Patent ID: 9450941
Filing Date: 2016-09-20
CPC Classification: G06F,H04L

Claim Text:
1. A non-transitory computer-readable medium embodying a program executable in at least one computing device, the program, when executed, causing the at least one computing device to at least: store account data including a plurality of security credentials associated with a plurality of network sites for a user, the account data being stored in an encrypted form; obtain a request for the account data from a client, the request specifying a security credential for accessing the account data; determine whether the client corresponds to a preauthorized client based at least in part on a network address of the client or a client-identifying token included in the request; send, responsive to the client corresponding to the preauthorized client and responsive to the security credential being valid, the account data to the client; obtain, responsive to the client not corresponding to the preauthorized client, a supplemental credential from the client; send, responsive to the supplemental credential being valid and responsive to the security credential being valid, the account data to the client; obtain a second request to use one of a plurality of account data recovery mechanisms from the client; determine, on a per-client basis, a subset of the plurality of account recovery mechanisms available to the client; enable use of the subset of the account recovery mechanisms available to the client; and disable use of those of the plurality of account recovery mechanisms excluded from the subset of the account recovery mechanisms.