Propagating authentication between terminals

Patent metadata

Field	Value
Publication number	US-2016006745-A1
Application number	US-201414652181-A
Country	US
Kind code	A1
Filing date	Jan 14, 2014
Priority date	Jan 28, 2013
Publication date	Jan 7, 2016
Grant date	—

Abstract

Propagating authentication between terminals connected to a server having identification information and user information for the terminals. The terminal receives identification information, user information, location information and a login status from a first terminal and a second terminal in response to a predetermined impact between the terminals, or the terminals coming within a predetermined distance of each other, the login status of the terminals being either authenticated or unauthenticated. The server then authenticates the second terminal in response to the users of the first terminal matching some or all of the users of the second terminal based on the identification and user information, in response to the terminals being located within a predetermined distance of each other, and in response to the first terminal being authenticated and the second terminal being unauthenticated on the basis of the login status.

First claim

1 . A method for propagating authentication between a plurality of terminals connected to a server via a network, the server having identification information for each of the plurality of terminals and user information for the terminals, the method comprising:
receiving, by the server, identification information, user information, location information and a login status from each of a first terminal and a second terminal in response to a predetermined impact between the first terminal and the second terminal, or the first terminal and the second terminal coming within a predetermined distance of each other, the login status of the terminals being either authenticated or unauthenticated; and authenticating, by the server, the second terminal in response to the users of the first terminal matching some or all of the users of the second terminal on the basis of the identification information and user information, in response to the first terminal and the second terminal being located within a predetermined distance of each other on the basis of the location information, and in response to the first terminal being authenticated and the second terminal being unauthenticated on the basis of the login status.

2 . The method according to claim 1 , further comprising:
in response to authenticating the second terminal, maintaining, by the server, the authentication of a moving terminal and rendering a stationary terminal unauthenticated in response to one of either the first terminal or the second terminal moving and the other terminal remaining stationary.

3 . The method according to claim 1 , further comprising:
in response to authenticating the second terminal, rendering, by the server, the first terminal and the second terminal unauthenticated in response to both the first terminal and the second terminal moving apart from each other by a predetermined distance.

4 . The method according to claim 1 , further comprising:
in response to authenticating the second terminal, maintaining, by the server, the authentication of the first terminal and the second terminal in response to the first terminal and the second terminal being close to each other or moving in tandem.

5 . The method according to claim 2 , further comprising:
in response to maintaining the authentication of the moving terminal and deauthenticating the stationary terminal, rendering, by the server, the moving terminal unauthenticated in response to the stationary terminal being authenticated by the input of authentication information into the stationary terminal.

6 . The method according to claim 1 , wherein receiving further comprises:
receiving acceleration sensor information from each of the first terminal and the second terminal in response to a predetermined impact between the first terminal and the second terminal.

7 . The method according to claim 1 , wherein the impact occurs when the first terminal and second terminal come into contact or collide with each other.

8 . The method according to claim 1 , wherein the predetermined distance is the range in which the second terminal can be detected by the first terminal using radio frequency identification (RFID), infrared or ultrasound.

9 . The method according to claim 1 , wherein the predetermined distance is the range in which the first terminal and the second terminal are able to communicate with each other via a wireless communication device.

10 . The method according to claim 1 , wherein the predetermined distance is the range in which the first terminal can read a barcode displayed on a screen of the second terminal.

11 . The method according to claim 10 , wherein receiving further comprises:
receiving, from the first terminal, bar code information displayed on a screen of the second terminal and read by the first terminal, and receiving, from the second terminal, the barcode information displayed on the screen of the second terminal; and wherein authenticating further comprises: authenticating the second terminal in response to the barcode information received from the first terminal matching the barcode information received from the second terminal.

12 . The method according to claim 1 , wherein the users of the first terminal match some or all of the users of the second terminal, and the user of the first terminal is the same as the user of the second terminal.

13 . The method according to claim 1 , wherein the users of the first terminal match some or all of the users of the second terminal, and the user of the first terminal and the user of the second terminal belong to the same group.

14 . The method according to claim 1 , wherein authenticating further comprises:
sending information from the server to the second terminal when the server has information for authenticating the second terminal, or sending information for decrypting encrypted information from the server to the second terminal when the second terminal has encrypted information for authenticating the second terminal.

15 . The method according to claim 1 , further comprising:
in response to authenticating the second terminal, rendering, by the first terminal unauthenticated in response to the first terminal becoming unable to send location information or login status information to the server.

16 . The method according to claim 1 , further comprising:
in response to the first terminal no longer being able to send location information and login status information to the server while the first terminal is moving, rendering, by the first terminal, the first terminal unauthenticated.

17 . The method according to claim 1 , further comprising:
in response to the second terminal becoming unable to send location information or login status information to the server, rendering, by the second terminal, the second terminal unauthenticated.

18 . The method according to claim 1 , further comprising:
in response to the second terminal no longer being able to send location information and login status information to the server while the second terminal is moving, rendering, by the second terminal, the second terminal unauthenticated.

19 - 20 . (canceled)

Assignees

• IBM

Inventors

• Furuichi Sanehiro
• Tashiro Takahito

Classifications

• H04L63/105 Primary

  Multiple levels of security · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W12/06

  Authentication · CPC title