# US 12,328,312 B1 · Automated secure access to online accounts > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,328,312 B1 - Document ID: US12328312B1 - Status: Granted - Kind: B1 - Application number: 18/798,872 - Filed: 2024-08-09 - Published: 2025-06-12 - Granted: 2025-06-10 - Earliest claimed: 2023-12-10 - Assignees: Grip Security Ltd - Applicants: Grip Security Ltd - Inventors: Lior Chaim Yaari; Idan Pinchas Fast; Alon Shenkler - Web page: https://patentgrep.com/patent/US12328312B1 ## CPC - H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords} - G06F 21/45: Structures or tools for the administration of authentication - G06F 2221/2131: Lost password, e.g. recovery of lost or forgotten passwords - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method of increasing security of access to online accounts, comprising resetting access credentials of one or more accounts of one or more online services of one or more users, by transmitting an access credentials reset request, intercepting one or more credentials reset messages transmitted via one or more correspondence channels associated with the one or more users, the one or more credentials reset messages comprise a credentials reset network address, and accessing the credentials reset network address to replace existing access credentials for the one or more accounts with increased security credentials. Wherein one or more automated access agents adapted to automatically login the one or more users into the one or more online services uses the increased security credentials to login to the one or more accounts. ## Claims ### Claim 1 A method of increasing security of access to online accounts, comprising: using at least one processor for: resetting access credentials of at least one account of at least one online service of at least one user, by: transmitting an access credentials reset request, intercepting at least one credentials reset message transmitted via at least one correspondence channel associated with the at least one user, the at least one credentials reset message comprises a credentials reset network address, wherein the at least one credentials reset message is intercepted by analyzing messages stored in a repository storing messages destined for the at least one user and accessible by the at least one user, and accessing the credentials reset network address to replace existing access credentials for the at least one account with increased security credentials; wherein at least one automated access agent is configured to automatically login the at least one user into the at least one online service uses the increased security credentials to login to the at least one account; wherein the at least one credentials reset message is intercepted, the credentials reset network address is extracted from the at least one credentials reset message, and the credentials reset network address is accessed, before the at least one user accesses the and/or conducts actions with, the at least one credentials reset message. ### Claim 2 (depends on 1) The method of claim 1, wherein the at least one credentials reset message is intercepted by accessing, via a network, one or more mail servers to access email messages received at an email account associated with the at least one user, wherein the email messages are analyzed for fetching the at least one credentials reset message identified in the email account associated with the at least one user. ### Claim 3 (depends on 1) The method of claim 1, wherein the at least one credentials reset message is intercepted by accessing a local email account of the at least one user at a client device accessing the at least one online service, to analyze received email messages and fetch the received at least one credentials reset message. ### Claim 4 (depends on 1) The method of claim 1, wherein the at least one credentials reset message is intercepted by accessing one or more text message queues of one or more text message applications executed by a client device accessing the at least one online service, to analyze received text messages and fetch the received at least one credentials reset message. ### Claim 5 (depends on 1) The method of claim 1, wherein the at least one credentials reset message is intercepted by accessing one or more voice message queues at one or more of voice message applications executed by a client device accessing the at least one online service, to analyze received text messages and fetch the received at least one credentials reset message. ### Claim 6 (depends on 1) The method of claim 1, wherein the at least one credentials reset message is analyzed using natural language processing (NLP) approaches for extracting the credential reset network address. ### Claim 7 (depends on 1) The method of claim 1, wherein the increased security credentials are generated in real-time and are updated in a secure credentials repository accessible to the at least one automated access agent. ### Claim 8 (depends on 1) The method of claim 1, wherein the increased security credentials are predefined and retrieved from a secure credentials repository accessible to the at least one automated access agent. ### Claim 9 (depends on 1) The method of claim 1, wherein the at least one credentials reset message is detected by analyzing messages received by the at least one user via his associated at least one correspondence channel. ### Claim 10 (depends on 9) The method of claim 9, wherein the messages are analyzed using natural language processing. ### Claim 11 (depends on 1) The method of claim 1, wherein the at least one correspondence channel is a member of a group consisting of: at least one email account associated with the at least one user, phone number of at least one client device associated with the at least one user, and a unique network identifier of at least one client device associated with the at least one user. ### Claim 12 (depends on 1) The method of claim 1, further comprising encrypting the increased security credentials stored in a secure credentials repository. ### Claim 13 (depends on 1) The method of claim 1, wherein the at least one account is a shared account accessible to a plurality of users. ### Claim 14 (depends on 1) The method of claim 1, wherein resetting the access credentials to the at least one account is done periodically according to a predefined time interval. ### Claim 15 (depends on 1) The method of claim 1, wherein resetting the access credentials to the at least one account is done on command in response to a reset command. ### Claim 16 (depends on 1) The method of claim 1, wherein the at least one automated access agent is invoked automatically in response to a login action of the at least one user for accessing the at least one account. ### Claim 17 (depends on 1) The method of claim 1, wherein the at least one automated access agent is configured to automatically log the at least one user into a plurality of accounts of a plurality of online services after initiating a plurality of credentials reset sequences in which the access credentials to each of the plurality of accounts is updated to include respective increased security credentials, the respective increased security credentials of the plurality of accounts are stored in a secure credentials repository. ### Claim 18 (depends on 17) The method of claim 17, wherein the at least one user logs into each of the plurality of accounts by activating the at least one automated access agent using a single set of access credentials. ### Claim 19 (depends on 1) The method of claim 1, wherein the at least one automated access agent is executed by at least one client device used by the at least one user to log into the at least one account, the at least one automated access agent is implemented by at least one of: a web browser configured to embed automated access functionality, and at least one dedicated application. ### Claim 20 (depends on 1) The method of claim 1, wherein the at least one automated access agent is executed by at least one remote server in communication, via at least one network, with at least one client device used by the at least one user to log into the at least one account. ### Claim 21 (depends on 20) The method of claim 20, wherein the at least one online service comprises a Software as a Software (SaaS) service. ### Claim 22 A system for increasing security of access to online accounts, comprising: at least one processor configured to execute a code, the code comprising: code instructions to reset access credentials of at least one account of at least one online service of at least one user, by: transmitting an access credentials reset request, intercepting at least one credentials reset message transmitted via at least one correspondence channel associated with the at least one user, the credentials reset message comprises a credentials reset network address, wherein the at least one credentials reset message is intercepted by analyzing messages stored in a repository storing messages destined for the at least one user and accessible by the at least one user, and accessing the credentials reset network address to replace existing access credentials for the at least one account with increased security credentials; wherein at least one automated access agent is configured to automatically login the at least one user into the at least one online service uses the increased security credentials to login to the at least one account; wherein the at least one credentials reset message is intercepted, the credentials reset network address is extracted from the at least one credentials reset message, and the credentials reset network address is accessed, before the at least one user accesses the and/or conducts actions with, the at least one credentials reset message.