# US 2021/0243174 A1 · Auto-Form Fill Based Website Authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0243174 A1
- Document ID: US20210243174A1
- Status: Published application
- Kind: A1
- Application number: 17/049,126
- Filed: 2018-04-26
- Published: 2021-08-05
- Earliest claimed: 2018-04-26
- Assignees: Google Inc.
- Applicants: Google LLC
- Inventors: Clifton Kaznocha; Erik Gustavson; Scott Kriz
- Web page: https://patentgrep.com/patent/US20210243174A1

## CPC

- G06F 21/31: User authentication
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- G06F 16/955: using information identifiers, e.g. uniform resource locators [URL]
- H04L 63/0815: {providing single-sign-on or federations}
- H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications}
- G06F 2221/2115: Third party
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method (400) for a website authentication is provided. The method includes receiving a reference uniform resource locator (URL) (130) at a browser (120) and determining whether the reference URL adheres to an authentication protocol (202) including a credential identifier (132c) and a web authentication host URL (132a). When the reference URL adheres to the authentication protocol, the method also includes extracting the credential identifier and the web authentication host URL from the reference URL. The method further includes obtaining credential data (160) from a remote service (150) using the credential identifier and sending web authentication instructions (170) to the browser. The web authentication instructions include the web authentication host URL and the credential data

## Claims

### Claim at position 1

1-40. (canceled)

### Claim 41

A method for providing website authentication, the method comprising:
receiving, at data processing hardware, a reference uniform resource locator at a browser;
determining, by the data processing hardware, whether the reference URL adheres to an authentication protocol comprising a credential identifier and a web authentication host URL; and
when the reference URL adheres to the authentication protocol:
extracting, by the data processing hardware, the credential identifier and the web authentication host URL from the reference URL;
obtaining, by the data processing hardware, credential data from a remote service using the credential identifier; and
sending web authentication instructions to the browser, the web authentication instructions comprising:
the web authentication host URL; and
the credential data.

### Claim 42 (depends on 41)

The method of claim 41, wherein the reference URL adheres to either the authentication protocol or a Hypertext Transfer Protocol.

### Claim 43 (depends on 41)

The method of claim 41, wherein the credential data comprises a username and a password.

### Claim 44 (depends on 41)

The method of claim 41, wherein the authentication protocol comprises a user identifier.

### Claim 45 (depends on 44)

The method of claim 44, wherein the user identifier and the credential identifier comprise object identifiers, the object identifiers configured to publically obfuscate an identity of a user associated with the user identifier and a credential associated with the credential identifier.

### Claim 46 (depends on 41)

The method of claim 41, wherein the authentication protocol comprises a user identifier combined with the credential identifier as a single identifier.

### Claim 47 (depends on 41)

The method of claim 41, wherein the web authentication instructions configure the browser to auto-populate a login form at the web authentication host URL using the credential data based on the web authentication instructions.

### Claim 48 (depends on 41)

The method of claim 41, wherein the web authentication instructions further comprise a login URL and configure the browser to:
execute the login URL, the login URL navigating to a login page associated with the web authentication host URL;
determine login fields by parsing a document object model of the login page;
populate the login fields using the credential data based on the web authentication instructions; and
redirect the browser to the web authentication host URL.

### Claim 49 (depends on 41)

The method of claim 41, wherein the authentication protocol further comprises a custom protocol identifier.

### Claim 50 (depends on 41)

The method of claim 41, wherein the authentication protocol comprises a format of web+credential://{Credential ID}@{Web Host}.

### Claim 51

A method for providing website authentication, the method comprising:
receiving, at data processing hardware, references to web resources, a first reference having a first protocol formatting, the remaining references having a second protocol formatting;
identifying, by the data processing hardware, the first reference as having the first protocol formatting; and
executing, by the data processing hardware, an automated website login routine using the first reference,
wherein the automated website login routine is configured to:
extract a credential identifier and a web host identifier from the first reference;
obtain credential data corresponding to the credential identifier, the credential data comprising a user credential;
obtain a uniform resource locator for a login page corresponding to the web host identifier; and
automatically log into the login page corresponding to the web host identifier using the user credential.

### Claim 52 (depends on 51)

The method of claim 51, wherein automatically logging into the login page comprises:
parsing a document object model of the login page to identify a username field and a password field;
inserting a user name of the user credential into the username field; and
inserting a password of the user credential into the password field.

### Claim 53 (depends on 51)

The method of claim 51, wherein the first protocol formatting comprises:
web+credential://{User OID}:{Credential OID}@{Web App Host}/.

### Claim 54 (depends on 51)

The method of claim 51, further comprising:
receiving, at the data processing hardware, a format of web+credential://{Web App Host}/as the first reference; and
identifying, by the data processing hardware, the format of web+credential://{Web App Host}/ as an incomplete first protocol formatting,
wherein the automated website login routine is configured to:
extract the web host identifier from the first reference;
obtain the uniform resource locator for the login page corresponding to the web host identifier; and
display the login page corresponding to the web host identifier in response to the received references comprising the format of web+credential://{Web App Host}/ as the first reference.

### Claim 55 (depends on 51)

The method of claim 51, wherein receiving references to web resources comprises a uniform resource locator.

### Claim 56 (depends on 51)

The method of claim 51, wherein the first protocol formatting comprises a custom protocol identifier.

### Claim 57 (depends on 51)

The method of claim 51, wherein the user credential identifier comprises a user identifier and a credential identifier.

### Claim 58 (depends on 51)

The method of claim 51, further comprising redirecting, by the data processing hardware, to the web resources of the received references.

### Claim 59 (depends on 51)

The method of claim 51, wherein the user credential identifier comprises an object identifier, the object identifier configured to publically obfuscate an identity of a user associated with the user credential identifier.

### Claim 60 (depends on 51)

The method of claim 51, wherein the user credential comprises a username and a password.

### Claim 61

A system for providing website authentication, the system comprising:
data processing hardware; and
memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed by the data processing hardware cause the data processing hardware to perform operations comprising:
receiving a reference uniform resource locator at a browser;
determining whether the reference URL adheres to an authentication protocol comprising a credential identifier and a web authentication host URL; and
when the reference URL adheres to the authentication protocol:
extracting the credential identifier and the web authentication host URL from the reference URL;
obtaining credential data from a remote service using the credential identifier; and
sending web authentication instructions to the browser, the web authentication instructions comprising:
the web authentication host URL; and
the credential data.

### Claim 62 (depends on 61)

The system of claim 61, wherein the reference URL adheres to either the authentication protocol or a Hypertext Transfer Protocol.

### Claim 63 (depends on 61)

The system of claim 61, wherein the credential data comprises a username and a password.

### Claim 64 (depends on 61)

The system of claim 61, wherein the authentication protocol comprises a user identifier.

### Claim 65 (depends on 64)

The system of claim 64, wherein the user identifier and the credential identifier comprise object identifiers, the object identifiers configured to publically obfuscate an identity of a user associated with the user identifier and a credential associated with the credential identifier.

### Claim 66 (depends on 61)

The system of claim 61, wherein the authentication protocol comprises a user identifier combined with the credential identifier as a single identifier.

### Claim 67 (depends on 61)

The system of claim 61, wherein the web authentication instructions configure the browser to auto-populate a login form at the web authentication host URL using the credential data based on the web authentication instructions.

### Claim 68 (depends on 61)

The system of claim 61, wherein the web authentication instructions further comprise a login URL and configure the browser to:
execute the login URL, the login URL navigating to a login page associated with the web authentication host URL;
determine login fields by parsing a document object model of the login page;
populate the login fields using the credential data based on the web authentication instructions; and
redirect the browser to the web authentication host URL.

### Claim 69 (depends on 61)

The system of claim 61, wherein the authentication protocol further comprises a custom protocol identifier.

### Claim 70 (depends on 61)

The system of claim 61, wherein the authentication protocol comprises a format of web+credential://{Credential ID}@{Web Host}.

### Claim 71

A system for providing website authentication, the system comprising:
data processing hardware; and
memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed by the data processing hardware cause the data processing hardware to perform operations comprising:
receiving references to web resources, a first reference having a first protocol formatting, the remaining references having a second protocol formatting;
identifying the first reference as having the first protocol formatting; and
executing an automated website login routine using the first reference,
wherein the automated website login routine is configured to:
extract a credential identifier and a web host identifier from the first reference;
obtain credential data corresponding to the credential identifier, the credential data comprising a user credential;
obtain a uniform resource locator for a login page corresponding to the web host identifier; and
automatically log into the login page corresponding to the web host identifier using the user credential.

### Claim 72 (depends on 71)

The system of claim 71, wherein automatically logging into the login page comprises:
parsing a document object model of the login page to identify a username field and a password field;
inserting a user name of the user credential into the username field; and
inserting a password of the user credential into the password field.

### Claim 73 (depends on 71)

The system of claim 71, wherein the first protocol formatting comprises:
web+credential://{User OID}:{Credential OID}@{Web App Host}/.

### Claim 74 (depends on 71)

The system of claim 71, wherein the operations further comprise:
receiving a format of web+credential://{Web App Host}/ as the first reference; and
identifying the format of web+credential://{Web App Host}/ as an incomplete first protocol formatting,
wherein the automated website login routine is configured to:
extract the web host identifier from the first reference;
obtain the uniform resource locator for the login page corresponding to the web host identifier; and
display the login page corresponding to the web host identifier in response to the received references comprising the format of web+credential://{Web App Host}/ as the first reference.

### Claim 75 (depends on 71)

The system of claim 71, wherein receiving references to web resources comprises a uniform resource locator.

### Claim 76 (depends on 71)

The system of claim 71, wherein the first protocol formatting comprises a custom protocol identifier.

### Claim 77 (depends on 71)

The system of claim 71, wherein the user credential identifier comprises a user identifier and a credential identifier.

### Claim 78 (depends on 71)

The system of claim 71, wherein the operations further comprise redirecting to the web resources of the received references.

### Claim 79 (depends on 71)

The system of claim 71, wherein the user credential identifier comprises an object identifier, the object identifier configured to publically obfuscate an identity of a user associated with the user credential identifier.

### Claim 80 (depends on 71)

The system of claim 71, wherein the user credential comprises a username and a password.