Device authentication techniques
View Patent ↗Techniques are provided for authenticating a phone or other device for a user. A phone or other device is provided to the user. A personal identification number is provided to the user. The personal identification number is used to authenticate the phone or other device in the network for the user.
1. A method for authenticating a phone for a user comprising:
logging the user onto a server in a network from a computer using authentication information;
providing a personal identification number from the server to the computer over a secure communications channel over the network, without using the phone;
receiving the personal identification number from the phone at the server; and
using the personal identification number at the server to authenticate the phone in the network for the user.
2. The method of claim 1 , further comprising:
providing the authentication information to the user, the authentication information used by the user for logging onto the server, wherein the authentication information includes a username and password.
3. The method of claim 2 , further comprising:
generating, by the server, the personal identification number; and
communicating the personal identification number to the user, wherein the personal identification number has a predetermined lifespan of validity for use in connection with authenticating the phone.
4. The method of claim 3 , further comprising:
entering said personal identification number into said phone.
5. The method of claim 4 , wherein said personal identification number is transmitted to said phone using a wireless connection.
6. The method of claim 5 , wherein said wireless connection includes at least one of: an RF link, an IR link, and a magnetic coupling link.
7. The method of claim 4 , wherein said personal identification number is transmitted to said phone using audio tones.
8. The method of claim 4 , wherein said personal identification number is manually entered at said phone using a keypad.
9. The method of claim 4 , wherein said personal identification number is in a bar-coded form which is read using a reader at said phone.
10. The method of claim 4 , further comprising:
hashing, by said phone, said personal identification number entered at said phone generating a first hash value; and
hashing, by said server, a copy of said personal identification number as maintained at said server generating a second hash value.
11. The method of claim 10 , further comprising:
comparing, by said server, said first and second hash values;
if said first and second hash values do not match, not successfully completing authentication processing for the phone for the user.
12. The method of claim 11 , wherein if said first and second hash values match, a connection is established between said phone and said server and said phone sends a public key to the server.
13. The method of claim 12 , wherein said server obtains a digital certificate in accordance with said public key and transmits said digital certificate and identification information to log onto a communications server to the device.
14. The method of claim 13 , wherein said device is authenticated to said communications server in accordance with said digital certificate and identification information.
15. A method for authenticating a device for a user comprising:
providing authentication information to the user, wherein the authentication information is used by the user for logging onto a server in a network using a computer;
using the authentication information by the server to authenticate the user;
generating by the server a single-use personal identification number having a predetermined lifespan;
transmitting the personal identification number to the computer over a secure communications channel over the network, without using the device;
receiving the personal identification number from the device at the server; and
using the personal identification number at the server to authenticate the device in the network for the user.
16. The method of claim 15 , wherein said personal identification number is transmitted to said device from the computer using a wireless connection.
17. The method of claim 15 , wherein said personal identification number is communicated to said device from the computer using audio tones.
18. The method of claim 15 , wherein said personal identification number is input manually using a keypad of said device.
19. The method of claim 18 , wherein said keypad includes only telephone keypad key assignments.
20. A computer storage medium comprising executable code for authenticating a phone comprising code that:
provides authentication information to the user, wherein the authentication information is used by the user for logging onto a server in a network using a computer;
uses the authentication information by the server to authenticate said user;
generates by the server a personal identification number;
transmits the personal identification number to the computer over a secure communications channel over the network, without using the phone; and
receives the personal identification number from the phone at the server; and
uses the personal identification number at the server to authenticate the phone in the network for the user.