Secure portable store for security skins and authentication information

摘要

A security component may be associated with a network-enabled application. The security component may access a secure store, which may include customization information, which may include one or more graphical user interface customizations defined by a user, and one or more instances of card information. The card information may specify how to authenticate a user's credentials to access a relying party (e.g., web site). The security component may initiate the display of an embedded region of a window drawn by the network-enabled application. At least a part of the appearance of the embedded region of the window may be defined according to the customization information and not by the relying party. The embedded region may provide a user interface for determining user authentication credentials. The customization information and the one or more instances of card information may not be accessible to the relying party.

主权项

1. A method comprising:
initiating, by a security component, a display of an embedded region within a document drawn by a network-enabled application, responsive to an attempt by the network-enabled application to access restricted content located at a relying party, the security component invoked based on the relying party being trusted and not invoked based on the relying party being untrusted; drawing the embedded region within the document such that the embedded region comprises an integral part of content within the document, the embedded region being drawn based on one or more user-defined graphical user interface customizations that are usable to customize the display of the embedded region when the relying party is trusted and which were defined prior to the attempt to access the restricted content; accessing a secure store to identify one or more identity cards to display in the embedded region, the one or more identity cards representing identity information that is associated with a user and the relying party; and altering an appearance of a display of at least a portion of the document that is displayed outside of the embedded region in response to user interaction within the embedded region.