Management of network login identities
AssigneeYahoo! Inc.
InventorsSushant Kumar, Eric Chin Lin
Life of this patent
Estimating the term…
Abstract
Apparatuses, methods, and systems directed to facilitate the management and/or security of network login and authentication systems. Some embodiments of the invention allow users to maintain a plurality of user accounts with a given domain, and switch among multiple login sessions. In other particular embodiments, the systems disclosed below can be used to identify and prevent phishing attacks. In some embodiments, the present invention involves using a personal identification number or string as an additional security measure. In some other embodiments, the present invention involves using an application identifier while establishing a login session with the network server.
Claims20
An apparatus, comprising:
- a memory;
- one or more processors;
- a browser client application, stored in the memory, comprising instructions operable to cause the one or more processors to interact with a server over a computer network;
- a domain-restrictive data storage application, stored in the memory, comprising instructions operable, in connection with the browser application, to cause the one or more processors to:
- maintain, on a client system, a local token data store of token information;
- and
- restrict access to the token information on a server domain basis, wherein the domain-restrictive data storage application employs sandbox security;
- and
- a login module, stored in the memory, comprising instructions operable within the context of the execution environment of the browser application to cause the one or more processors to:
- access the domain-restrictive data storage application to retrieve one or more identifiers from the local token data store;
- display the retrieved identifiers in a user interface window of the browser application, wherein the apparatus is a client system.
A method, comprising the operations of:
- accessing a local token data store implemented on a client computer system to retrieve one or more identifiers, wherein access to the local token data store is restricted through the use of sandbox security;
- displaying the retrieved identifiers;
- receiving a selection of one of the displayed identifiers;
- retrieving a token corresponding to the selected identifier from the local token data store;
- generating a challenge response for the selected identifier using the retrieved token, wherein each operation of the method is executed by one or more processors on the client computer system.
Logic encoded in one or more tangible media, which are non-transitory, for execution on a client system, wherein the logic when executed is operable to:
- access a local token data store on the client system to retrieve one or more identifiers, wherein access to the local token data store is restricted through the use of sandbox security;
- display the retrieved identifiers;
- receive a selection of one of the displayed identifiers;
- retrieve a token corresponding to the selected identifier from the local token data store;
- generate a challenge response for the selected identifier using the retrieved token.
A method, comprising the operations of:
- receive a login request over a network from a client system;
- transmit a login form to the client system;
- receive a response from the client system, wherein the response includes a token retrieved from a local token data store on the client system, wherein access to the local token data store is restricted through the use of sandbox security on the client system, and wherein the token is associated with an application source identifier;
- authenticate the client system if the application source identifier allows for a login without a user name and password, wherein each operation of the method is executed by a processor on a network server.
Dependencies are inferred from the claim text.