Method and apparatus for accessing authentication credentials within a credential vault

Abstract

A method at a computing device, the method including detecting, at the computing device, a trigger that authentication is pending for an application or service; indicating a state of a credential vault via a user interface of the computing device; and when the credential vault is in a locked state, activating an authentication mechanism for the credential vault without changing focus on the user interface for the application or service.

1 . A method at a computing device for managing a credential vault, the method comprising:
 detecting that authentication is pending for an application or service, wherein the application or service is distinct from the credential vault;   determining, by an operating system of the computing device, a state of a credential vault;   when the credential vault is in a locked state,
 activating an authentication mechanism for the credential vault without changing focus on the user interface for the application or service; 
 receiving authentication credentials for the credential vault; 
 verifying the authentication credentials for the credential vault; 
 upon verification of the authentication credentials for the credential vault, providing from the credential vault, authentication credentials for the application or service to the application or service. 
   
     
     
         2 . The method of  claim 1 , wherein the credential vault stores a password for the application or service. 
     
     
         3 . The method of  claim 1 , wherein the credential vault stores a key to enable or launch the application or service. 
     
     
         4 . The method of  claim 1 , wherein detecting that authentication is pending comprises detecting input focus on the user interface into a password entry area. 
     
     
         5 . The method of  claim 1 , wherein detecting that authentication is pending comprises detecting a start of an authentication process for the application or service. 
     
     
         6 . The method of  claim 1 , wherein the authentication mechanism comprises a biometric sensor. 
     
     
         7 . The method of  claim 1 , wherein the authentication mechanism comprises a wireless tag proximity sensor. 
     
     
         8 . The method of  claim 1 , wherein the authentication mechanism comprises a camera. 
     
     
         9 . The method of  claim 1 , wherein verification of input from the authentication mechanism is done within the credential vault. 
     
     
         10 . A computing device comprising:
 a processor; and   a memory for storing instruction code,   wherein the instruction code causes the computing device to:
 detect that authentication is pending for an application or service, 
   wherein the application or service is distinct from the credential vault;
 determine, by an operating system of the computing device, a state of a credential vault; 
 when the credential vault is in a locked state,
 activate an authentication mechanism for the credential vault without changing focus on the user interface for the application or service; 
 receive authentication credentials for the credential vault; 
 verify the authentication credentials for the credential vault; 
 upon verification of the authentication credentials for the credential vault, provide from the credential vault, authentication credentials for the application or service to the application or service. 
 
   
     
     
         11 . The computing device of  claim 10 , wherein the credential vault stores a password for the application or service. 
     
     
         12 . The computing device of  claim 10 , wherein the credential vault stores a key to enable or launch the application or service. 
     
     
         13 . The computing device of  claim 10 , wherein detecting that authentication is pending comprises detecting input focus on the user interface into a password entry area. 
     
     
         14 . The computing device of  claim 10 , wherein detecting that authentication is pending comprises detecting a start of an authentication process for the application or service. 
     
     
         15 . The computing device of  claim 10 , wherein the authentication mechanism comprises a biometric sensor. 
     
     
         16 . The computing device of  claim 10 , wherein the authentication mechanism comprises a wireless tag proximity sensor. 
     
     
         17 . The computing device of  claim 10 , wherein the authentication mechanism comprises a camera. 
     
     
         18 . The computing device of  claim 10 , wherein verification of input from the authentication mechanism is done within the credential vault. 
     
     
         19 . A non-transitory computer readable medium for storing program code for execution on a processor of a computing device, the program code comprising instructions for:
 detecting that authentication is pending for an application or service,   wherein the application or service is distinct from the credential vault;   determining, by an operating system of the computing device, a state of a credential vault;   when the credential vault is in a locked state,
 activating an authentication mechanism for the credential vault without changing focus on the user interface for the application or service; 
 receiving authentication credentials for the credential vault; 
 verifying the authentication credentials for the credential vault; 
 upon verification of the authentication credentials for the credential vault, providing from the credential vault, authentication credentials for the application or service to the application or service.