US 12,309,151 B2
Credential storage manager for protecting credential security during delegated account use
Yona Ju, San Jose, CA (US); and Fun-Chen Jou, San Francisco, CA (US)
Assigned to PAYPAL, INC., San Jose, CA (US)
Filed by PayPal, Inc., San Jose, CA (US)
Filed on Jun. 29, 2021, as Appl. No. 17/362,687.
Application 17/362,687 is a continuation of application No. 16/237,551, filed on Dec. 31, 2018, granted, now 11,050,749, issued on Jun. 29, 2021.
Prior Publication US 2021/0328990 A1, Oct. 21, 2021
Int. Cl. H04L 29/06 (2006.01); G06Q 20/36 (2012.01); H04L 9/40 (2022.01)
CPC H04L 63/0884 (2013.01) [G06Q 20/3674 (2013.01); H04L 63/0876 (2013.01); H04L 63/0892 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
a non-transitory memory storing instructions; and
one or more hardware processors coupled to the non-transitory memory and configured to read the instructions from the non-transitory memory to cause the system to perform operations comprising:
determining an authorization for a use of an account by a first user, wherein the account is associated with a second user;
receiving a request for the use of the account in an application on the system with a transaction processing application of an online service provider;
fetching an account credential for the account from the online service provider associated with the account;
responsive to the request, entering the account credential to an authentication process for the account in the application while preventing viewing of the account credential by the first user;
providing device data for a device fingerprint to the online service provider, wherein the device fingerprint is usable to track the use of the account in the application during a login session in the application;
monitoring, using the device fingerprint, the login session of the account in the application for one or more transactions processed using the account with the transaction processing application of the online service provider;
enforcing, based on the device data and the monitoring, an authorization condition during the login session for processing the one or more transactions in the application using the account, wherein the authorization condition associated with the use of the account for one or more transactions; and
logging out of the account in the application automatically on an expiration or a violation of the authorization condition for the authorization.