IP Library › Granted Patent US 11,233,779
Granted Patent B2
US 11,233,779 · App. 16/147,688 · Granted Jan 25, 2022

Wireless credential sharing

Inventors: Alexander D. Sanciangco (San Jose, CA); Maureen G. Daum (Mountain View, CA); Richard J. Mondello (Mountain View, CA); Reza Abbasian (Milpitas, CA)
Assignee: Apple Inc.
H04L63/062G06F21/45H04L63/08H04W12/04H04W12/06H04W76/10H04L9/30
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,233,779
App. No.
16/147,688
Granted
Jan 25, 2022
Kind
B2
Abstract

Techniques are disclosed relating to credential sharing for user authentication. In some embodiments, a first computing device maintains a credential manager that stores a plurality of user credentials usable to authenticate a user. The first computing device receives a request from the user to send one of the plurality of user credentials to a second computing device. In response to the request, the first computing device sends the user credential to the second computing device. The second computing device is configured to determine whether an application of the second computing device is presenting an authentication prompt to a user and, in response to determining that the authentication prompt is being presented, populate one or more fields of the authentication prompt with the user credential. In some embodiments, the second computing device is configured to store the user credential in a credential manager maintained by the second computing device.

Claims (61)

1. A non-transitory computer readable medium having program instructions stored therein having program instructions that are executable by a first computing device to perform operations comprising:

receiving a user credential via a wireless interface from a credential manager maintained by a second computing device in response to a user selection by a user of the second computing device;

in response to receiving the user credential, determining whether an application of the first computing device is presenting an authentication prompt to a user of the first computing device;

in response to determining that the authentication prompt is not being presented, storing the received user credential in a credential manager maintained by the first computing device; and

in response to determining that the authentication prompt is being presented to the user of the first computing device, providing the received user credential to authenticate the user of the first computing device.

2. The computer readable medium of claim 1 , wherein the operations further comprise:

in response to determining that an authentication prompt is being presented to the user of the first computing device, populating one or more fields of the presented authentication prompt with the user credential.

3. The computer readable medium of claim 1 , wherein the operations further comprise:

receiving, from the second computing device, a request to convey the user credential to the first computing device; and

establishing a secure wireless connection with the second computing device to receive the user credential.

4. The computer readable medium of claim 3 , wherein the secure wireless connection is an ad-hoc wireless connection.

5. The computer readable medium of claim 3 , wherein the establishing includes:

sending a public key of the first computing device to the second computing device; and

establishing a shared key with the second computing device based on a public key received from the second computing device and a private key corresponding to the sent public key; and

wherein the received user credential is encrypted by the public key of the first computing device and encrypted by the shared key.

6. The computer readable medium of claim 3 , wherein the operations further comprise:

sending, to the second computing device, contact information about the user of the first computing device, wherein the second computing device is configured to determine whether to establish the secure wireless connection based on a comparison of the contact information with contact information maintained by the second computing device.

7. The computer readable medium of claim 3 , wherein the operations further comprise:

receiving, from the second computing device, contact information about the user of the second computing device; and

determining whether to establish the secure wireless connection based on a comparison of the contact information with contact information maintained by the first computing device.

8. The computer readable medium of claim 1 , wherein the operations further comprise:

receiving, from the second computing device, metadata about the user credential; and

using the metadata to determine whether the user credential is relevant to an authentication prompt presented to the user of the first computing device.

9. The computer readable medium of claim 1 , wherein the operations further comprise:

sending metadata about a presented authentication prompt to the second computing device, wherein the metadata is used by the second computing device to determine whether the credential manager includes a user credential relevant to the presented authentication prompt.

10. A method, comprising:

a first computing device maintaining a credential manager that stores a plurality of user authentication credentials for authenticating a user;

the first computing device receiving a user selection from the user to send one of the plurality of user credentials to a second computing device; and

in response to the user selection, the first computing device sending the user credential via a wireless interface to the second computing device, wherein the second computing device is configured to:

determine whether an application of the second computing device is presenting an authentication prompt to a user;

in response to determining that the authentication prompt is not being presented, store the user credential in a credential manager maintained by the second computing device; and

in response to determining that the authentication prompt is being presented to the user of the second computing device, provide the received user credential to authenticate the user of the second computing device.

11. The method of claim 10 , further comprising:

the first computing device sending, to the second computing device, a request to send the user credential to the second computing device; and

the first computing device establishing a secure wireless connection with the second computing device to send the user credential.

12. The method of claim 11 , wherein the secure wireless connection is an ad-hoc wireless connection.

13. The method of claim 11 , wherein the establishing includes:

the first computing device sending a public key of the first computing device to the second computing device; and

the first computing device establishing a shared key with the second computing device based on a public key received from the second computing device and a private key corresponding to the sent public key; and

wherein the sent user credential is encrypted by the public key of the second computing device and encrypted by the shared key.

14. The method of claim 11 , further comprising:

the first computing device receiving, from the second computing device, contact information about a user of the second computing device; and

the first computing device determining whether to establish the secure wireless connection based on a comparison of the contact information with contact information maintained by the first computing device.

15. The method of claim 11 , further comprising:

the first computing device sending, to the second computing device, contact information about a user of the first computing device, wherein the second computing device is configured to determine whether to establish the secure wireless connection based on a comparison of the contact information with contact information maintained by the second computing device.

16. The method of claim 10 , further comprising:

the first computing device sending, to the second computing device, metadata about the user credential, wherein the second computing device is configured to use the metadata to determine whether the user credential is relevant to an authentication prompt.

17. The method of claim 10 , further comprising:

the first computing device receiving metadata about a presented authentication prompt from the second computing device; and

the first computing device using the metadata to determine whether the credential manager includes a user credential relevant to the presented authentication prompt.

18. A first computing device, comprising:

a wireless interface;

a processor;

memory having program instructions stored therein that are executable by the processor to cause the first computing device to perform operations including:

receiving, via the wireless interface, a user credential from a credential manager maintained by a second computing device in response to a selection by a user of the second computing device;

determining whether an application of the first computing device is presenting an authentication prompt to a user of the first computing device;

in response to determining that the authentication prompt is being presented, providing the user credential to authenticate the user of the first computing device in response to the authentication prompt; and

in response to determining that the authentication prompt is not being presented, providing the received user credential to a credential manager of the first computing device for storage.

19. The first computing device of claim 18 , wherein the receiving includes:

receiving, from the second computing device, a request to convey the user credential to the first computing device; and

establishing a secure wireless connection with the second computing device to receive the user credential, wherein the secure wireless connection is an ad-hoc wireless connection.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 4, 2018
From: DAUM, MAUREEN G.
To: APPLE INC.
Reel/Frame 047665/0376 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 29, 2018
From: SANCIANGCO, ALEXANDER D.; MONDELLO, RICHARD J.; ABBASIAN, REZA
To: APPLE INC.
Reel/Frame 047013/0813 →
Continuity (2)
Provisional Application 62679902 · Jun 3, 2018
Related Publication 20190372949A1 · Dec 5, 2019