Cross-Device Credential Vault via Secure Channel Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing credential management solutions fail to securely store and retrieve user credentials for secure websites across multiple devices, as they often require manual entry and are susceptible to third-party interception.
Innovation Solution
A system where a browser device stores and executes a browser application, while a separate mobile device maintains a credential vault, allowing secure communication and authentication to retrieve and auto-fill user credentials for secure website access, preventing third-party interception.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a portable device-based password manager securely stores credentials on a single device, then security is improved, but portability and ease of access from multiple devices deteriorates
Solution Approach 1:
The patent introduces a secure channel as an intermediary communication path between the browser device and mobile device. This secure channel acts as a mediator that enables credential retrieval across devices while maintaining security, resolving the contradiction between single-device security and multi-device portability
Solution Approach 2:
The system segments credential management into two separate components: a mobile device that stores credentials securely (credential vault) and a browser device that retrieves and uses them. This segmentation allows each device to have specialized functions, enabling both secure storage and cross-device accessibility
2Reliability
If manual entry of credentials is required to access the password vault, then security against automated attacks is improved, but ease of operation deteriorates
Solution Approach 1:
The browser application automatically performs credential retrieval by initiating discovery procedures, establishing secure channels, and requesting credentials from the mobile device without requiring manual user intervention. This self-service automation eliminates manual entry while maintaining security through automated secure communication protocols
3Ease of operation
If credentials are transmitted through a browser interface, then ease of access to secure websites is improved, but susceptibility to third-party interception worsens
Solution Approach 1:
The mobile device acts as an intermediary that directly transmits credentials to the browser application through a secure channel, bypassing traditional browser interface transmission paths. This intermediary approach eliminates exposure to key-stroke loggers and shoulder-surfing attacks that target conventional browser credential entry interfaces
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
Embodiments are provided for managing user credentials that enable access to secure websites. According to certain aspects, a browser device connects (230) to a website server that hosts a secure website. The browser device initiates (236) a credential request and enters (238) a discovery routine with a mobile device. After establishing (240) a secure channel with the mobile device, the browser device sends (248) an identification of the secure website to the mobile device, which identifies (250) corresponding user credentials and sends (252) the user credentials to the browser device. The browser device populates (254) a login page with the user credentials and accesses (256) the secure website.