Device security utilizing continually changing QR codes

Patent metadata

Field	Value
Publication number	US-9794253-B2
Application number	US-201514712034-A
Country	US
Kind code	B2
Filing date	May 14, 2015
Priority date	Mar 14, 2013
Publication date	Oct 17, 2017
Grant date	Oct 17, 2017

Abstract

A method provides device access security via use of periodically changing Quick Response (QR) codes. The method includes: generating ( 706 ) a first authentication QR code and assigning ( 708 ) the generated QR code as the current authentication mechanism for accessing the device. Contemporaneously with the generation of the QR code, at least one QR code validity parameter is established ( 710 ) to define when access to the device can be provided to a second device that provides the correct authentication QR code along with the access request. The method includes, in response to a pre-defined trigger ( 712 ) of the QR code validity parameter: generating ( 704 ) a new authentication QR code, different from a previously generated authentication QR code; assigning ( 708 ) the new authentication QR code as the current authentication mechanism for accessing the device; and enabling access to the first device to only second devices that provide the current authentication QR code.

First claim

What is claimed is:

1. A method, comprising:
at a first electronic device having one or more processors and memory storing one or more programs to be executed by the one or more processors:
providing to a remote service a first authentication code and information identifying a second electronic device that is associated with the first authentication code;
receiving a second authentication code from the remote service, wherein the second authentication code is based on the first authentication code and the information identifying the second electronic device, wherein the second authentication code is configured to be utilized by the second electronic device to access the first electronic device and establish one or more communication channels by which data content is transferred between the first electronic device and the second electronic device; and
after receiving the second authentication code from the remote service, transmitting the second authentication code from the first electronic device to the second electronic device to enable the second electronic device to access the first electronic device.

2. The method of claim 1 , comprising receiving at the first electronic device an input comprising a password as the first authentication code.

3. The method of claim 1 , wherein:
receiving the second authentication code comprises receiving a pairing code corresponding to the first authentication code; and
in accordance with the paring code, enabling paring with the second electronic device and an access to the first electronic device by the second electronic device.

4. The method of claim 3 , wherein receiving the pairing code corresponding to the first authentication code comprises receiving a quick response (QR) code.

5. The method of claim 1 , wherein transmitting the second authentication code from the first electronic device to the second electronic device comprises transmitting an authentication code configured to be valid for accessing the first electronic device by the second electronic device within a period of time.

6. The method of claim 1 , wherein transmitting the second authentication code from the first electronic device to the second electronic device comprises transmitting an authentication code configured to be valid for accessing the first electronic device by the second electronic device within a defined location and configured to be invalid outside of the defined location.

7. The method of claim 1 , wherein transmitting the second authentication code from the first electronic device to the second electronic device comprises transmitting an authentication code associated with a usage profile, wherein the usage profile defines at least a specified number of devices permitted to access the first electronic device and one or more pre-established access criteria supporting secure access by the specified number of second devices, and the specified number of devices includes the second electronic device.

8. The method of claim 1 , wherein transmitting the second authentication code from the first electronic device to the second electronic device comprises transmitting an authentication code configured to be invalid following a data transfer of the data content from the first electronic device to the second electronic device.

9. The method of claim 1 , comprising:
receiving from the remote service a third authentication code when the second authentication code is invalid; and
transmitting the third authentication code from the first electronic device to the second electronic device.

10. An electronic device, comprising:
a processor and memory storing one or more programs for execution by the processor to cause the processor:
provide to a remote service a first authentication code and information identifying a second electronic device that is associated with the first authentication code;
receive a second authentication code only at the electronic device from the remote service, wherein the second authentication code is based on the first authentication code and the information identifying the second electronic device, wherein the second authentication code is configured to be utilized by the second electronic device to access the electronic device and establish one or more communication channels by which data content is transferred between the electronic device and the second electronic device; and
after receiving the second authentication code from the remote service, transmit the second authentication code from the electronic device to the second electronic device to enable the second electronic device to access the electronic device.

11. The electronic device of claim 10 , wherein the first authentication code comprises a user password, and wherein the second authentication code comprises a unique pairing code generated based on the password.

12. The electronic device of claim 10 , wherein the second authentication code is configured to be valid for accessing the electronic device by the second electronic device within a predetermined period of time.

13. The electronic device of claim 10 , wherein the second authentication code is configured to be valid for accessing the electronic device by the second electronic device within a defined area and configured to be invalid beyond the defined area.

14. The electronic device of claim 10 , wherein the processor is configured to receive a third authentication code when the second authentication code is determined to be invalid.

15. The electronic device of claim 14 , wherein the processor is configured to transmit the third authentication code from the electronic device to the second electronic device, wherein the third authentication code is configured to be utilized to establish the one or more communication channels by which the data content is transferred between the electronic device and the second electronic device.

16. The electronic device of claim 10 , wherein the second authentication code is associated with a user profile.

17. The electronic device of claim 16 , wherein the processor is configured to allow a pairing between the electronic device and the second electronic device, and to prevent a pairing between the electronic device and a third electronic device that is not in the user profile based on the user profile.

18. The electronic device of claim 10 , wherein the processor is configured to transmit the data content from the electronic device to the second electronic device based on the second authentication code.

19. A non-transitory computer-readable medium having computer executable code stored thereon, the code comprising instructions to:
cause a processor of a first electronic device to provide to a remote service a first authentication code and information identifying a second electronic device that is associated with the first authentication code;
cause the processor to receive a second authentication code from the remote service, wherein the second authentication code is based on the first authentication code and the information identifying the second electronic device, wherein the second authentication code is configured to be utilized by the second electronic device to access the electronic device and establish one or more communication channels by which data content is transferred between the first electronic device and the second electronic device; and
cause the processor to after receiving the second authentication code from the remote service, transmit the second authentication code from the electronic device to the second electronic device

Assignees

• Google Technology Holdings LLC
• Google Inc

Inventors

• Narayan Shyam
• Aerrabotu Naveen
• Sinha Rohit R

Classifications

• G06F21/445

  by mutual authentication, e.g. between devices or programs · CPC title

• H04W12/06

  Authentication · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• H04L9/3228

  One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title

• H04L63/0846 Primary

  using time-dependent-passwords, e.g. periodically changing passwords · CPC title