Secure System and Method for Sharing Online Accounts
AssigneeMultifactor, Inc.
InventorVivek Chinar Nair
Life of this patent
Estimating the term…
Abstract
A secure system and method for sharing online accounts includes: a web service; a shared account residing on the web service; a client device requiring access to the shared account; and a proxy server; whereby the client device makes requests to the web service through the proxy server to access the shared account.
Claims24
1-34. (canceled)
A system and method for sharing online accounts comprising:
- a proxy server;
- whereby a client device makes requests to a web service through the proxy server to access a shared account.
The system and method for sharing online accounts of claim 1, wherein a client device communicates with the proxy server via an option selected from a HTTP/HTTPS proxy interface, a CGI web proxy interface, and a SOCKS proxy interface.
The system and method for sharing online accounts of claim 1, whereby a Proxy Auto-Configuration (PAC) script is further used to configure a client device to use the proxy server.
The system and method for sharing online accounts of claim 1, further comprising a browser extension on a client device, whereby the browser extension is used to facilitate communication between a client device and the proxy server.
The system and method for sharing online accounts of claim 1, wherein the proxy server is further configured to intercept and store browser cookies created by a web service.
The system and method for sharing online accounts of claim 1, wherein the proxy server is further configured to encrypt browser cookies created by a web service before forwarding said cookies to a client device.
The system and method for sharing online accounts of claim 1, wherein the proxy server is further configured to store a credential associated with a shared account.
The system and method for sharing online accounts of claim 1, wherein the proxy server is further configured to modify a credential associated with a shared account.
The system and method for sharing online accounts of claim 1, further comprising a trusted computing device on the proxy server, wherein the trusted computing device is used to preclude misuse of a credential associated with a shared account.
The system and method for sharing online accounts of claim 1, wherein a secure multi-party computation (MPC) protocol is used between the proxy server and a client device.
The system and method for sharing online accounts of claim 1, wherein a credential associated with a shared account is shared across at least two client devices using a secret sharing algorithm.
The system and method for sharing online accounts of claim 1, wherein the proxy server further maintains a log of requests made by a client device.
The system and method for sharing online accounts of claim 1, wherein a client device further attaches a digital signature to requests made to the proxy server.
The system and method for sharing online accounts of claims 12 and 13, wherein the log of requests further includes digital signatures provided by a client device.
The system and method for sharing online accounts of claim 13, wherein at least two client devices produce a threshold signature, which is further attached to requests made to the proxy server.
The system and method for sharing online accounts of claim 1, wherein the proxy server performs an authentication process with a web service using a credential associated with a shared account.
The system and method for sharing online accounts of claim 16, wherein the proxy server further performs a multi-factor authentication process with a web service.
The system and method for sharing online accounts of claim 1, wherein the proxy server is further configured to reject certain requests of a client device depending on the content of the request.
The system and method for sharing online accounts of claim 18, wherein at least one of machine learning, an access control matrix, regular expressions, a policy scripting language, a markup language, and an authentication token, is used to define which requests are rejected.
The system and method for sharing online accounts of claim 19, wherein a policy can be created by at least one of recording allowable request types during a standard browsing session and automatically crawling the pages of a web service.
The system and method for sharing online accounts of claim 1, wherein the proxy server is further configured to store an API key associated with an API of a web service.
The system and method for sharing online accounts of claim 21, wherein the proxy server is further configured to allow only certain requests to the API based on their contents.
The system and method for sharing online accounts of claim 21, wherein the proxy server is further configured to modify the API response prior to forwarding them to a client device.
Dependencies are inferred from the claim text.