at least one automated access agent configured to automatically login the at least one user into the at least one online service uses the increased security credentials to login to the at least one account.
