Networked device authentication, pairing and resource sharing

Patent metadata

Field	Value
Publication number	US-10104183-B2
Application number	US-82098110-A
Country	US
Kind code	B2
Filing date	Jun 22, 2010
Priority date	Jun 22, 2010
Publication date	Oct 16, 2018
Grant date	Oct 16, 2018

Abstract

A system and method are disclosed for pairing computing devices using an authentication protocol that allows an initiating computing device to gain access to a secure, encrypted network of a target computing device.

First claim

We claim:

1. A method of pairing a first computing device to a second computing device, comprising:
a) receiving an indication to pair the first computing device with the second computing device, said indication based on a contextual circumstance defined for the first and second computing devices, said indication to pair the first computing device with the second computing device generated automatically upon an occurrence of the contextual circumstance without a user initiating the indication to pair, the contextual circumstance comprising detecting concurrent instances of the same application running on the first and second computing devices, wherein said receiving further comprises receiving an indication of parameters to be associated with the pairing of the first computing device with the second computing device, the parameters including an access control list specifying at least one of: types of computing devices allowed to pair with one of the first computing device or the second computing device, identifications of computing devices allowed to pair with one of the first computing device or the second computing device, or user identities allowed to pair with one of the first computing device or the second computing device;
b) negotiating the pairing of the first computing device with the second computing device, the negotiating including receiving an identification of at least one of the user and the first computing device and receiving an authentication authenticating an association of the user with the first computing device;
c) granting the first computing device access to secure resources available to the second computing device if the identification and authentication of said step b) verify an association between the user and the first computing device, wherein content accessible via the secure resources is displayed via a user interface that is divided between the first computing device and the second computing device; and
d) denying the first computing device access to secure resources available to the second computing device if the identification and authentication of said step b) fail to verify an association between the user and the first computing device.

2. The method of claim 1 , wherein the first computing device is a mobile computing device and the second computing device is a public terminal having a connection to a backend server with secure user records, said step a) of receiving the indication comprises receiving an indication that the first computing device was bumped against the second computing device, the method further comprising accessing and displaying at least some the secure user records by the mobile computing device.

3. The method of claim 1 , further comprising receiving an indication of a gesture performed with the first computing device in combination with the indication to pair the first computing device with the second computing device.

4. The method of claim 1 , communications between the first and second computing devices in said steps b) and c) taking place directly between the first and second computing devices via at least one of: Bluetooth communication, infrared communications, radiofrequency communications and near field communications.

5. The method of claim 1 , communications between the first and second computing devices in said steps b) and c) taking place indirectly between the first and second computing devices via an intermediary through a network connection between the first computing device, the second computing device and the intermediary.

6. The method of claim 1 , further comprising receiving an indication of restrictions on the pairing and denying the first computing device access to the secure resources available to the second computing device if the restrictions are not satisfied.

7. The method of claim 1 , said authentication provided by providing a fingerprint of the user.

8. A method of pairing a first computing device to a second computing device, comprising:
detecting different instances of the same software application running on the first and second computing devices, the software application not directed to pairing devices;
receiving an indication to pair the first computing device with the second computing device based on the detection of different instances of the same software application running on the first and second computing devices;
identifying parameters for pairing the first computing device with the second computing device, wherein the parameters include an access control list specifying at least one of: types of computing devices allowed to pair with one of the first computing device or the second computing device, identifications of computing devices allowed to pair with one of the first computing device or the second computing device, or user identities allowed to pair with one of the first computing device or the second computing device;
receiving a request from the first computing device to the second computing device for the first computing device to pair with the second computing device, the request from the first computing device including both identification and authentication information relating to the first computing device and a user of the first computing device; and
granting the first computing device access to secure resources available to the second computing device if the identification and authentication information satisfies the parameters for pairing, wherein content accessible via the secure resources is displayed via a user interface that is divided between the first computing device and the second computing device.

9. The method of claim 8 , wherein receiving the indication is based on the user searching for another computing device to pair with.

10. The method of claim 8 , further comprising decaying a pairing between the first and second computing devices upon detection of one or more predefined termination indicators comprising at least one of:
an owner of the second computing device indicating that the pairing is to terminate upon passage of a predetermined period of time;
an indication that the pairing is to terminate if a distance between the first and second computing devices exceeds a threshold distance;
an indication that the pairing is to terminate if an idle period of no communication between the first and second computing devices exceeds some predetermined period of time.

11. The method of claim 8 , the second computing device comprising a public terminal associated with a secure server, the secure server having secure information relating to the user of the first computing device.

12. The method of claim 11 , the first computing device comprising a mobile telephone, wherein the request is received based on bumping the mobile phone against the public terminal or bumping the mobile phone in an area adjacent to the public terminal.

13. A method of pairing a first computing device to a second computing device, comprising:
receiving an indication to pair the first computing device with the second computing device, said indication generated automatically, without user action, based upon detecting concurrent instances of a same application running on the first and second computing devices;
negotiating the pairing of the first computing device with the second computing device, the negotiating including receiving an identification of at least one of a user of the first computing device or the first computing device and determining that the identification is included on an access control list associated with a session of the application running on the first and second computing devices, wherein the access control list specifies at least one of: identi

Assignees

• Bathiche Steven N
• Meistrich Jason Alexander
• Hinckley Kenneth
• Multerer Boyd Cannon
• Cox Anthony
• Saretto Casare John
• Microsoft Technology Licensing Llc

Inventors

• Bathiche Steven N
• Meistrich Jason Alexander
• Hinckley Kenneth
• Multerer Boyd Cannon
• Cox Anthony
• Saretto Casare John

Classifications

• H04W12/06

  Authentication · CPC title

• H04L67/38

  Electricity · mapped topic

• H04L67/18

  Electricity · mapped topic

• H04L67/148

  Migration or transfer of sessions · CPC title

• H04L67/16 Primary

  Electricity · mapped topic