Methods for single signon (SSO) using decentralized password and credential management

A method for decentralized single sign-on to a plurality of websites via instructions executed by a user computer browser, the method comprising the steps of:

• Establishing a browsing session with a website;
• Determining if the user has previously registered with a login server;
• If the user has not already registered with the login server:
• Causing the browser to establish a secure communication channel with the login server;
• Receiving a username and password from the user;
• Encrypting the password and providing it to the login server upon registration to be stored for future validation;
• Receiving a password-encrypted one-time random number from the login server;
• Obtaining user credentials and other user information entered into the browser;
• Locally encrypting the user credentials and other user information on the browser with the password-encrypted one-time random number;
• and
• Sending the encrypted user credential(s) and other information to the login server to be stored by one or more storage locations;
• if the user has already registered with the login server:
• Determining whether the user is currently logged in to the login server;
• If the user is not logged in to the login server:
• Causing the browser to establish a secure communication channel with the login server;
• Acquiring the password from the user;
• Locally encrypting the password on the browser upon login;
• Requesting validation of the user's encrypted password from the login server;
• If validated, receiving stored encrypted user credentials and/or other user information from the one or more storage locations;
• Decrypting the stored credentials and/or other user information with the password to reveal the one-time random number;
• Using the one-time random number to decrypt the user credentials and/or other user information;
• Determining whether user information exists for the current website;
• and
• If user information for the current website exists, further decrypting any user credentials related to the website and providing the credentials to the website to automatically log the user into the website;
• if the user is logged in to the login server;
• Determining whether user information exists for the current website;
• and
• If user information exists, further decrypting any user credentials related to the website and providing the credentials to the website to automatically log the user into the website;
• Wherein all encryption and decryption of the user's password and credentials are performed locally by the browser on the user computer.