# US 2021/0240814 A1 · System and method to facilitate the security for sets of credentials > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0240814 A1 - Document ID: US20210240814A1 - Status: Published application - Kind: A1 - Application number: 17/207,411 - Filed: 2021-03-19 - Published: 2021-08-05 - Earliest claimed: 2020-03-19 - Inventors: Steven Sholtis - Web page: https://patentgrep.com/patent/US20210240814A1 ## CPC - G06F 21/45: Structures or tools for the administration of authentication - G06F 21/31: User authentication - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/102: {Entity profiles} - G06F 2221/2115: Third party - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system and a method are provided for facilitating the security of sets of credentials. The system and method allow a user to lock or unlock a credential set of at least one user account. The user attempts to access the user account as standard procedure. Before a service provider goes through an authentication process, a third-party server of a service provider requests a token from the system. Based on if the credential set is in a locked status or unlocked status, at least one remote server of the system respectively relays an invalidation token or a validation token to the third-party server. If the invalidation token is relayed to the third-party server, the service provider does not go through the authentication process. If the validation token is relayed to the third-party server, the service provider proceeds with the authentication process as standard procedure. ## Claims ### Claim 1 A method for facilitating the security for sets of credentials, the method comprising the steps of: (A) providing at least one client account managed by at least one remote server, wherein the client account is associated with a corresponding personal computing (PC) device; (B) providing at least one user account managed by at least one third-party server, wherein the user account is associated with the corresponding PC device, and wherein the user account includes a credential set, and wherein the user account is associated to the client account, and wherein the credential set is either in an unlocked status or a locked status; (C) prompting the client account enter a credential input for the user account with the corresponding PC device; (D) relaying the credential input from the corresponding PC device, through the third-party server, and to the remote server, if the credential input is entered by the client account; (E) granting access to the user account with the third-party server, if the credential input does match the credential set, and if the credential set is in the unlocked status; (F) denying access to the user account with the third-party server, if the credential input does not match the credential set, and if the credential set is in the unlocked status; and (G) invalidating access to the user account with the third-party server, if the credential input does match or does not match the credential set, and if the credential set is in the locked status. ### Claim 2 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: prompting the client account to link to the user account with the corresponding PC device during step (B); and generating an association between the user account and the client account with the remote server, if the user account is selected to be linked to the client account. ### Claim 3 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: prompting the client account to enter a single status selection for the credential set with the corresponding PC device; relaying the single status selection from the corresponding PC device to the remote server, if the single status selection is entered by the client account; setting the credential set to the unlocked status with the remote server, if the single status selection is for the unlocked status; and setting the credential set to the locked status with the remote server, if the single status selection is for the locked status. ### Claim 4 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: providing at least one user account as a plurality of user accounts; prompting the client account to enter a group status selection for the credential set of each user account with the corresponding PC device; relaying the group status selection from the corresponding PC device to the remote server, if the group status selection is entered by the client account; setting the credential set of each user account to the unlocked status with the remote server, if the group status selection is for the unlocked status; and setting the credential set of each user account to the locked status with the remote server, if the group status selection is for the locked status. ### Claim 5 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: providing at least one administrator account managed by the third-party server, wherein the administrator account includes a status selection ability; prompting the administrator account to enter a single status selection for the credential set with the third-party server; relaying the single status selection from the third-party server to the remote server, if the single status selection is entered by the administrator account; setting the credential set to the unlocked status with the remote server, if the single status selection is for the unlocked status; and setting the credential set to the locked status with the remote server, if the single status selection is for the locked status. ### Claim 6 (depends on 5) The method for facilitating the security for sets of credentials, the method as claimed in claim 5 comprising the steps of: prompting the client account to grant the status selection ability to the administrator account with the corresponding PC device; and relaying a client token from the remote server to the third-party server, if the status selection ability for the administrator account is granted by the client account. ### Claim 7 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: providing the credential set in the unlocked status; prompting the client account to enter at least one status constraint for the unlocked status with the corresponding PC device; relaying the status constraint from the corresponding PC device to the remote server, if the status constraint is entered by the client account; maintaining the credential set in the unlocked status with the remote server, if the unlocked status is inside the status constraint; and setting the credential set from the unlocked status to the locked status with the remote server, if the unlocked status is outside the status constraint. ### Claim 8 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: providing the credential set in the locked status; prompting the client account to enter at least one status constraint for the locked status with the corresponding PC device; relaying the status constraint from the corresponding PC device to the remote server, if the status constraint is entered by the client account; maintaining the credential set in the locked status with the remote server, if the locked status is inside the status constraint; and setting the credential set from the locked status to the unlocked status with the remote server, if the locked status is outside the status constraint. ### Claim 9 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: relaying a validation token with the remote server to the third-party server after step (D), if the credential input does match the credential set, and if the credential set is in the unlocked status; and granting access to the user account with the third-party server during step (E), if the validation token is received by the third-party server. ### Claim 10 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: relaying a validation token with the remote server to the third-party server after step (D), if the credential input does not match the credential set, and if the credential set is in the unlocked status; and denying access to the user account with the third-party server during step (F), if the validation token is received by the third-party server. ### Claim 11 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: relaying an invalidation token with the remote server to the third-party server after step (D), if the credential input does match or does not match the credential set, and if the credential set is in the locked status; and invalidating access to the user account with the third-party server during step (G), if the invalidation token is received by the third-party server. ### Claim 12 (depends on 1) The method for facilitating the security for sets of credentials, the method as claimed in claim 1 comprising the steps of: generating an invalid notification with the third-party server during step (G), if the credential input does match or does not match the credential set, and if the credential set is in the locked status; and displaying the invalid notification with the corresponding PC device after step (G).