Systems and methods for digital workflow and communication
Systems and methods for authoring and performing procedural workflows, and engaging in multimedia communication, remote assistance, training, data entry, inventory management, authentication, and secure networking using a hands-free or substantially hands-free wearable digital device are described. In one implementation, a user logs into a secure network using existing credentials, and a Quick Response Code is generated to temporarily authorize the user's wearable device within the secure network. In another implementation, information is encrypted and transferred between a computing device and a remote system, and the computing device is verified as being connected to a particular network and located within a particular geofence. In a further implementation, an interface for authoring a procedural workflow includes defining workflow steps based on selected primitives, and displaying rendered previews of the workflow as it would appear on different user devices.
1. A method performed by a computing device, the method comprising:
receiving an indication that a user has successfully logged into a secure network using existing credentials;
creating a temporary session for the user based on the existing credentials;
generating a Quick Response (QR) code comprising a secure token associated with the temporary session;
providing the QR code for display to the user on a first device such that the user can scan the QR code and authorize a second device for the temporary session based on the secure token, wherein the first device comprises a user input system and the second device has limited user input capability; and
transmitting an encrypted payload to the second device, wherein the encrypted payload is generated based on a password provided by the second device, the password being entered into the first device by the user.
2. The method of claim 1 , wherein generating the temporary session further comprises defining a permitted session length associated with the temporary account.
3. The method of claim 1 , wherein the QR code further comprises information associated with the temporary session, the information comprising at least one of permitted session length and a condition for ending the temporary session.
4. The method of claim 1 , wherein transmitting the encrypted payload to the second device comprises providing a second QR code for scanning by the second device, wherein the second QR code comprises the encrypted payload.
5. A method performed by a computing device, the method comprising:
receiving, at a first device, a password generated by a second device, wherein the second device comprises a wearable device;
receiving, at the first device, a message to be transferred to the second device;
generating an encrypted payload based on the password and the message using a symmetric cipher configured such that a Quick Response (QR) code generated based on the encrypted payload does not exceed a length readable by the second device;
generating the QR code based on the encrypted payload; and
providing the QR code for scanning by the second device.
6. The method of claim 5 , wherein the password is inputted into the first device by a user of the first device.
7. The method of claim 5 , wherein the password is a randomly-generated character string.
8. The method of claim 5 , wherein generating the encrypted payload comprises converting the message to a UTF-8 encoded format.
9. The method of claim 5 , wherein generating the encrypted payload comprises padding the message to a fixed length.
10. The method of claim 5 , wherein generating the encrypted payload comprises generating a salt.
11. The method of claim 10 , wherein the salt is a random initialization vector.
12. The method of claim 10 , wherein generating the encrypted payload further comprises generating an encryption key based on the password and the salt.
13. The method of claim 12 , wherein generating the encrypted payload further comprises encrypting the message using the encryption key and the salt.
14. A method performed by a computing device, the method comprising:
generating a password at a first device;
making the password available to a second device;
receiving at the first device a Quick Response (QR) code generated by the second device, the QR code comprising an encrypted payload; and
decrypting the encrypted payload based at least in part on the password, wherein decrypting the encrypted payload comprises:
decoding the QR code to obtain the encrypted payload;
identifying, in the encrypted payload, an initialization vector and ciphertext;
providing the password as input to a key derivative function and using the initialization vector as salt to obtain a derived key; and
decrypting the cipertext using the derived key and the initialization vector.
15. A system comprising:
one or more computing devices programmed to perform operations comprising:
receiving an indication that a user has successfully logged into a secure network using existing credentials;
creating a temporary session for the user based on the existing credentials;
generating a Quick Response (QR) code comprising a secure token associated with the temporary session;
providing the QR code for display to the user on a first device such that the user can scan the QR code and authorize a second device for the temporary session based on the secure token, wherein the first device comprises a user input system and the second device has limited user input capability; and
transmitting an encrypted payload to the second device, wherein the encrypted payload is generated based on a password provided by the second device, the password being entered into the first device by the user.
16. The system of claim 15 , wherein generating the temporary session further comprises defining a permitted session length associated with the temporary account.
17. The system of claim 15 , wherein the QR code further comprises information associated with the temporary session, the information comprising at least one of permitted session length and a condition for ending the temporary session.
18. The system of claim 15 , wherein transmitting the encrypted payload to the second device comprises providing a second QR code for scanning by the second device, wherein the second QR code comprises the encrypted payload.
19. A system comprising:
one or more computing devices programmed to perform operations comprising:
receiving, at a first device, a password generated by a second device, wherein the second device comprises a wearable device;
receiving, at the first device, a message to be transferred to the second device;
generating an encrypted payload based on the password and the message using a symmetric cipher configured such that a Quick Response (QR) code generated based on the encrypted payload does not exceed a length readable by the second device;
generating the QR code based on the encrypted payload; and
providing the QR code for scanning by the second device.
20. The system of claim 19 , wherein the password is inputted into the first device by a user of the first device.
21. The system of claim 19 , wherein the password is a randomly-generated character string.
22. The system of claim 19 , wherein generating the encrypted payload comprises converting the message to a UTF-8 encoded format.
23. The system of claim 19 , wherein generating the encrypted payload comprises padding the message to a fixed length.
24. The system of claim 19 , wherein generating the encrypted payload comprises generating a salt.
25. The system of claim 24 , wherein the salt is a random initialization vector.
26. The system of claim 24 , wherein generating the encrypted payload further comprises generating an encryption key based on the password and the salt.
27. The system of claim 26 , wherein generating the encrypted payload further comprises encrypting the message using the encryption key and the salt.
28. A system comprising:
one or more computing devices programmed to perform operations comprising:
generating a password at a first device;
making the password available to a second device;
receiving at the first device a Quick Response (QR) code generated by the second device, the QR code comprising an encrypted payload; and
decrypting the encrypted payload based at least in part on the password, wherein decrypting the encrypted payload comprises:
decoding the QR code to obtain the encrypted payload;
identifying, in the encrypted payload, an initialization vector and ciphertext;
providing the password as input to a key derivative function and using the initialization vector as salt to obtain a derived key; and
decrypting the cipertext using the derived key and the initialization vector.