Mechanism for pairing user's secondary client device with a data center interacting with the users primary client device using QR codes

Patent metadata

Field	Value
Publication number	US-9497293-B2
Application number	US-201414220035-A
Country	US
Kind code	B2
Filing date	Mar 19, 2014
Priority date	Sep 16, 2011
Publication date	Nov 15, 2016
Grant date	Nov 15, 2016

Abstract

A method for authenticating a user's secondary client device with a data center interacting with the user's primary client device includes capturing a quick response (QR) code displayed at the primary client device using the secondary client device, wherein the QR code is generated by the data center for the primary client device, analyzing the QR code at the secondary client device to extract information for initializing communication with the data center, providing information contained in the QR code to the data center by the secondary client device, wherein the information contained in the QR code is utilized by the data center to authenticate the secondary client device, and initializing interaction between the secondary client device and the data center when the data center authenticates the secondary client device.

First claim

What is claimed is:

1. A method for authenticating a user's secondary client device with a data center interacting with the user's primary client device, the method comprising:
capturing a quick response (QR) code displayed at the primary client device using the secondary client device, wherein the QR code is generated by the data center for the primary client device and transmitted from the data center to the primary client device via a first network, the QR code including unique information provided only to the primary client device;
analyzing the QR code at the secondary client device to extract information for initializing communication with the data center;
providing information, extracted from the QR code by the secondary client device, from the secondary client device to the data center via a second network that is different from the first network, wherein the information extracted from the QR code by the secondary client device and provided to the data center is utilized by the data center to authenticate the secondary client device; and
initializing interaction between the secondary client device and the data center after the data center compares the information extracted from the QR code and provided to the data center by the secondary client device, and authenticates the secondary client device based on the comparison, the interaction between the secondary client device and the data center being conducted via the first network.

2. The method of claim 1 , wherein the secondary client device comprises a smartphone or tablet.

3. The method of claim 1 , wherein analyzing the QR code comprises performing an algorithm on the QR code to extract data from patterns in horizontal and vertical components of the QR code.

4. The method of claim 1 , wherein the information extracted for initializing communication with the data center comprises an IP address of the data center.

5. The method of claim 1 , wherein the information extracted for initializing communication with the data center comprises information identifying an orchestrator server managing the data center.

6. The method of claim 1 , wherein providing information, extracted from the QR code by the secondary client device, from the secondary client device to the data center comprises providing the entire QR code.

7. The method of claim 1 , wherein providing information, extracted from the QR code by the secondary client device, from the secondary client device to the data center comprises providing the unique information contained in the QR code.

8. The method of claim 1 , further comprising:
terminating interaction between the data center and the primary client device when the data center authenticates the secondary client device.

9. A computer program product embodied on a computer readable medium, the computer readable medium having stored thereon a sequence of instructions which, when executed by a processor causes the processor to execute a method for authenticating a user's secondary client device with a data center interacting with the user's primary client device, comprising:
capturing a quick response (QR) code displayed at the primary client device using the secondary client device, wherein the QR code is generated by the data center for the primary client device and transmitted from the data center to the primary client device via a first network, the QR code including unique information provided only to the primary client device;
analyzing the QR code at the secondary client device to extract information for initializing communication with the data center;
providing information, extracted from the QR code by the secondary client device, from the secondary client device to the data center via a second network that is different from the first network, wherein the information extracted from the QR code by the secondary client device and provided to the data center is utilized by the data center to authenticate the secondary client device; and
initializing interaction between the secondary client device and the data center after the data center compares the information extracted from the QR code and provided to the data center by the secondary client device, and authenticates the secondary client device based on the comparison, the interaction between the secondary client device and the data center being conducted via the first network.

10. The computer program product of claim 9 , wherein the secondary client device comprises a smartphone or tablet.

11. The computer program product of claim 9 , wherein analyzing the QR code comprises performing an algorithm on the QR code to extract data from patterns in horizontal and vertical components of the QR code.

12. The computer program product of claim 9 , wherein the information extracted for initializing communication with the data center comprises an IP address of the data center.

13. The computer program product of claim 9 , wherein the information extracted for initializing communication with the data center comprises information identifying an orchestrator server managing the data center.

14. The computer program product of claim 9 , wherein providing information, extracted from the QR code by the secondary client device, from the secondary client device to the data center comprises providing the entire QR code.

15. The computer program product of claim 9 , wherein providing information, extracted from the QR code by the secondary client device, from the secondary client device to the data center comprises providing the unique information contained in the QR code.

16. The computer program product of claim 9 , further comprising:
terminating interaction between the data center and the primary client device when the data center authenticates the secondary client device.

17. A method for authenticating a user's secondary client device with a data center interacting with the user's primary client device, comprising:
generating, at the data center, a QR code and transmitting the QR code from the data center to the primary client device via a first network for display at the primary client device, the QR code including unique information provided only to the primary client device;
receiving, at the data center, the unique information contained in the QR code from the secondary client device, the unique information contained in the QR code being transmitted from the secondary client device to the data center via a second network that is different from the first network;
verifying, by the data center, the received unique information contained in the QR code corresponds to the unique information provided only to the primary client device to authenticate the secondary client device; and
initializing interaction with the secondary client device by the data center after verifying the unique information contained in the QR code and authenticating the secondary client device, the interaction between the secondary client device and the data center being conducted via the first network.

18. The method of claim 17 , wherein the secondary client device comprises a smartphone or tablet.

19. The method of claim 17 , wherein receiving the unique information contained in the QR code from the secondary client device comprises receiving the entire QR code.

20. The method of claim 17 , wherein verifying the received unique information contained in the QR code comprises comparing the received unique information contained in the QR code to the unique information included in the generated QR code.

21. The

Assignees

• Google Inc

Inventors

• Somadder Gurudas
• Liu Haochen
• Adkar Vinit Sudhakar

Classifications

• H04L63/00

  Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00) · CPC title

• H04L47/80

  Actions related to the user profile or the type of traffic · CPC title

• H04L67/42 Primary

  Electricity · mapped topic

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title