IP Library Granted Patent US 9,288,206
Granted Patent B2
US 9,288,206 · App. 14/358,146 · Granted Mar 15, 2016

Shared secret techniques for ubiquitous computing devices

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,288,206
App. No.
14/358,146
Granted
Mar 15, 2016
Kind
B2
Abstract

Technologies and implementations for secure access to online services are generally disclosed.

Claims (39)

1. A method for secure access to online services, the method comprising:

receiving a first authentication request from a device, the first authentication request comprising a device level authentication request and a random pad associated with the device;

determining whether the random pad is included in a device related database;

establishing, responsive to determination that the random pad is included in the device related database, a secure communication link with the device;

receiving a second authentication request from the device via the established secure communication link, the second authentication request comprising a user level authentication request; and

responsive to the received second authentication request, moving the random pad from the device related database to a user related database.

2. The method of claim 1 , wherein receiving the first authentication request comprises receiving the first authentication request automatically at startup of the device.

3. The method of claim 1 , wherein determining whether the random pad is include in the device related database comprises determining whether the random pad was included in the device from a device manufacturer.

4. The method of claim 1 , wherein establishing the secure communication link with the device comprises establishing the secure communication link via an open standard for authorization (OAuth) based server.

5. The method of claim 1 , wherein receiving the second authentication request comprises receiving a user name and a user password.

6. The method of claim 1 , wherein moving the random pad from the device related database to the user related database comprises moving the random pad in a ubiquitous computing environment.

7. The method of claim 1 , wherein receiving the first authentication request from the device comprises receiving the first authentication request from at least one of a wireless device or a wired device.

8. A machine readable non-transitory medium having stored therein instructions that, when executed by one or more processors, operatively enable a secure shared verification module (SSVM) to:

receive a first authentication request from a device, the first authentication request comprising a device level authentication request and a random pad associated with the device;

determine whether the random pad is included in a device related database;

establish, responsive to determination that the random pad is included in the device related database, a secure communication link with the device;

receive a second authentication request from the device via the established secure communication link, the second authentication request comprising a user level authentication request; and

move, responsive to the received second authentication request, the random pad from the device related database to a user related database.

9. The machine readable non-transitory medium of claim 8 , wherein the stored instructions that operatively enable the SSVM to receive the first authentication request from the device include instructions that, when executed by one or more processors, operatively enable the SSVM to receive the first authentication request automatically at startup of the device.

10. The machine readable non-transitory medium of claim 8 , wherein the stored instructions that operatively enable the SSVM to determine whether the random pad is included in the device related database include instructions that, when executed by one or more processors, operatively enable the SSVM to determine whether the random pad was included in the device from a device manufacturer.

11. The machine readable non-transitory medium of claim 8 , wherein the stored instructions that operatively enable the SSVM to establish the secure communication link with the device include instructions that, when executed by one or more processors, operatively enable the SSVM to establish the secure communication link via an open standard for authorization (OAuth) based server.

12. The machine readable non-transitory medium of claim 8 , wherein the stored instructions that operatively enable the SSVM to receive the second authentication request include instructions that, when executed by one or more processors, operatively enable the SSVM to receive a user name and a user password.

13. The machine readable non-transitory medium of claim 8 , wherein the stored instructions that operatively enable the SSVM to move the random pad from the device related database to the user related database include instructions that, when executed by one or more processors, operatively enable the SSVM to move the random pad in a ubiquitous computing environment.

14. The machine readable non-transitory medium of claim 8 , wherein the stored instructions that operatively enable the SSVM to receive the first authentication request from the device include instructions that, when executed by one or more processors, operatively enable the SSVM to receive the authentication request from at least one of a wireless device or a wired device.

15. A system for secure access to online services comprising:

a first database;

a second database communicatively coupled with the first database;

a processor communicatively coupled with the first database and the second database; and

a secure shared verification module (SSVM) communicatively coupled to the processor, the SSVM configured to:

receive a first authentication request from a device, the first authentication request comprising a device level authentication request and a random pad associated with the device;

determine whether the random pad is included in the first database;

establish, responsive to determination that the random pad is included in the first database, a secure communication link with the device;

receive a second authentication request from the device via the established secure communication link, the second authentication request comprising a user level authentication request; and

move, responsive to the received second authentication request, the random pad from the first database to the second database.

16. The system of claim 15 , wherein to receive the second authentication request, the SSVM is configured to receive a user name and a user password.

17. The system of claim 15 , wherein to move the random pad from the first database to the second database, the SSVM is configured to move the random pad in a ubiquitous computing environment.

18. The system of claim 15 , wherein to receive the first authentication request from the device, the SSVM is configured to receive the first authentication request from at least one of a wireless device or a wired device.

19. The system of claim 15 , wherein the first database comprises a device related database.

20. The system of claim 15 , wherein the second database comprises a user related database.

Assignments (3)
SECURITY INTEREST Recorded Jan 29, 2019
From: EMPIRE TECHNOLOGY DEVELOPMENT LLC
To: CRESTLINE DIRECT FINANCE, L.P.
Reel/Frame 048373/0217 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 15, 2014
From: KRUGLICK, EZEKIEL
To: ARDENT RESEARCH CORPORATION
Reel/Frame 032894/0733 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 15, 2014
From: ARDENT RESEARCH CORPORATION
To: EMPIRE TECHNOLOGY DEVELOPMENT LLC
Reel/Frame 032895/0292 →