Maintaining user authentications with common trusted devices

Patent metadata

Field	Value
Publication number	US-10511600-B2
Application number	US-201815865063-A
Country	US
Kind code	B2
Filing date	Jan 8, 2018
Priority date	Sep 17, 2015
Publication date	Dec 17, 2019
Grant date	Dec 17, 2019

Abstract

Various embodiments are generally directed to an apparatus, method, and other techniques to maintain user authentications with common trusted devices. If a user is in possession of a first computing device (e.g., a smartphone), an unlocked state of the first trusted device is maintained if the user is using a nearby trusted device (e.g., a computer) within a certain amount of time. If the first trusted device is in a pocket or other container, a longer span of time is granted to the user to register an on-body state.

First claim

What is claimed is:

1. An apparatus for maintaining a user authentication status comprising:
a processor circuit; and
memory comprising instruction that when executed by the processor circuit cause the processor circuit to:
determine whether a trusted device has received user input, from a user, within a screen-lock-timeout time of the apparatus;
determine whether the apparatus is in an on-body state within a timespan based at least in part on data received from an on-body detection sensor;
authenticate the user to the apparatus;
transition a display of the apparatus from a locked state to an unlocked state based on authentication of the user to the apparatus; and
maintain the unlocked state of the display of the apparatus for a length of time greater than the screen-lock-timeout time based on a determination that the trusted device has received user input within the screen-lock-timeout time of the apparatus and a determination that the apparatus is in the on-body state within the timespan.

2. The apparatus of claim 1 , comprising a network interface, the network interface comprising a direct network link between the apparatus and the trusted device or an indirect network link comprising a network device.

3. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor circuit cause the processor circuit to determine that the apparatus is not in the on-body state based at least in part on data received from the on-body detection sensor and, thereafter, to transition the display of the apparatus from the unlocked state to the locked state.

4. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor circuit cause the processor circuit to develop the screen-lock-timeout time or the timespan with machine learning.

5. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor circuit cause the processor circuit to determine whether the apparatus is disposed within a container based at least in part on data received from an in-container detection sensor and distinguish the apparatus being disposed within the container from the apparatus being disposed face-down on a surface.

6. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor circuit cause the processor circuit to determine that the apparatus and trusted device are within a distance of each other and to transition the display of the apparatus or trusted device from a locked state to an unlocked state.

7. The apparatus of claim 6 , the distance comprising a first distance in a trusted environment and a second distance shorter than the first distance in an untrusted environment.

8. The apparatus of claim 1 , the memory comprising instructions that when executed by the processor circuit cause the processor circuit to transition the display of the apparatus from the unlocked state to the locked state if a distance between the apparatus and the trusted device exceeds a threshold, if an acceleration of the apparatus exceeds a threshold, or if a network connection between the apparatus and the trusted device is lost.

9. A computer-implemented method for maintaining a user authentication status comprising:
authenticating a user to a computing device;
transitioning a display of the computing device from a locked state to an unlocked state based on authentication of the user to the computing device;
determining that a trusted device in electronic communication with the computing device has received input from the user within a screen-lock-timeout time of the computing device;
determining that the computing device is in an on-body state within a timespan based at least in part on data received from an on-body detection sensor; and
maintaining the unlocked state of the display of the computing device for a length of time greater than the screen-lock-timeout time based on the trusted device receiving input from the user within the screen-lock-timeout time of the computing device and the computing device being in the on-body state within the timespan.

10. The computer-implemented method of claim 9 , further comprising communicating between the computing device and trusted device using a network interface comprising a direct network link between the computing device and the trusted device or an indirect network link comprising a network device.

11. The computer-implemented method of claim 9 , further comprising determining that the computing device is not in the on-body state based at least in part on data received from the on-body detection sensor and, thereafter, transitioning the display of the computing device from the unlocked state to the locked state.

12. The computer-implemented method of claim 9 , comprising developing the screen-lock-timeout time or the timespan with machine learning.

13. The computer-implemented method of claim 9 , further comprising distinguishing the on-body state from the computing device being disposed face-down on a surface.

14. The computer-implemented method of claim 9 , further comprising determining that the computing device and trusted device are within a distance of each other and transitioning the display of the computing device or trusted device from a locked state to an unlocked state.

15. The computer-implemented method of claim 14 , the distance comprising a first distance in a trusted environment and a second distance shorter than the first distance in an untrusted environment.

16. The computer-implemented method of claim 9 , further comprising transitioning the display of the computing device from the unlocked state to the locked state if a distance between the computing device and the trusted device exceeds a threshold, if an acceleration of the computing device exceeds a threshold, or if a network connection between the computing device and the trusted device is lost.

17. A non-transitory machine-readable storage medium comprising instructions that, when executed by a processing device, cause the processing device to:
authenticate a user to a computing device;
transition a display of the computing device from a locked state to an unlocked state based on authentication of the user to the computing device;
determine that a trusted device has received input from the user within a screen-lock-timeout time of the computing device;
determine that the computing device is in an on-body state within a timespan based at least in part on data received from an on-body detection sensor; and
maintain the unlocked state of the display of the computing device for a length of time greater than the screen-lock-timeout time based on the trusted device receiving input from the user within the screen-lock-timeout time of the computing device and the computing device being in the on-body state within the timespan.

18. The non-transitory machine-readable storage medium of claim 17 , the instructions further comprising communicating between the computing device and trusted device using a network interface comprising a direct network link between the computing device and the trusted device or an indirect network link comprising a network device.

19. The non-transitory machine-readable storage medium of claim 17 , the instructions further causing the processing device to determine that the computing device is not in the on-body state based at least in part on data received from the on-body detection sensor and, thereafter, transition the display of the computing device from the unlocked state to the locked state.

Assignees

• Intel Corp

Inventors

• Sheller Micah J
• Huang Yonghong
• Bhasker Narjala P
• Martin Jason
• Cornelius Cory

Classifications

• G06F21/305

  by remotely controlling device operation · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/0492

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title

• H04W12/06

  Authentication · CPC title

• G06F3/017

  Gesture based interaction, e.g. based on a set of recognized hand gestures (interaction based on gestures traced on a digitiser G06F3/04883) · CPC title