Propagating authentication between terminals

Patent metadata

Field	Value
Publication number	US-9621562-B2
Application number	US-201414652181-A
Country	US
Kind code	B2
Filing date	Jan 14, 2014
Priority date	Jan 28, 2013
Publication date	Apr 11, 2017
Grant date	Apr 11, 2017

Abstract

Propagating authentication between terminals connected to a server having identification information and user information for the terminals. The terminal receives identification information, user information, location information and a login status from a first terminal and a second terminal in response to a predetermined impact between the terminals, or the terminals coming within a predetermined distance of each other, the login status of the terminals being either authenticated or unauthenticated. The server then authenticates the second terminal in response to the users of the first terminal matching some or all of the users of the second terminal based on the identification and user information, in response to the terminals being located within a predetermined distance of each other, and in response to the first terminal being authenticated and the second terminal being unauthenticated on the basis of the login status.

First claim

The invention claimed is:

1. A method for propagating authentication between a plurality of terminals connected to a server via a network, the server having identification information for each of the plurality of terminals and user information for the terminals, the method comprising:
receiving, by the server, identification information, user information, location information and a login status from each of a first terminal and a second terminal in response to a predetermined impact between the first terminal and the second terminal, or the first terminal and the second terminal coming within a predetermined distance of each other, wherein the login status of the first terminal is authenticated and the login status of the second terminal is unauthenticated; and
authenticating, by the server, the second terminal in response to the users of the first terminal matching some or all of the users of the second terminal on the basis of the identification information and user information, in response to the first terminal and the second terminal being located within a predetermined distance of each other on the basis of the location information.

2. The method according to claim 1 , further comprising:
in response to the first terminal moving and the second terminal remaining stationary, or the second terminal moving and the first terminal remaining stationary, maintaining, by the server, the authentication of the moving one of the first or second terminal and rendering the stationary one of the first or second terminal unauthenticated.

3. The method according to claim 1 , further comprising:
rendering, by the server, the first terminal and the second terminal unauthenticated in response to both the first terminal and the second terminal moving apart from each other by a predetermined distance.

4. The method according to claim 1 , further comprising:
maintaining, by the server, the authentication of the first terminal and the second terminal in response to the first terminal and the second terminal being close to each other or moving in tandem.

5. The method according to claim 1 , wherein receiving further comprises:
receiving acceleration sensor information from each of the first terminal and the second terminal in response to a predetermined impact between the first terminal and the second terminal.

6. The method according to claim 1 , wherein the impact occurs when the first terminal and second terminal come into contact or collide with each other.

7. The method according to claim 1 , wherein the predetermined distance is the range in which the second terminal detects the first terminal using radio frequency identification (RFID), infrared or ultrasound.

8. The method according to claim 1 , wherein the predetermined distance is the range in which the first terminal and the second terminal are able to communicate with each other via a wireless communication device.

9. The method according to claim 1 , wherein the predetermined distance is the range in which the first terminal reads a barcode displayed on a screen of the second terminal.

10. The method according to claim 9 , wherein receiving further comprises:
causing, by the first terminal, a barcode to be displayed on the screen of the second terminal; and
reading, by the first terminal, the barcode information displayed on the screen of the second terminal;
wherein authenticating further comprises:
authenticating the second terminal if the barcode information read by the first terminal that is displayed on the screen of the second terminal matches the barcode information caused by the first terminal to be displayed on the screen of the second terminal.

11. The method according to claim 1 , wherein the users of the first terminal match some or all of the users of the second terminal, and the user of the first terminal is the same as the user of the second terminal.

12. The method according to claim 1 , wherein the users of the first terminal match some or all of the users of the second terminal, and the user of the first terminal and the user of the second terminal belong to the same group.

13. The method according to claim 1 , wherein authenticating further comprises:
sending information from the server to the second terminal when the server has information for authenticating the second terminal, or
sending information for decrypting encrypted information from the server to the second terminal when the second terminal has encrypted information for authenticating the second terminal.

14. The method according to claim 1 , further comprising:
rendering, by the first terminal, the first terminal unauthenticated in response to the first terminal becoming unable to send location information or login status information to the server.

15. The method according to claim 1 , further comprising:
in response to the first terminal no longer being able to send location information and login status information to the server while the first terminal is moving, rendering, by the first terminal, the first terminal unauthenticated.

16. The method according to claim 1 , further comprising:
in response to the second terminal becoming unable to send location information or login status information to the server, rendering, by the second terminal, the second terminal unauthenticated.

17. The method according to claim 1 , further comprising:
in response to the second terminal no longer being able to send location information and login status information to the server while the second terminal is moving, rendering, by the second terminal, the second terminal unauthenticated.

Assignees

• IBM

Inventors

• Furuichi Sanehiro
• Tashiro Takahito

Classifications

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• G06F2221/2105

  Dual mode as a secondary aspect · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/105 Primary

  Multiple levels of security · CPC title

• G06F21/41

  where a single sign-on provides access to a plurality of computers · CPC title