Nortonlifelock Inc.

Gen Digital Inc.

Mahesh Kamsala

SriHarsha Angara

Venkadesan Marimuthu

Adam Stiles

Richard Amancio

Aditya Subhash Sumant

Arun Ganesan

Lisa Kurahashi

Rahuraman Kaliyaperumal

ARamachandra Reddy

The disclosed computer-implemented method for protecting the security of authentication credentials utilized to access sensitive data during online transactions may include (i) registering, utilizing a set of cryptographic keys, a proxy service with a third-party service provider of sensitive online transactions, (ii) identifying user credentials for accessing the third-party service provider, (iii) encrypting the user credentials utilizing the set of cryptographic keys, (iv) sending the encrypted user credentials in a request for authentication tokens, (v) accessing, responsive to the request, the authentication tokens for sharing with an access manager of the user credentials, and (vi) performing a security action that protects against a data privacy invasion by utilizing the authentication tokens to validate a user requesting access to a website hosted by the third-party service provider without the user credentials. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for protecting the security of authentication credentials utilized to access sensitive data during online transactions

Protecting PII submitted through a browser. In some embodiments, a method may include detecting multiple PII of a user submitted to multiple organization websites through a browser. The method may also include encrypting each of the PII. The method may further include storing each of the encrypted PII along with an identifier of the organization website to which the PII was submitted. The method may also include receiving a request to view the PII along with an indicator of the organization website to which the PII was submitted. The method may further include retrieving each of the encrypted PII along with the identifier of the organization website to which the PII was submitted. The method may also include decrypting each of the encrypted PII. The method may further include displaying each of the PII along with the indicator of the organization website to which the PII was submitted.

Protecting personally identifiable information submitted through a browser

The disclosed computer-implemented method for password breach monitoring and notification may include (i) detecting a set of authentication credentials for a user, (ii) generating a one-way hash for a password associated with the authentication credentials, (iii) selecting a hash prefix including a subset of data in the hash, (iv) sending the hash prefix to a backend service for matching with a set of hash suffixes associated with known compromised passwords, (v) determining that a breach has occurred based on the password associated with the authentication credentials being compromised when the hash prefix matches a hash suffix in the set of hash suffixes, and (vi) performing a security action that protects against an additional breach associated with the compromised password. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for password breach monitoring and notification

Growing community of inventors

Cypress, CA, United States of America

Mahesh Kamsala