Keyless access to laptop

• US 10,110,568 B2
• Filed: 02/03/2016
• Issued: 10/23/2018
• Est. Priority Date: 02/03/2016
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Gosain, Rohit, Hamlin, Daniel L.
• Primary Examiner(s): Kabir, Jahangir
• Application Number:
  US15/014,599
• Publication Number:
  US 20170222982A1
• Time in Patent Office: 993 Days
• Field of Search: 713168-169, 713170, 726 9, 726 22
• CPC Class Codes: A61B 17/24 for use in the oral cavity, larynx, bronchial passages or nose for medical inspection of cavities or tubes in the body A61B1/00; Tongue scrapers
• CPC Class Codes: A61B 2018/00035 with return means
• CPC Class Codes: A61B 2018/2005 with beam delivery through an interstitially insertable device, e.g. needle
• CPC Class Codes: A61B 2018/202 Laser enclosed in a hand-piece
• CPC Class Codes: A61B 2034/2061 using shape-sensors, e.g. fiber shape sensors with Bragg gratings
• CPC Class Codes: A61B 2034/301 for introducing or steering flexible instruments inserted into the body, e.g. catheters or endoscopes
• CPC Class Codes: A61B 34/20 Surgical navigation systems; Devices for tracking or guiding surgical instruments, e.g. for frameless stereotaxis
• CPC Class Codes: A61B 34/30 Surgical robots
• CPC Class Codes: G01B 11/24 for measuring contours or curvatures
• CPC Class Codes: G01D 5/35316 using a Bragg gratings
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method including transmitting, by a mobile device, a first encrypted gadget token over a wireless link to an Information Handling System (IHS). The method further including transmitting, by the IHS, an encrypted system token based on the first decrypted gadget token over the wireless link to the mobile device, transmitting, by the mobile device, a second encrypted gadget token based on the decrypted system token over the wireless link to the IHS, authenticating, by the IHS, the second decrypted gadget token, and unlocking the IHS based on the second authenticated gadget token.

Claims

1. A method comprising:

transmitting, by a mobile device, an authentication request to a cloud information handling system (IHS) to determine that the mobile device is authorized to unlock a node IHS;

determining, by the mobile device, that the node IHS is within range of a near field communication interface of the mobile device;

transmitting, by the mobile device, an encrypted gadget token over the wireless interface between the mobile device and the node IHS in response to determining that the node IHS is within range;

transmitting, by the node IHS, an encrypted cloud token based on the encrypted gadget token over a communication link between the node IHS and a cloud IHS;

authenticating, by the cloud IHS, the encrypted cloud token;

transmitting, by the cloud IHS, an encrypted authentication token based on the encrypted cloud token over the communication link to the node IHS;

verifying, by the node IHS, that the transmission of the encrypted gadget token is from the mobile device;

authenticating, by the node IHS, the encrypted authentication token; and

unlocking the node IHS based on the authenticating of the encrypted authentication token.

2. The method of claim 1, further comprising:

creating a gadget token prior to transmitting the encrypted gadget token.

3. The method of claim 2, further comprising:

decrypting, by the node IHS, the encrypted gadget token to obtain the gadget token; and

creating a cloud token based on the gadget token prior to transmitting the encrypted cloud token.

4. The method of claim 2, further comprising:

storing, by the mobile device, the gadget token at a registered token store of the mobile device.

5. The method of claim 1, wherein the wireless link comprises one of a WI-FI link, a Bluetooth link, a Bluetooth Low Energy (BLE) link, and a Near Field Communication (NFC) link.

6. A wireless authentication system comprising:

a mobile device having a first wireless communication module; and

a node Information Handling System (IHS) having a second wireless communication module to provide a wireless link to the mobile device via the first wireless communication module;

wherein the mobile device is configured to;

transmit an authentication request to a cloud IHS to determine that the mobile device is authorized to unlock the node IHS;

determine that the node IHS is within range of a near field communication interface of the mobile device; and

transmit an encrypted gadget token over the wireless link to the IHS in response to determining that the node IHS is within range;

wherein the node IHS is configured to transmit an encrypted cloud token based on the encrypted gadget token over a communication link to an authentication system, to receive an encrypted authentication token over the communication link from the authentication system, to verify that the transmission of the encrypted gadget token is from the mobile device, and to unlock the node IHS based on the encrypted authentication token, wherein the encrypted authentication token is based on the encrypted cloud token.

7. The wireless authentication system of claim 6, the mobile device further configured to create a gadget token prior to the transmission of the encrypted gadget token.

8. The wireless authentication system of claim 7, the node IHS further configured to:

decrypt the encrypted gadget token to obtain the gadget token; and

create the encrypted cloud token based on the gadget token prior to transmitting the encrypted cloud token.

9. The wireless authentication system of claim 7, the mobile device further configured to store the gadget token at a registered token store of the mobile device.

10. The wireless authentication system of claim 6, wherein the wireless link comprises one of a Wi-Fi link, a Bluetooth link, a Bluetooth Low Energy (BLE) link, and a Near Field Communication (NFC) link.

11. A wireless authentication system comprising:

a mobile device;

a first information handling system coupled to the mobile device via a first wireless link;

a second information handling system coupled to the mobile device via a second wireless link; and

an authentication system;

wherein the mobile device is configured to;

transmit an authentication request to a cloud IHS to determine that the mobile device is authorized to unlock the first and second information handling systems;

determine that the first information handling system is within range of a near field communication interface of the mobile device;

transmit a first encrypted gadget token over the first wireless link to the first information handling system in response to determining that the first information handling system is within range; and

transmit a second encrypted gadget token over the second wireless link to the second information handling system;

wherein the first information handling system is configured to transmit a first encrypted cloud token based on the first encrypted gadget token over a first communication link to the authentication system;

wherein the second information handling system is configured to transmit a second encrypted cloud token based on the second encrypted gadget token over a second communication link to the authentication system;

wherein the authentication system is configured to;

authenticate the first and second encrypted cloud tokens;

transmit a first encrypted authentication token based on the first encrypted cloud token over the first communication link to the first information handling system; and

transmit a second encrypted authentication token based on the second encrypted cloud token over the second communication link to the second information handling system;

wherein the first information handling system is further configured to verify that the transmission of the first encrypted gadget token is from the mobile device, and to unlock the first information handling system based on the first encrypted authentication token; and

wherein the second information handling system is further configured to unlock the second information handling system based on the second encrypted authentication token.

12. The wireless authentication system of claim 11, the mobile device further configured to:

create a gadget token prior to the transmission of the first encrypted gadget token.

13. The wireless authentication system of claim 12, the first information handling system further configured to:

decrypt the first encrypted gadget token to obtain the gadget token; and

create the first encrypted cloud token based on the gadget token prior to transmitting the first encrypted cloud token.

14. The wireless authentication system of claim 12, the mobile device further configured to:

store the gadget token at a registered token store of the mobile device.