Patent ID: 9026788
Filing Date: 2015-05-05
Classification: H04L

Abstract:
1. A method comprising: storing, within a vault account at a vault system, at least one encrypted website credential that is encrypted using an encryption key that is not available to the vault system, wherein the encrypted website credential is for authenticating a user to a third party website; sending executable code to a client device that, upon execution by a processor at the client device, is to: receiving, from the client device, at least one first vault credential to authenticate the user with the vault account; authenticating the first vault credential; determining that the first vault credential is not authentic, comprising: requesting, from the client device and in response to determining that the first vault credential is not authentic, at least one second vault credential to authenticate the user with the vault account, wherein the second vault credential is distinct from the first vault credential; authenticating the second vault credential; receiving, from the client device, a request for the encrypted website credential; retrieving the requested encrypted website credential from the vault account at the vault system; and sending, to the client device, the requested encrypted website credential and at least one form fill parameter in response to successfully authenticating the first vault credential and the second vault credential, wherein the executable code is further to: