IP Library Granted Patent US 9,887,991
Granted Patent B2
US 9,887,991 · App. 14/671,026 · Granted Feb 6, 2018

Facilitation of service login

Inventors: Richard Stephen Allinson (Morgan Hill, CA); Chris Stoner (San Jose, CA); Manoj Palki (Santa Clara, CA)
Assignee: YAHOO HOLDINGS, INC.
H04L63/0853G06F21/34H04L9/3234H04L63/083H04L63/0884
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,887,991
App. No.
14/671,026
Granted
Feb 6, 2018
Kind
B2
Abstract

As provided herein, a first device may be registered as authorized to authenticate a user login into a service from a second device (e.g., a smart phone may be used to log the user into a webmail service on a computer without the user having to enter a password through the computer). Responsive to the user attempting to access the service through the second device, a login interface may be displayed on the first device. The user may confirm or deny that the user wants to log into the service on the second device, thus allowing the user to seamlessly log into the service on the second device (e.g., without entering a password) while mitigating unauthorized logins into the service from unknown devices. Further, the user may use the first device to delegate the authority to authenticate the user login into the service to one or more other devices.

Claims (79)

1. A system for facilitating service login, comprising:

a processor; and

memory comprising processor-executable instructions that when executed by the processor cause implementation of a service login management component configured to:

register a first device, comprising a first processor, as having authorization to authenticate a user for accessing a service from a second device comprising a second processor;

store device authorization information on the second device, the device authorization information specifying that the first device is registered as having authorization to authenticate the user;

receive an authorization delegation request, for a third device comprising a third processor, from the first device;

register the third device as having authorization to authenticate the user for accessing the service from the second device;

determine a first viability score of the first device corresponding to the user;

determine a second viability score of the third device corresponding to the user;

receive an access request for the service from the second device, the access request specifying a username and the device authorization information;

query an authorization database using the username to identify an encryption key and a push token;

create an encrypted request using the encryption key;

select, from amongst a plurality of devices comprising the first device and the third device, the first device as a destination for the encrypted request based upon a comparison of the first viability score and the second viability score;

responsive to the first viability score being greater than the second viability score, send the encrypted request to the first device but not the third device using the push token; and

responsive to receiving a login user authorization notification from the first device in response to the encrypted request sent to the first device, log the user into the service on the second device.

2. The system of claim 1 , the service login management component configured to:

maintain a count of user logins from the second device; and

responsive to the count exceeding a threshold, instruct the second device to facilitate a non-credential login with the service.

3. The system of claim 1 , the selecting based upon a determination that the first viability score is greater than the second viability score.

4. The system of claim 1 , the first device comprising a mobile phone, and the service login management component configured to:

maintain a registration of the first device within a key ring account for the user; and

responsive to receiving a phone number change request, modify the registration based upon the phone number change request.

5. The system of claim 1 , the service login management component configured to:

maintain a registration of the first device, the registration specifying a trust level for the first device; and

modify the trust level based upon at least one of successful authentication or unsuccessful authentication of the user by the first device.

6. The system of claim 5 , the service login management component configured to:

maintain a second registration of the third device, the second registration specifying a second trust level for the third device; and

responsive to the second trust level exceeding a trust level threshold, open a push channel to the third device for authenticating the user for accessing the service from the second device.

7. The system of claim 1 , the service login management component configured to perform at least one of the determining the first viability score or the determining the second viability score based upon at least one of:

a spatial proximity relative to the user, a typing characteristic of the user, a time of day, a temperature at a location of the user, user identification from imagery of the user, or voice recognition of captured audio.

8. The system of claim 1 , the service login management component configured to:

store the device authorization information within a login management cookie on the second device.

9. The system of claim 1 , the service login management component configured to:

store the username, the encryption key associated with the username, and the push token associated with the username within the authorization database.

10. A system for facilitating service login, comprising:

a first device configured to use a processor to:

register, as having authorization to authenticate a user for accessing a service from a second device comprising a second processor, with the service to obtain an encryption key, the registering comprising:

obtaining a push token from a push notification service;

sending an encryption key request, comprising the push token, to the service; and

obtaining the encryption key from the service in response to the encryption key request sent to the service;

store the encryption key and a username, of a user account with the service, within the first device;

receive an encrypted request from the service;

decrypt the encrypted request using the encryption key;

display a login interface to the user;

responsive to receiving a login user authentication notification through the login interface, provide the login user authentication notification to the service, the login user authentication notification instructing the service to log the user into the service on the second device;

receive, from the service, an encrypted authorization delegation request for a third device;

decrypt the encrypted authorization delegation request using the encryption key;

display, based upon the decrypting, an authentication interface comprising a first option to authenticate the third device, comprising a third processor, and a second option to not authenticate the third device; and

responsive to receiving a selection of the first option, delegate authorization, to the third device, for authenticating the user for accessing the service from the second device.

11. The system of 10 , the encrypted authorization delegation request received from the service and not the third device.

12. The system of claim 10 , the first device configured to:

obtain a verification code from the service, the encryption key request comprising the username and the verification code.

13. The system of claim 10 , the first device configured to:

responsive to receiving a login user dissent notification through the login interface, provide the login user dissent notification to the service, the login user dissent notification instructing the service to prevent a login of the user into the service from the second device.

14. A method for facilitating service login, comprising:

registering a first device, comprising a first processor, as having authorization to authenticate a user for accessing a service from a second device comprising a second processor;

registering a third device, comprising a third processor, as having authorization to authenticate the user for accessing the service from the second device;

determining a first viability score of the first device corresponding to the user;

determining a second viability score of the third device corresponding to the user;

receiving an access request for the service from the second device, the access request specifying a username and device authorization information;

querying an authorization database using the username to identify a push token;

selecting, from amongst a plurality of devices comprising the first device and the third device, the first device as a destination for an encrypted request based upon a comparison of the first viability score and the second viability score;

sending the encrypted request to the first device using the push token; and

responsive to receiving a login user authorization notification from the first device in response to the encrypted request sent to the first device, logging the user into the service on the second device.

15. The method of claim 14 , comprising:

maintaining a count of user logins from the second device; and

responsive to the count exceeding a threshold, instructing the second device to facilitate non-credential logins with the service.

16. The method of claim 14 , comprising:

receiving an authorization delegation request, for the third device, from the first device.

17. The method of claim 14 , comprising:

maintaining a registration of the first device, the registration specifying a trust level for the first device; and

modifying the trust level based upon at least one of successful authentication or unsuccessful authentication of the user by the first device.

18. The method of claim 17 , comprising:

maintaining a second registration of third device, the second registration specifying a second trust level for the third device; and

responsive to the second trust level exceeding a trust level threshold, opening a push channel to the third device for authenticating the user for accessing the service from the second device.

19. The method of claim 14 , the sending comprising:

responsive to the first viability score being greater than the second viability score, sending the encrypted request to the first device but not the third device.

20. The method of claim 14 , comprising:

storing the device authorization information within a login management cookie on the second device.

Assignments (5)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 19, 2021
From: VERIZON MEDIA INC.
To: VERIZON PATENT AND LICENSING INC.
Reel/Frame 057453/0431 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 26, 2020
From: OATH INC.
To: VERIZON MEDIA INC.
Reel/Frame 054258/0635 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 2, 2018
From: YAHOO HOLDINGS, INC.
To: OATH INC.
Reel/Frame 045240/0310 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 23, 2017
From: YAHOO! INC.
To: YAHOO HOLDINGS, INC.
Reel/Frame 042963/0211 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 13, 2015
From: ALLINSON, RICHARD STEPHEN; STONER, CHRIS; PALKI, MANOJ
To: YAHOO!, INC.
Reel/Frame 035626/0899 →
Continuity (1)
Related Publication 20160285633A1 · Sep 29, 2016