Authenticating an auxiliary device from a portable electronic device
View Patent ↗This document discusses, among other things, a method for authenticating a browser executing on an auxiliary device with a web service executing on a portable electronic device. The method includes receiving a request for a resource from the browser, determining whether the request identifies a protected resource, and selectively authenticating the request based on whether the request identifies a protected resource.
1. A remote device configured to be communicatively coupled with an auxiliary device, the remote device comprising a processor configured to:
receive a remote device resource request from the auxiliary device;
search a first location of the request for a first authentication result;
search a second location of the request for a second authentication result, the first location and the second location being different; and
grant the auxiliary device access to the remote device resource in response to the first authentication result, the second authentication result, and an auxiliary authentication token from a plurality of authentication tokens on the auxiliary device, matching each other.
2. The remote device of claim 1 , the processor further configured to:
transmit an authentication token to the remote device; and
transmit a script element to the remote device, the script element configured to copy the authentication token from the first location to the second location.
3. The remote device of claim 2 , the processor further configured to:
send a login request to the remote device for information to unlock the remote device; and
receive login information from the remote device to unlock the remote device, wherein the authentication token is sent in response to login information that successfully unlocks the remote device.
4. The remote device of claim 1 , wherein the first location is in a cookie sent with the request, the request comprising a hypertext transfer protocol (HTTP) request, and the cookie being in an HTTP request header field named Cookie.
5. The remote device of claim 1 , wherein the second location is in a custom HTTP header field.
6. The remote device of claim 1 , wherein the second location is in a universal resource locator (URL) parameter included in the request.
7. The remote device of claim 1 , wherein the second authentication result is a copy of the first authentication result.
8. A method for securely authenticating a request for a remote device resource from an auxiliary device, the method comprising:
searching a first location of the request for a first authentication result;
searching a second location of the request for a second authentication result, the first location and the second location being different; and
granting the auxiliary device access to the remote device resource in response to the first authentication result, the second authentication result, and an auxiliary token from a plurality of tokens on the auxiliary device, matching each other.
9. The method of claim 8 , further comprising:
transmitting an authentication token to the remote device; and
transmitting a script element to the remote device, the script element configured to copy the authentication token from the first location to the second location.
10. The method of claim 9 , further comprising:
sending a login request to the remote device for information to unlock the remote device; and
receiving login information from the remote device to unlock the remote device, wherein the authentication token is sent in response to login information that successfully unlocks the remote device.
11. The method of claim 8 , wherein the first location is in a cookie sent with the request, the request comprising a hypertext transfer protocol (HTTP) request, and the cookie being in an HTTP request header field named Cookie.
12. The method of claim 8 , wherein the second location is in a custom HTTP header field.
13. The method of claim 8 , wherein the second location is in a universal resource locator (URL) parameter included in the request.
14. The method of claim 8 , wherein the second authentication result is a copy of the first authentication result.
15. A non-transitory computer readable medium including instructions, when executed by a processor included in a remote device, that cause the processor to perform operations comprising:
receiving a request for a resource of the remote device;
searching a first location of the request for a first authentication result;
searching a second location of the request for a second authentication result, the first location and the second location being different; and
granting an auxiliary device access to the resource in response to the first authentication result, the second authentication result, and an auxiliary token from a plurality of tokens on the auxiliary device, matching each other.
16. The non-transitory computer readable medium of claim 15 , wherein the instructions cause the processor to perform further operations comprising:
transmitting an authentication token to the remote device; and
transmitting a script element to the remote device, the script element configured to copy the authentication token from the first location to the second location.
17. The non-transitory computer readable medium of claim 16 , wherein the instructions cause the processor to perform further operations comprising:
sending a login request to the remote device for information to unlock the remote device; and
receiving login information from the remote device to unlock the remote device, wherein the authentication token is sent in response to login information that successfully unlocks the remote device.
18. The non-transitory computer readable medium of claim 15 , wherein the first location is in a cookie sent with the request, the request comprising a hypertext transfer protocol (HTTP) request, and the cookie being in an HTTP request header field named Cookie.
19. The non-transitory computer readable medium of claim 15 , wherein the second location is in a custom HTTP header field.
20. The non-transitory computer readable medium of claim 15 , wherein the second location is in a universal resource locator (URL) parameter included in the request.