# US 8,788,820 B2 · Secure network access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,788,820 B2 - Document ID: US8788820B2 - Status: Granted - Kind: B2 - Application number: 13/494,893 - Filed: 2012-06-12 - Published: 2013-08-01 - Granted: 2014-07-22 - Earliest claimed: 2001-02-15 - Assignees: Ewise Systems Pty Ltd - Applicants: Alexander Grinberg; Mike Kontorovich; Mark Chazan; Colin Reyburn - Inventors: Alexander Grinberg; Mike Kontorovich; Mark Chazan; Colin Reyburn - Web page: https://patentgrep.com/patent/US8788820B2 ## CPC - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/41: where a single sign-on provides access to a plurality of computers - G06F 21/6236: {between heterogeneous systems} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/10: {for controlling access to devices or network resources} - H04L 67/14: Session management (for real-time applications in data packet communications networks H04L65/1066) - H04L 9/08: Key distribution {or management, e.g. generation, sharing or updating, of cryptographic keys or passwords (network architectures or network communication protocols for supporting key management in a packet data network H04L63/06)} - H04L 69/329: in the application layer [OSI layer 7] - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract The present invention relates to a system and method for facilitating access to secure network sites, such as sites providing secure financial information. An active software agent is utilized to fetch passwords and user identifiers from a user computing system and to use the passwords and identifiers to extract required information from the secure site. The password sites and identifiers are encrypted and an encryption key is stored at a network mode remote from the user's computer and is fetched in order to enable the passwords and identifiers to be decrypted so that the active agent can use them to obtain the required information. ## Claims ### Claim 1 A system for facilitating access by a user to a secure network site, the system comprising: a user computing system including an active agent engine that executes an active agent from a remote computing device to access the secure network site on behalf of the user, the active agent being arranged, in response to a user query, to: retrieve a dedicated decryption key from a repository server remote from the user computing system; utilize the retrieved decryption key to obtain access data for enabling access to the secure network site, the access data being obtained from an encrypted vault stored on the user computing system; and utilize the access data to extract information from the secure network site for presentation to the user. ### Claim 2 (depends on 1) The system in accordance with claim 1, wherein the active agent includes a security authorization module that authorizes the active agent for use with the user computing system. ### Claim 3 (depends on 2) The system in accordance with claim 2, wherein the user computing system includes an authorization engine for checking the security authorization module. ### Claim 4 (depends on 1) The system in accordance with claim 1, wherein the encrypted vault stores respective encrypted access data for a plurality of secure network sites. ### Claim 5 (depends on 1) The system in accordance with claim 1, wherein the access data is accessible only via the user computing system. ### Claim 6 (depends on 1) The system in accordance with claim 1, including a plurality of active agents for respectively accessing a plurality of independent secure network sites. ### Claim 7 (depends on 1) The system in accordance with claim 1, further comprising an active agent repository server remote from the user computing system, the active agent being available from the active agent repository server. ### Claim 8 (depends on 1) The system in accordance with claim 1, further comprising a decryption key repository server which is accessible by the active agent via a network to enable the active agent to obtain a dedicated decryption key associated with a user, the decryption key being arranged to decrypt encrypted access data. ### Claim 9 (depends on 1) The system in accordance with claim 1, wherein the active agent is adapted to discard the decryption key from the user computing system once the access data is obtained. ### Claim 10 A method of facilitating access to secure network sites on behalf of a user utilizing a user computing system including an active agent engine executing an active agent from a remote computing device, the method comprising: retrieving a decryption key from a repository server remote from the user computing system in response to a user query; utilizing the retrieved decryption key to obtain access data for enabling access to a secure network site, the access data being obtained from an encrypted vault stored on the user computing system; and utilizing the access data to extract private information from the secure network site for presentation to the user. ### Claim 11 (depends on 10) The method according to claim 10, further comprising discarding the decryption key once the access data is obtained. ### Claim 12 (depends on 10) The method in accordance with claim 10, further comprising authorizing the active agent for use with the system using an active agent security authorization module.