Device authentication

Patent metadata

Field	Value
Publication number	US-2018317085-A1
Application number	US-201715583897-A
Country	US
Kind code	A1
Filing date	May 1, 2017
Priority date	May 1, 2017
Publication date	Nov 1, 2018
Grant date	—

Abstract

Methods, systems and computer readable media for multifactor authentication and induction by accreditation for wearable device authentication in a network are described.

First claim

What is claimed is:

1 . A method comprising:
determining a user signature based on a sensed parameter of a user, wherein the sensed parameter is obtained via sensor coupled to a first device; determining a proximity parameter based on a proximity of the first device to the user; generating a device signature based on the user signature and the proximity parameter; generating an access claim based on the user signature and the proximity parameter; establishing a connection between the first device and a second device; providing a time-based access token from the first device to the second device; generating an induction token at the second device, wherein the induction token is based on the time-based access token; and providing the induction token to an authentication system in order to authenticate the second device and provide access to an external resource for the second device.

2 . The method of claim 1 , wherein the proximity parameter includes an indication of whether the first device is being worn by the user.

3 . The method of claim 1 , wherein the first device and the second device are both wearable devices.

4 . The method of claim 1 , wherein the first device and the second device are worn by a same user.

5 . The method of claim 1 , further comprising:
providing the access claim from the first device to the authentication system; and when the first device is authenticated by the authentication system, providing the time-based access token from the authentication system to the first device.

6 . The method of claim 1 , further comprising:
terminating access to the external resource for the second device when the first device loses a connection with the authentication system or when the proximity parameter becomes null.

7 . A system comprising:
one or more processors coupled to a nontransitory computer readable medium having stored thereon on software instructions that, when executed by the one or more processors, cause to perform operations including:
determining a user signature based on a sensed parameter of a user, wherein the sensed parameter is obtained via sensor coupled to a first device;
determining a proximity parameter based on a proximity of the first device to the user;
generating a device signature based on the user signature and the proximity parameter;
generating an access claim based on the user signature and the proximity parameter;
establishing a connection between the first device and a second device;
providing a time-based access token from the first device to the second device;
generating an induction token at the second device, wherein the induction token is based on the time-based access token; and
providing the induction token to an authentication system in order to authenticate the second device and provide access to an external resource for the second device.

8 . The system of claim 7 , wherein the proximity parameter includes an indication of whether the first device is being worn by the user.

9 . The system of claim 7 , wherein the first device and the second device are both wearable devices.

10 . The system of claim 7 , wherein the first device and the second device are worn by a same user.

11 . The system of claim 7 , wherein the operations further comprise:
providing the access claim from the first device to the authentication system; and when the first device is authenticated by the authentication system, providing the time-based access token from the authentication system to the first device.

12 . The system of claim 7 , further comprising:
terminating access to the external resource for the second device when the first device loses a connection with the authentication system or when the proximity parameter becomes null.

13 . A nontransitory computer readable medium having stored thereon software instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:
determining a user signature based on a sensed parameter of a user, wherein the sensed parameter is obtained via sensor coupled to a first device; determining a proximity parameter based on a proximity of the first device to the user; generating a device signature based on the user signature and the proximity parameter; generating an access claim based on the user signature and the proximity parameter; establishing a connection between the first device and a second device; providing a time-based access token from the first device to the second device; generating an induction token at the second device, wherein the induction token is based on the time-based access token; and providing the induction token to an authentication system in order to authenticate the second device and provide access to an external resource for the second device.

14 . The nontransitory computer readable medium of claim 13 , wherein the proximity parameter includes an indication of whether the first device is being worn by the user.

15 . The nontransitory computer readable medium of claim 13 , wherein the first device and the second device are both wearable devices.

16 . The nontransitory computer readable medium of claim 13 , wherein the first device and the second device are worn by a same user.

17 . The nontransitory computer readable medium of claim 13 , wherein the operations further comprise:
providing the access claim from the first device to the authentication system; and when the first device is authenticated by the authentication system, providing the time-based access token from the authentication system to the first device.

18 . The nontransitory computer readable medium of claim 13 , further comprising:
terminating access to the external resource for the second device when the first device loses a connection with the authentication system or when the proximity parameter becomes null.

Assignees

• Avaya Inc

Inventors

• Gujjar Pratik Ashwath
• Hegde Vignaraj

Classifications

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W12/08

  Access security · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04W12/06 Primary

  Authentication · CPC title