IP Library Granted Patent US 9,923,896
Granted Patent B2
US 9,923,896 · App. 14/552,090 · Granted Mar 20, 2018

Providing access to a restricted resource via a persistent authenticated device network

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,923,896
App. No.
14/552,090
Granted
Mar 20, 2018
Kind
B2
Abstract

Providing access to a restricted resource via a persistent authenticated device network, including: authenticating a user; joining a persistent authenticated device network; iteratively, upon the expiration of a predetermined period of time, determining whether the user remains authenticated; responsive to determining that the user remains authenticated, determining whether a downstream computing device in the persistent authenticated device network is attempting to access a restricted resource; and responsive to determining that the downstream computing device in the persistent authenticated device network is attempting to access a restricted resource, providing user authentication information to the downstream computing device.

Claims (44)

1. A method comprising:

by first program instructions on a first computing device,

authenticating a user;

joining a persistent authenticated device network;

iteratively, upon the expiration of a predetermined period of time, determining that the authenticated user remains authenticated, wherein determining that the authenticated user remains authenticated further comprises determining that the authenticated user is within a first distance of the first computing device using a biometric sensor to confirm a presence of the authenticated user;

responsive to determining that the authenticated user remains authenticated, determining that a downstream computing device in the persistent authenticated device network is attempting to access a restricted resource; and

responsive to determining that the downstream computing device in the persistent authenticated device network is attempting to access a restricted resource, providing user authentication information to the downstream computing device.

2. The method of claim 1 further comprising:

by the first program instructions on the first computing device, responsive to determining that the authenticated user does not remain authenticated, leaving the persistent authenticated device network so that the first computing device is no longer part of the persistent authenticated device network.

3. The method of claim 1 further comprising:

by the first program instructions on the first computing device,

establishing a connection with the restricted resource;

receiving connection information from the restricted resource; and

wherein providing user authentication information to the downstream computing device further comprises providing the connection information to the downstream device.

4. The method of claim 1 wherein iteratively, upon the expiration of a predetermined period of time, determining that the authenticated user remains authenticated further comprises continuously determining that the authenticated user remains authenticated.

5. The method of claim 1 further comprising creating the persistent authenticated device network.

6. An apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

authenticating a user;

joining a persistent authenticated device network;

iteratively, upon the expiration of a predetermined period of time, determining that the authenticated user remains authenticated, wherein determining that the authenticated user remains authenticated further comprises determining that the authenticated user is within a first distance of the first computing device using a biometric sensor to confirm a presence of the authenticated user;

responsive to determining that the authenticated user remains authenticated, determining that a downstream computing device in the persistent authenticated device network is attempting to access a restricted resource; and

responsive to determining that the downstream computing device in the persistent authenticated device network is attempting to access a restricted resource, providing user authentication information to the downstream computing device.

7. The apparatus of claim 6 further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the step of, responsive to determining that the authenticated user does not remain authenticated, leaving the persistent authenticated device network so that the first computing device is no longer part of the persistent authenticated device network.

8. The apparatus of claim 7 further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

establishing a connection with the restricted resource;

receiving connection information from the restricted resource; and

wherein providing user authentication information to the downstream computing device further comprises providing the connection information to the downstream device.

9. The apparatus of claim 7 wherein iteratively, upon the expiration of a predetermined period of time, determining that the authenticated user remains authenticated further comprises continuously determining whether the authenticated user remains authenticated.

10. The apparatus of claim 7 further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the step of creating the persistent authenticated device network.

11. A computer program product disposed upon a computer readable medium, the computer readable medium is not a signal, the computer program product comprising computer program instructions that, when executed, cause a first computing device to carry out the steps of:

authenticating a user;

joining a persistent authenticated device network;

iteratively, upon the expiration of a predetermined period of time, determining that the authenticated user remains authenticated, wherein determining that the authenticated user remains authenticated further comprises determining that the authenticated user is within a first distance of the first computing device using a biometric sensor to confirm a presence of the authenticated user;

responsive to determining that the authenticated user remains authenticated, determining that a downstream computing device in the persistent authenticated device network is attempting to access a restricted resource; and

responsive to determining that the downstream computing device in the persistent authenticated device network is attempting to access a restricted resource, providing user authentication information to the downstream computing device.

12. The computer program product of claim 11 further comprising computer program instructions that, when executed, cause the computer to carry out the step of, responsive to determining that the authenticated user does not remain authenticated, leaving the persistent authenticated device network so that the first computing device is no longer part of the persistent authenticated device network.

13. The computer program product of claim 11 further comprising computer program instructions that, when executed, cause the computer to carry out the steps of:

by the first program instructions on the first computing device, establishing a connection with the restricted resource;

receiving connection information from the restricted resource; and

wherein providing user authentication information to the downstream computing device further comprises providing the connection information to the downstream device.

14. The computer program product of claim 11 wherein iteratively, upon the expiration of a predetermined period of time, determining that the authenticated user remains authenticated further comprises continuously determining whether the authenticated user remains authenticated.

15. The computer program product of claim 11 further comprising computer program instructions that, when executed, cause the computer to carry out the step of creating the persistent authenticated device network.

16. The method of claim 1 wherein determining whether the authenticated user remains authenticated further comprises confirming the presence of the authenticated user by checking for the presence of the authenticated user's pulse.

17. The method of claim 1 wherein determining whether the authenticated user remains authenticated further comprises confirming the presence of the authenticated user by checking for the presence of the authenticated user's body heat.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 10, 2025
From: LENOVO GLOBAL TECHNOLOGIES INTERNATIONAL LIMITED
To: LENOVO GLOBAL TECHNOLOGIES SWITZERLAND INTERNATIONAL GMBH
Reel/Frame 069869/0614 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 9, 2019
From: LENOVO ENTERPRISE SOLUTIONS (SINGAPORE) PTE LTD.
To: LENOVO GLOBAL TECHNOLOGIES INTERNATIONAL LTD
Reel/Frame 050309/0564 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 24, 2014
From: RENGAN, MARCO M.
To: LENOVO ENTERPRISE SOLUTIONS (SINGAPORE) PTE. LTD.
Reel/Frame 034253/0585 →