Patent ID: 9596223
Date: 2017-03-14
CPC Classifications: H04L,H04W

Claim:
1. A system, comprising: a set of hardware processors each having memory associated therewith; a mobile device authenticator app executed by a first processor of the set; a network-accessible cloud service executed by a second processor of the set and having a data repository; a browser plug-in adapted to be executed by a third processor of the set in an end user computing system distinct from the mobile device and the network-accessible cloud service; the mobile device authenticator app operative to receive a scan of a first code from a TOTP authentication setup page at each site of a plurality of sites, to generate a TOTP shared secret per site based on the scan of the first code, and to forward to the cloud service the TOTP shared secret for each site; the cloud service operative to store for the user the TOTP shared secret for each site; the browser plug-in operative to detect display of a TOTP authentication page associated with a site, the site being one of a plurality of sites for which a TOTP shared secret has been obtained by the authenticator app; the browser plug-in being further operative to respond to detection of the display of the TOTP authentication page to issue to the cloud service a request to initiate a push authentication interaction between the cloud service and the authenticator app; the cloud service further operative in response to receipt of a push authentication interaction request to send a push notification to the authenticator app to determine whether TOTP-login to the site should proceed; the mobile device authenticator app further operative in response to receipt of a confirmation of the push notification to notify the cloud service that TOTP login should proceed; the cloud service further operative in response to receipt of the confirmation to use the TOTP shared secret for the site to generate a TOTP code, and to forward the TOTP code generated to the browser to enable the TOTP-login to be completed programmatically by the browser plug-in; and the browser plug-in further operative to respond to receipt of a TOTP code generated by the cloud service upon a successful completion of the push authentication interaction to automatically inject the TOTP code into the TOTP authentication page and activate a login attempt from the TOTP authentication page, the TOTP code being generated dynamically after detection by the browser plug-in of the TOTP authentication page.