FIELD

Embodiments of the present disclosure generally relate to cybersecurity and more particularly to methods and systems to facilitate two-factor authentication processes.

BACKGROUND OF THE INVENTION

Cybersecurity is vital to ensuring protection of individuals' personal information. With on-line banking, shopping, investing, bill pay, and the like, sensitive individual information is now conveyed through the internet of things (IoT) often on a daily basis. Similarly, companies desire third party vendors and independent contractors to have access to company files and to be part of a company email network to ensure control and protect information provided to these outside parties, and to facilitate business.

As the exchange of information over the IoT increases, nefarious individuals attempting to steal individual and company information similarly has increased. Hackers utilize methods such as phishing, brute force, cross-site scripting, malware, and the like, to obtain personal and company information causing damage, embarrassment, and harm.

To combat these measures by hackers, increased security measures have been developed. These measures include requiring passwords of predetermined lengths and utilizing symbols and numbers, QR codes, security questions and the like to make hacking more difficult. Another method utilized to two-factor authentication. In two factor authentication processes, a user provides an initial secret to a network resource, such as a webpage, and this information is passed to an authentication service. The authentication service then generates and sends an authentication secret to the user to provide to the network resource. Often a secret code, such as a randomly generated six-digit code, is provided that expires after a pre-determined period of time. This secret code is then utilized to gain access to the network resource.

However, as the amount of network resources that require two-factor authentication increases, difficulties increase for a user. Specifically, between bank accounts, email accounts, work accounts, vendor accounts, financial accounts, shopping accounts, and the like, an individual can easily have five to ten or more account secrets that need to be utilized to access all of the different on-line resources. When each of these resources has a different policy and procedure for generating the initial secret, an individual can have numerous secrets that must be remembered and associated with the individual network resources.

Further, while auto population of information can combat, auto population of secrets poses its own security problems. Additionally, when a new device is utilized, remembering all of the secrets is extremely difficult, causing significant loss of time and mounting frustrations when attempting to access desired information. This can lead to changing of password and username procedures that are equally time consuming and frustrating.

SUMMARY

In accordance with an embodiment a device is provided including a processor and an input to collect credential related content including a first network resource identifier related to a first one of multiple network resources. The user content also includes a master password that is associated with the first network resource identifier and that is associated with network resource identifiers for a remainder of the multiple network resources. The device also includes a user interface, and a local storage medium to store program instructions accessible by the processor. Responsive to execution of the program instructions, the processor receives the user content including the master password and the first network resource identifier, and converts the master password and the first network resource identifier into a first hash code. In addition, the processer sends the first hash code to an authentication service to receive a temporary credential token from the authentication service in connection with the first hash code. The processor also sends the temporary credential token to the first one of multiple network resources, the temporary credential token to grant access to a user account on the first one of multiple network resources.

In accordance with another embodiment, a computer implemented method, is provided where under control of one or more processors programmed with specific executable instructions the method includes collecting credential related content including a first network resource identifier related to a first one of multiple network resources, the credential related content further including a master password that is associated with the first network resource identifier and that is associated with network resource identifiers for a remainder of the multiple network resources. The method also includes converting the master password and the first network resource identifier into a first secret code and sending the first secret code to a first authentication service.

In accordance with yet another embodiment, a computer program product is provided that includes a non-signal computer readable storage medium comprising computer executable code. The computer executable code collects credential related content including a first network resource identifier related to a first one of multiple network resources on a first computing device, the credential related content further including a master password that is associated with the first network resource identifier and that is associated with network resource identifiers for a remainder of the multiple network resources. The computer executable code also converts the master password and the first network resource identifier into a first secret code in the first computing device and sends the first secret code to a first authentication service.

