Logmein, Inc.

Kornel Pal

Gyula Magyar

Gyorgy Hevizi

Csaba Mezei

Joseph Louis Siegrist

Robert Billingslea

In a first embodiment, the 'one tap' operation of this disclosure enables a user having a mobile device 'one tap' mobile application (or &#x201c;app&#x201d;) to log-in to the user's desktop or laptop computer by bringing the user's device in physical proximity to the computer and, while in such proximity, accepting a push notification that is received on the mobile device. In a second embodiment, the user uses the &#x201c;one tap&#x201d; functionality to access a cloud-based account that has been set up for the user on a third party web application (e.g., SalesForce.com). The technique seamlessly integrates with third party websites using well-known protocols (e.g., SAML2), and it enables secure cross-origin resource sharing in a highly secure, reliable and available manner. Still another aspect of this disclosure is an enhanced proximity detection routine that is used to facilitate the one tap function when the user's mobile device is moved into proximity with the computer.

Mobile device access to a protected account associated with a website

A technique for providing federated login to a password vault generates a master password for a federated user, renders the master password as multiple parts, and stores the key parts in separate entities. After successful authentication with an identity provider (IDP), a user's local machine receives the password parts and combines them to recreate the master password. The local machine then applies the master password to decrypt the password vault.

Federated login for password vault

Mobile device access to a protected machine

Proximity detection for mobile device access to protected resources

A host machine has a web browser. A user of the host machine also has a mobile device. A time-based, one-time password (TOTP) authentication scheme leverages a plug-in associated with the browser to automatically inject a received TOTP code into an element of an HTML-based TOTP authentication page, and to programmatically submit the HTML form (e.g., by mimicking the 'click to submit' button on the TOTP form). Typically, the TOTP code is obtained following a successful completion of a push notification interaction between a cloud service, which stores TOTP shared secrets that are used to generate the TOTP codes, and the user of the mobile device.

Cross-site, TOTP-based two factor authentication

Growing community of inventors

Budapest, Hungary

Kornel Pal