25 results about "Password manager" patented technology

Systems and methods are disclosed herein for a user to use a mobile device with a camera and a terminal device with a camera to manage and use passwords via QR (Quick Response) codes. The terminal device may generate and display a QR code for a user account or data. The user running a password manager app on the mobile device may scan the QR code of the user account or the QR code of the data to generate, store, and retrieve a password, and to display a QR code for the password. The terminal device may scan the QR code of the password to receive and use the password in sign-up, sign-in, data encryption, and data decryption procedures.

Disclosed are techniques for populating a password manager. In an aspect, a processing system of a user device or a remote server scans an email account of a user of a user device to identify a set of service providers from which the email account of the user has received one or more emails, optionally displays, via a user interface of the user device, a list of the set of service providers, optionally receives, via the user interface of the user device, a selection of at least a subset of the set of service providers, and populates a password manager with login information for the user for each of a set of service provider accounts corresponding to at least the subset of the set of service providers.

The application provides a mimic system account password dynamic management method, which comprises the following steps: in an initial state, the same user account has different passwords on different mimic components and executors; a password cracking detector is arranged on the executor or mimic component of the mimic system to detect whether the executor or mimic component is subjected to a password cracking attack in real time; when it is detected that the executor or mimic component is subjected to a password cracking attack, the current user account is locked, the executor or mimic component is informed to enable a traffic filtering rule to block the network attack cracking, and a password regeneration request message is sent to a password manager to change the password of the current user account; wherein the password cracking attack detection step comprises the following steps: detecting whether the number of login requests in a certain time range exceeds a preset threshold value, and if yes, and the return result of each login request is failure, it is considered that a password cracking attack occurs.

The application discloses a password processing method and device based on a blockchain and a medium. The password processing method and device based on the blockchain utilize a blockchain super account book technology to perform segmented processing on user password plaintext when the user password plaintext is saved, and the user password plaintext is saved by multiple password administrators. When a user forgets a password, the password can be restored only by permission of the multiple password administrators. In addition, each time a password is input or restored, super account book verification and recording are performed, and the security of password management is significantly improved.

A system and method for protecting user data using a key escrow service. The key escrow service may be hosted by a service provider to integrate Identity Access Management (IAM) solutions, such as Single-Sign-On (SSO) and / or System for Cross-domain Identity Management (SCIM), with a zero-knowledge service, such as a password manager or other service handling sensitive user data. In examples, secure enclave technology may be used to allow the service provider to host and manage the key escrow service without being able to access any cryptographic key used and / or stored within a secure enclave. Accordingly, in some aspects, the service provider may have the ability to store users' secret keys for SSO and sharing keys for SCIM in a trusted, secure storage location without breaking the zero-knowledge principles of the infrastructure.

A system including a generator computer, a user computer, and a target computer. The generator computer generates high entropy security information. The user computer executes operations including receiving password manager access information and a retrieval key, accessing the password manager using the password manager access information, receiving the high entropy security information, storing the high entropy security information in the password manager, in association with the retrieval key, supplying the retrieval key to retrieve the high entropy security information that was stored in the password manager, and providing the high entropy security information on a user computer interface device. The target computer receives the high entropy security information provided by the user computer interface device, and provides access to the target computer when the high entropy security information is verified. The generator computer, the user computer, and the target computer are communicatively decoupled from each other.

Disclosed are techniques for populating a password manager. In an aspect, a processing system of a user device or a remote server scans an email account of a user of a user device to identify a set of service providers from which the email account of the user has received one or more emails, optionally displays, via a user interface of the user device, a list of the set of service providers, optionally receives, via the user interface of the user device, a selection of at least a subset of the set of service providers, and populates a password manager with login information for the user for each of a set of service provider accounts corresponding to at least the subset of the set of service providers.

A new password manager for safely autofilling login user login credentials performs multiple layers of security check to protect users' confidential data. User interface elements of a computing source, such as a web page or a mobile app, are parsed for determining that password input fields are present. In such a case, a autofill control is displayed for activating user authentication for accessing the password manager. The password manager determines a computing source identifier of the computing source, determines a list of context identifiers corresponding to the computing source, performs computing security check, matches the computing source identifier to an account, and selects an account. The password manager then performs account security check on the selected account. When the security check is successful, the password manager autofills the login password input field with login data associated with the selected account.

The invention discloses a dynamic random code encryption method and system for unmanned aerial vehicle emergency mobile command equipment. Through introduction of a time dynamic password and a random password, the password is not fixed any more. The time dynamic password is generated according to the current time, and the random password is generated through a random number and refreshed at regular intervals. This makes it impossible for a low-permission user to remember or speculate the password of a high-permission user even if the low-permission user uses the device for a long time. And when the user logs in, authority verification is carried out according to the user group. Different user groups have different operation authorities, and unauthorized users cannot access advanced settings and modified parameters. Therefore, it is ensured that only the user with the appropriate authority can perform corresponding operation, and the safety of the system is enhanced. For operation needing parameter modification, the random password is displayed through the two-dimensional code, and the administrator group user obtains the random password by scanning the two-dimensional code, so that the operation complexity is increased, and a low-authority user is prevented from modifying parameters curiously or maliciously.

Systems and methods are presented for a hardware accessory, with embedded logical features, that facilitates communication with a password manager and expeditious text entry in application login dialogue screens. The hardware accessory is embodied as a portable electronic apparatus, such as a USB accessory that may be physically attached and detached form a personal computer. The hardware accessory may also be embodied as a portable computing device such as a mobile phone that may be wirelessly coupled to and decoupled from the personal computer. The passwords may be maintained in a cloud-based vault and retrieved through either the personal computer or the mobile computing device. The hardware accessory converts the password into keystrokes that are transmitted to the personal computer for automated insertion into the respective application login dialogue screens.

The present invention discloses a semi-automated testing method for the auto-fill function of a password manager, including: (1) A tester manually registers and logs in to a password manager account, and stores the login credentials of a Web site in the password manager; then manually tests the auto-fill function of the password manager, while marking the pixel range of the click position that triggers the rendering of the pop-up box and the pixel range of the click position that triggers the auto-fill operation; (2) Configure and start an end-to-end testing tool, then control the browser to access the Web site where the test case is located, and record the actual fill result according to the pixel range marked in step 1; (3) Compare the actual fill result with the expected fill result of the test case, verify whether the actual fill result fills the form of the Web site according to the expected fill result, and generate a test report. The present invention combines an automated method and end-to-end testing to achieve efficient testing of the auto-fill function of the password manager.

Disclosed are techniques for populating a password manager. In an aspect, a processing system of a user device or a remote server scans an email account of a user of a user device to identify a set of service providers from which the email account of the user has received one or more emails, optionally displays, via a user interface of the user device, a list of the set of service providers, optionally receives, via the user interface of the user device, a selection of at least a subset of the set of service providers, and populates a password manager with login information for the user for each of a set of service provider accounts corresponding to at least the subset of the set of service providers.

This invention provides a file encryption device, comprising: a file input pool, a file formatter, a matrix multiplier, an inverse matrix unit, a file output pool, a user password manager, an encryption matrix generator, a universal DES encryptor, an encryption matrix array, and a universal DES decryptor. This invention can meet the needs of people's daily electronic data for low security and large data volumes, avoiding the use of expensive professional data encryption hardware or software, and preventing low-cost data cracking. It provides a low-computation, low-latency, and low-cost encryption device based on a matrix transformation algorithm.

The present invention provides a method for managing account information using an extension program installed on a web browser, a mobile password manager which is an application program installed on a user mobile device and used for account information management, and a relay server in communication connection with the extension program and the mobile password manager. According to the account information management method provided by one embodiment of the invention, a user can conveniently manage and automatically input a user name and a password set for each online service which the user hopes to access by using a mobile device held by the user; and the problem that data are stolen due to the fact that server storage of the account information is easily attacked externally and the problem of the risk that the data are stolen due to the fact that a main password of software for managing the account information is leaked can be solved.

The invention discloses a semi-automatic test method for an automatic filling function of a password manager, which comprises the following steps that: (1) a tester manually registers and logs in an account of the password manager, and stores a login certificate of a Web site in the password manager; then manually testing an automatic filling function of the password manager, and simultaneously marking a pixel range of a click position for triggering a rendering pop-up box and a pixel range of a click position for triggering an automatic filling operation; (2) configuring and starting an end-to-end test tool, then controlling a browser to access a Web site where the test case is located, and recording an actual filling result according to the pixel range marked in the step (1); and (3) comparing the actual filling result with an expected filling result of the test case, checking whether the actual filling result fills the form of the Web website according to the expected filling result or not, and generating a test report. According to the method, an automatic method and end-to-end testing are combined, and efficient testing of the automatic filling function of the password manager is achieved.

In an approach to improve password management through the utilization of robotic process automation robot, embodiments run, through a continuous integration server, a deployment process. Further, responsive to encountering an access-controlled resource that requires a password, embodiments execute a password manager component, and utilize the password manager component to determine if the password is stored in an encrypted format on a database. Additionally, responsive to determining the password is stored in the encrypted format on the database, embodiments decrypt the password based on a master key, and responsive to decrypting the password, embodiments integrate the password into a configuration file located in source code of an application, so the password is not accessible outside the password manager component.

A system for securely accessing a target computer using high entropy security information stored in a password manager including a user computer configured to execute instructions to perform operations including receiving password manager access information and a retrieval key, accessing the password manager using the password manager access information, receiving the high entropy security information provided by a generator computer, storing the high entropy security information in the password manager, in association with the retrieval key, supplying the retrieval key to retrieve the high entropy security information that was stored in the password manager, and providing the high entropy security information. The target computer receives the high entropy security information provided by the user computer, and provides access to the target computer when the high entropy security information is verified. The generator computer, the user computer, and the target computer are communicatively decoupled from each other.

Systems and methods are disclosed herein to generate unique high entropy deterministic authentication tokens or passwords derived from user account information and a high entropy random number secured on a user device. Systems and methods can further include a counting variable such as a nonce to generate more than one unique high entropy deterministic authentication token for a single account, for instance, to facilitate updating the authentication token for that account to a new unique authentication token. From the user perspective, systems and methods can be used to provide an authentication token manager and / or password manager, where the user is able to access user accounts via a single user-provided authentication such as a master password or biometric data. Because the tokens / passwords are generated deterministically, they need not be stored by the token / password manager.

An authentication system comprises a browser extension and a password manager application. The browser extension can be configured for execution on a first user device. The browser extension can be configured to display a response code and receive a login credential from a server. The response code can comprise a unique session identifier identifying the browser extension and a user browsing session. The password manager application can be configured for execution on a second user device. The second user device can have a scanner configured to scan the response code. The password manager application can be configured to extract the unique session identifier, parse the unique session identifier into session identifier content, send a portion of the session identifier content to the server, receive an approval from a user of the second user device, and send a notification to the server.

A system for securely accessing a target computer using high entropy security information stored in a password manager including a user computer configured to execute instructions to perform operations including receiving password manager access information and a retrieval key, accessing the password manager using the password manager access information, receiving the high entropy security information provided by a generator computer, storing the high entropy security information in the password manager, in association with the retrieval key, supplying the retrieval key to retrieve the high entropy security information that was stored in the password manager, and providing the high entropy security information. The target computer receives the high entropy security information provided by the user computer, and provides access to the target computer when the high entropy security information is verified. The generator computer, the user computer, and the target computer are communicatively decoupled from each other.

A system and method for protecting user data using a key escrow service. The key escrow service may be hosted by a service provider to integrate Identity Access Management (IAM) solutions, such as Single-Sign-On (SSO) and / or System for Cross-domain Identity Management (SCIM), with a zero-knowledge service, such as a password manager or other service handling sensitive user data. In examples, secure enclave technology may be used to allow the service provider to host and manage the key escrow service without being able to access any cryptographic key used and / or stored within a secure enclave. Accordingly, in some aspects, the service provider may have the ability to store users'secret keys for SSO and sharing keys for SCIM in a trusted, secure storage location without breaking the zero-knowledge principles of the infrastructure.

The present disclosure generally relates to managing passwords. In some examples, a computer system displays an autofill user interface object corresponding to a one-time password generated by the computer system and for use in authenticating a user with a remotely-authenticated service. In some examples, a computer system enters, saves, and submits a new username and a new password created via a password manager to a remotely-authenticated service.

The application provides a kind of ignition management system of hail prevention and rain enhancement rocket and its operating method.The ignition management system of hail prevention and rain enhancement rocket is composed of hardware and software, wherein the hardware part is composed of electronic delay chip, password manager and safety lock; the software part is composed of password management platform, the electronic delay chip is installed inside the hail prevention and rain enhancement rocket, replaces the original ignition module, and the chip code, equipment code and launch password are injected inside; the password manager is used to store and transmit the relevant code information and the state information of hail prevention and rain enhancement rocket; the safety lock obtains the fusion code from the password manager, decrypts the fusion code into chip code, equipment code and launch password according to the agreement, and matches the chip code, equipment code and launch password of the electronic delay chip in the hail prevention and rain enhancement rocket in the launch link.The application can effectively enhance the control ability of artificial weather modification operation and improve the safety of hail prevention and rain enhancement rocket.

Provided is an account information management method using an extension program installed on a web browser, a mobile password manager which is an application program for account information management installed on a mobile device of a user, and an intermediate server communicating with the extension program and the mobile password manager.