IP Library Granted Patent US 12,273,353
Granted Patent B2
US 12,273,353 · App. 17/655,342 · Granted Apr 8, 2025

Remote authentication and local control of enterprise devices

Inventors: Joseph H. Lang (Webster, NY); Timothy L. Dioguardi (Webster, NY); Fadi G. Rouhana (Fairport, NY); Paul F. Brown, II (Webster, NY); Scott C. Van Scooter (Chatham, IL)
Assignee: Xerox Corporation
H04L63/108G06F21/45H04L63/083
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,273,353
App. No.
17/655,342
Granted
Apr 8, 2025
Kind
B2
Abstract

An enterprise owned multi-function device (MFD) is disclosed. For example, the MFD includes, a communication interface to establish a communication session with an authentication server, a re-activation timer, a processor and a non-transitory computer readable medium storing instructions, which when executed by the processor, cause the processor to authenticate the enterprise owned MFD over the communication session when the enterprise owned MFD is activated at a remote location of an employee, create a local account of the employee for local authentication, and authorize access to the employee via the local account of the employee until the re-activation timer expires.

Claims (61)

1. An enterprise owned multi-function device (MFD), comprising:

a communication interface to establish a communication session with an authentication server;

a re-activation timer;

a processor; and

a non-transitory computer readable medium storing instructions which, when executed by the processor, cause the processor to:

authenticate the enterprise owned MFD by transmitting an employee username, a password and a global positioning system (GPS) location of the enterprise owned MFD to the authentication server over the communication session when the enterprise owned MFD is activated at a remote location of an employee;

activate the re-activation timer for a time limit for allowing an access to the enterprise owned MFD by the employee;

create a local account of the employee for a local authentication; and

authorize the access to the employee via the local account of the employee until the time limit of the re-activation timer expires.

2. The enterprise owned MFD of claim 1 , wherein the processor is further to:

transmit a notification to the authentication server when the enterprise owned MFD is activated and authenticated.

3. The enterprise owned MFD of claim 1 , wherein the time limit of the re-activation timer is to begin when the enterprise owned MFD is activated and authenticated.

4. The enterprise owned MFD of claim 1 , wherein the local account comprises a local username and a password.

5. The enterprise owned MFD of claim 1 , wherein the local account comprises an authorization associated with a proximity card of the employee.

6. The enterprise owned MFD of claim 1 , wherein the local account comprises an authorization associated with a mobile endpoint device of the employee.

7. The enterprise owned MFD of claim 1 , further comprises:

a de-activation timer having a second time limit that begins when the time limit of the re-activation timer expires, wherein the processor is further to:

determine an expiration of the second time limit of the de-activation timer.

8. The enterprise owned MFD of claim 7 , wherein the processor is further to:

delete the local account of the employee from the enterprise owned MFD in response to the expiration of the second time limit of the de-activation timer; and

transmit a notification to the authentication server to schedule a pick-up of the enterprise owned MFD from the remote location of the employee.

9. The enterprise owned MFD of claim 7 , wherein the processor is further to:

receive a request from the employee to restart the time limit of the re-activation timer; and

restart the time limit of the re-activation timer in response to the request.

10. The enterprise owned MFD of claim 1 , wherein the processor is further to:

configure the enterprise owned MFD with customizations associated with the employee in response to the enterprise owned MFD being activated and authenticated.

11. A method, comprising:

detecting, via a processor of an enterprise owned multi-function device (MFD), an activation of the enterprise owned MFD;

transmitting, via the processor, a request comprising an employee username, a password and a global positioning system (GPS) location of the enterprise owned MFD to an authentication server for authentication of an employee in response to the activation;

receiving, via the processor, a confirmation of authentication of the employee from the authentication server;

activating a re-activation timer for a time limit for allowing an access to the enterprise owned MFD by the employee;

creating, via the processor, a local account of the employee for a local authentication; and

authorizing, via the processor, the access of the enterprise owned MFD to the employee via the local account of the employee until the time limit of the re-activation timer expires.

12. The method of claim 11 , further comprising:

transmitting, via the processor, a notification to the authentication server when the enterprise owned MFD is activated and authenticated.

13. The method of claim 11 , further comprising:

starting, via the processor, the time limit of the re-activation timer when the enterprise owned MFD is activated and authenticated.

14. The method of claim 11 , wherein the local account comprises a local username and a password.

15. The method of claim 11 , wherein the local account comprises an authorization associated with a proximity card of the employee.

16. The method of claim 11 , wherein the local account comprises an authorization associated with a mobile endpoint device of the employee.

17. The method of claim 11 , further comprising:

starting, via the processor, a second time limit of a de-activation timer in response to the time limit of the re-activation timer expiring;

determining, via the processor, that the second time limit of the de-activation timer has expired;

deleting, via the processor, the local account of the employee from the enterprise owned MFD in response to the determining that the second time limit of the de-activation timer has expired; and

transmitting, via the processor, a notification to the authentication server to schedule a pick-up of the enterprise owned MFD from a remote location of the employee.

18. The method of claim 11 , further comprising:

starting, via the processor, a second time limit of a de-activation timer in response to the time limit of the re-activation timer expiring;

executing, via the processor, a re-authentication before an expiration of the second time limit of the de-activation timer; and

restarting, via the processor, the time limit of the re-activation timer in response to a successful re-authentication of the enterprise owned MFD.

19. The method of claim 11 , further comprising:

configuring, via the processor, the enterprise owned MFD with customizations associated with the employee in response to the enterprise owned MFD being activated and authenticated.

20. An enterprise owned multi-function device (MFD), comprising:

a communication interface to establish a communication session with an authentication server;

a re-activation timer;

a global positioning system (GPS) radio to determine a current location of the enterprise owned MFD;

a processor; and

a non-transitory computer readable medium storing instructions which, when executed by the processor, cause the processor to:

transmit an employee username, a password and a GPS location of the enterprise owned MFD to the authentication server over the communication session to authenticate the enterprise owned MFD when the enterprise owned MFD is activated at a remote location of an employee;

activate the re-activation timer for a time limit for allowing an access to the enterprise owned MFD by the employee upon receiving a confirmation of authentication of the employee from the authentication server;

create a local account of the employee for a local authentication; and

authorize access to the employee via the local account of the employee until the time limit of the re-activation timer expires.

Assignments (7)
SECOND LIEN NOTES PATENT SECURITY AGREEMENT Recorded Jul 2, 2025
From: XEROX CORPORATION
To: U.S. BANK TRUST COMPANY, NATIONAL ASSOCIATION, AS COLLATERAL AGENT
Reel/Frame 071785/0550 →
FIRST LIEN NOTES PATENT SECURITY AGREEMENT Recorded Apr 11, 2025
From: XEROX CORPORATION
To: U.S. BANK TRUST COMPANY, NATIONAL ASSOCIATION, AS COLLATERAL AGENT
Reel/Frame 070824/0001 →
SECURITY INTEREST Recorded Feb 13, 2024
From: XEROX CORPORATION
To: CITIBANK, N.A., AS COLLATERAL AGENT
Reel/Frame 066741/0001 →
SECURITY INTEREST Recorded Nov 20, 2023
From: XEROX CORPORATION
To: JEFFERIES FINANCE LLC, AS COLLATERAL AGENT
Reel/Frame 065628/0019 →
RELEASE OF SECURITY INTEREST IN PATENTS AT R/F 062740/0214 Recorded May 18, 2023
From: CITIBANK, N.A., AS AGENT
To: XEROX CORPORATION
Reel/Frame 063694/0122 →
SECURITY INTEREST Recorded Nov 10, 2022
From: XEROX CORPORATION
To: CITIBANK, N.A., AS AGENT
Reel/Frame 062740/0214 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 12, 2022
From: LANG, JOSEPH H.; DIOGUARDI, TIMOTHY L.; ROUHANA, FADI G.; BROWN, PAUL F.; VAN SCOOTER, SCOTT C.
To: XEROX CORPORATION
Reel/Frame 059575/0642 →