Configuring, controlling and monitoring computers using mobile devices

• US 10,091,197 B2
• Filed: 01/06/2016
• Issued: 10/02/2018
• Est. Priority Date: 01/16/2015
• Status: Active Grant

• Current Assignee: Digimarc Corporation
• Original Assignee: Digimarc Corporation
• Inventors: Rhoads, Geoffrey B., Cavender, David L., Bickel, Joshua
• Primary Examiner(s): Armouche, Hadi S
• Assistant Examiner(s): Naghdali, Khalil
• Application Number:
  US14/989,594
• Publication Number:
  US 20160212103A1
• Time in Patent Office: 1,000 Days
• Field of Search: 713169
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A portable computing device captures imagery from a screen of a second computer, decodes information steganographically-encoded in the screen display, and uses the decoded information to establish a secure session with the second computer. Such technology enables a help-desk staffer to interact with a client'"'"'s desktop computer, without touching the keyboard of the desktop computer, and without interrupting the client'"'"'s work. A great many other features and arrangements are also detailed.

Claims

1. A method employing two computer systems, the first computer system including a display screen and a keyboard, the second computer system including a display screen and a camera, the method comprising acts of:

(a) capturing imagery from the display screen of the first computer system with the camera of the second computer system, while the display screen of the first computer system presents on-going work by a user thereof;

(b) by reference to the captured imagery, determining first key data by applying a steganographic decoding process to the captured imagery to extract the first key data therefrom;

(c) at the second computer system, encrypting a message using said first key data, and transmitting the encrypted message to the first computer system; and

(d) as a consequence of said transmitting, receiving diagnostic information from the first computer system at the second computer system, and presenting said diagnostic information on the display screen of the second computer system;

wherein the display screen of the first computer system is used in obtaining diagnostic information for said first computer system, without removing the user'"'"'s on-going work from the first computer system display screen, and without use of the first computer system keyboard.

2. The method of claim 1 that further includes:

the first computer decrypting the message;

the first computer confirming that an identifier in the decrypted message is found on a list of identifiers stored in the first computer; and

transmitting said diagnostic information after said confirming.

3. The method of claim 1 in which the diagnostic information includes one or more elements of user information, and one or more elements of system information.

4. The method of claim 3 in which the one or more elements of user information includes at least one item selected from the list:

identification of the user and the user'"'"'s domain, user account expiration data, user password expiration data, a date the user password was last reset, identification of user profiles on the first computer, local and group policies applied on the first computer, and an organization unit location with which the first computer is associated.

5. The method of claim 4 in which the one or more elements of user information includes two or more items selected from said list.

6. The method of claim 3 in which the one or more elements of system information includes at least one item selected from the list:

data identifying the first computer'"'"'s operating system, and its version or service pack, network settings, IP address, MAC address, default gateway, programs configured to launch on startup, hardware specifications, a list of installed programs, identification of an active anti-virus client, locals certificates, shared folders on the first computer, disk performance information, locally-installed printers, and event viewer and login viewer information.

7. The method of claim 6 in which the one or more elements of system information includes two or more items selected from said list.

8. The method of claim 1 in which act (b) includes determining first public key data corresponding to the first computer system.

9. The method of claim 8 in which the message includes second public key data different than the first public key data, the second public key data corresponding to the second computer system.

10. The method of claim 9 that includes receiving the diagnostic information in encrypted form, and decrypting the received diagnostic information using second private key data that corresponds to said second public key data.

11. The method of claim 1 that includes authenticating the first computer to the second computer, and authenticating the second computer to the first computer, to establish mutual certification.

12. The method of claim 1 in which act (b) comprises the acts:

extracting identification data from the captured imagery; and

accessing a data structure to determine first public key data for the first computer system that corresponds to said extracted identification data.

13. The method of claim 1 that further includes presenting one or more messages on the first computer display screen, indicating the first computer system is involved in a transaction with the second computer system.

14. The method of claim 13 in which a notification message indicates that the first computer system has received the encrypted first message.

15. The method of claim 13 in which a notification message indicates that the first computer system has transmitted diagnostic information for presentation on the display of the second computer system.

16. The method of claim 1 that includes collecting said diagnostic information using a previously authored script.

17. The method of claim 1 in which the first computer includes plural scripts stored therein, and one of said stored scripts is selected for execution based on identification of a person using the second computer.

18. The method of claim 1 in which the first key data is encoded in a steganographic watermark pattern presented on the display screen of the first computer system, wherein presentment of said steganographic watermark pattern on said display screen is effected (a) by application software that overlays a window across the screen, presenting a low opacity watermark pattern, (b) by an operating system of the first computer system, which impresses a subtle pattern on imagery written to a display buffer of the first computer system, (c) by video driver electronics that alters displayed image data to introduce the steganographic watermark pattern, or (d) by texturing a surface of the display screen to introduce a computer-discernible pattern in rendered screen imagery.

19. A non-transitory computer readable medium containing software instructions enabling a camera-equipped computer to obtain diagnostic information from a user'"'"'s computer, without removing on-going work of the user from a display screen of the user'"'"'s computer, and without employing a keyboard of the user'"'"'s computer, said instructions being operative to configure the camera-equipped computer to:

capture imagery of the user'"'"'s on-going work from the display screen of the user'"'"'s computer;

process the captured imagery of the user'"'"'s on-going work to determine first key data by applying a steganographic decoding process to the captured imagery to extract the first key data therefrom;

encrypt a message using said first key data, and transmit the encrypted message to the user'"'"'s computer; and

as a consequence of said transmission, receive diagnostic information from the user'"'"'s computer, and present said diagnostic information on a display screen of the camera-equipped computer.

20. A computer device for obtaining diagnostic information from a user'"'"'s computer, said device including:

a camera;

a screen;

one or more processors;

a memory containing software instructions configuring the one or more processors to enable the device to perform acts including;

capture imagery of the user'"'"'s on-going work from a display of the user'"'"'s computer;

process the captured imagery of the user'"'"'s on-going work to determine first key data by applying a steganographic decoding process to the captured imagery to extract the first key data therefrom;

encrypt a message using said first key data, and transmit the encrypted message to the user'"'"'s computer; and

as a consequence of said transmission, receive diagnostic information from the user'"'"'s computer, and present said diagnostic information on the screen of the device;

wherein the device is capable of obtaining diagnostic information from the user'"'"'s computer without removing on-going work of the user from the display of the user'"'"'s computer, and without employing a keyboard of the user'"'"'s computer.