# US 8,978,123 B2 · Web based system that allows users to log into websites without entering username and password information > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,978,123 B2 - Document ID: US8978123B2 - Status: Granted - Kind: B2 - Application number: 13/953,535 - Filed: 2013-07-29 - Published: 2013-11-21 - Granted: 2015-03-10 - Earliest claimed: 2007-06-22 - Assignees: Springo Incorporated - Applicants: Springo Incorporated - Inventors: Jonathan Nichols; Krista Donaldson - Web page: https://patentgrep.com/patent/US8978123B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - G06F 21/41: where a single sign-on provides access to a plurality of computers - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 63/0815: {providing single-sign-on or federations} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/306: User profiles - G06F 2221/2107: File encryption - G06F 2221/2115: Third party - G06F 2221/2117: User registration - G06F 2221/2119: Authenticating web pages, e.g. with suspicious links - G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Internet user passwords are securely managed. A formation component can enable a user to create a master account on a web server, the master account comprising a master username and password. An access component can enable the user to access a plurality of password protected websites from a web browser or non-browser software application resident on the user's computing device when the user logs into the master account by entering the valid master username and password. A selection component can log the user into a website of the plurality of password protected websites when the user selects a hyperlink associated with the website, selects a linked image associated with the website, or selects the website from a pulldown list contained in a toolbar of a web browser. A display component can open a web browser or tab associated with the website. ## Claims ### Claim 1 A system, comprising: a processor, coupled to a memory, that executes or facilitates execution of instructions stored in the memory to cause the system to at least: create master account data representing a master account for an identity comprising a master username and a master password; in response to an authentication of the identity utilizing the master username and the master password, enable access to password protected websites associated with the master account based on an encryption key that is a function of the master username and the master password; receive input representing a first password protected website of the password protected websites, and a username and a password that are associated with the first password protected website; encrypt the username and the password that are associated with the first password protected website using the encryption key resulting in encrypted access data; in further response to the authentication of the identity utilizing the master username and the master password, enable an upload, to a network data store, of encrypted username and password combinations locally stored by a web browser in association with the password protected websites; and in response to further input indicating a selection of the first password protected website, log into the first password protected website on behalf of the identity using the username and the password that are associated with the first password protected website by decrypting the encrypted access data. ### Claim 2 (depends on 1) The system of claim 1, wherein the selection of the first password protected website comprises at least one of a selection of a hyperlink associated with the first password protected website, a selection of a linked image associated with the first password protected website, or a selection of the first password protected website from a list displayed by a web browser application. ### Claim 3 (depends on 1) The system of claim 1, wherein the processor further executes or facilitates the execution of the instructions to cause the system to, based on the further input, initiate an execution of a web browser application or open an additional tab of an executing web browser application to display content from the first password protected website in response to the detection of the further input indicating the selection of the first password protected website. ### Claim 4 (depends on 1) The system of claim 1, wherein the input is an indication of a user resource locator (URL) link to the first password protected website. ### Claim 5 (depends on 1) The system of claim 1, wherein the processor further executes or facilitates the execution of the instructions to cause the system to store the URL link as a stored URL link in a data store that stores the master account data and store the username and the password as the encrypted access data in the data store. ### Claim 6 (depends on 1) The system of claim 1, wherein the processor further executes or facilitates the execution of the instructions to cause the system to, in response to the authentication of the identity utilizing the master username and the master password, enable viewing of the stored URL link, the username and the password. ### Claim 7 (depends on 1) The system of claim 1, wherein the processor further executes or facilitates the execution of the instructions to cause the system to, in response to the authentication of the identity utilizing the master username and the master password, enable the stored URL link, the username and the password to be modified. ### Claim 8 (depends on 1) The system of claim 1, wherein the processor further executes or facilitates the execution of the instructions to cause the system to determine the structure of login forms for the first password protected website. ### Claim 9 A method, comprising: in response to authenticating identity data based on a master name and a master password of a master account that is represented by master account data stored in a data store and associated with an identity represented by the identity data, enabling, by a device comprising a processor, access from the device to a password protected network resource associated with the master account based on an encryption key that is derived from the master name and the master password; determining a structure of a login form for the password protected network resource in connection with an initial request for access to the password protected network resource; receiving a name and a password that are associated with the password protected network resource; and encrypting the name and the password that are associated with the password protected network resource using the encryption key resulting in encrypted resource access data for the password protected network resource stored in a data store in association with the master account, wherein the determining the structure of the login form for the password protected network resource comprises executing a script by a web browser of the device to determine the structure of the login form at a defined location for content represented by the password protected network resource, and wherein the defined location for content is root or home content of hierarchically defined content for the password protected network resource. ### Claim 10 (depends on 9) The method of claim 9, wherein the determining the structure of the login form for the password protected network resource comprises requesting and receiving a markup language file representing root or home content for the password protected network resource. ### Claim 11 (depends on 9) The method of claim 9, wherein the determining the structure of the login form for the password protected network resource comprises executing a script that requests the password protected network resource to provide a markup language file representing the login form for the password protected network resource. ### Claim 12 (depends on 9) The method of claim 9, wherein the determining the structure of the login form for the password protected network resource comprises determining the structure in response to the initial request for access to the password protected network resource. ### Claim 13 (depends on 9) The method of claim 9, further comprising: storing the structure of the login form in association with the encrypted resource access data for the password protected network resource stored in the data store. ### Claim 14 (depends on 9) The method of claim 9, further comprising: in response to a subsequent request for access to the password protected network resource, accessing the password protected network resource on behalf of the identity using the name and the password by decrypting the encrypted resource access data. ### Claim 15 A computer readable storage device comprising computer executable instructions that, in response to execution, cause a device comprising a processor to perform operations, comprising: in response to authenticating identity data based on a master name and a master password of a master account that is represented by master account data stored in a data store and associated with an identity represented by the identity data, enabling access for the device to a password protected network site associated with the master account based on an encryption key that is derived from the master name and the master password, wherein the authenticating the identity data comprises performing an additional authentication to authenticate the identity other than verifying the master name and the master password of the master account; determining a structure of a login form for the password protected network site in connection with an initial request for access to the password protected network site; receiving a name and a password that are associated with the password protected network site; and encrypting the name and the password that are associated with the password protected network site using the encryption key resulting in encrypted site access data for the password protected network site stored in a data store in association with the master account, wherein the additional authentication comprises verifying that text displayed by a web browser of the device is equivalent to a uniform resource identifier (URI) associated with the master account and presenting a warning not to enter the master name and the master password in response to the text being determined to be different from the URI associated with the master account. ### Claim 16 (depends on 15) The computer readable storage device of claim 15, wherein the additional authentication comprises at least one of verifying fingerprint identification data received from the identity, verifying the identity using a secure sockets layer protocol, or verifying that text displayed by a web browser of the device is equivalent to the uniform resource identifier (URI) associated with the master account.