Patent ID: 9117061
Filing Date: 2015-08-25
Classification: G06F,H04L

Abstract:
1. A method for securing authentication credentials on a client device comprising: detecting, on the client device, display of an authentication form in a browser window associated with a first flow to a target server, the authentication form requiring input of one or more authentication credentials associated with a user of the client device in order to grant to the client device access to one or more resources; accessing, on the client device, data corresponding to the one or more authentication credentials required by the authentication form; submitting, to the target server, the same one or more authentication credentials required by the authentication form associated with the first flow via a second flow to the target server in order to bypass the first flow without providing the authentication credentials via the first flow, wherein the second flow is not associated with the browser window such that the submission of the authentication credentials is not subject to interception by one or more browser plug-ins; and accessing, on the client device, the one or more resources without providing the one or more authentication credentials to the authentication form in the browser window associated with the first flow.