Techniques and system for extended authentication

• US 10,375,081 B2
• Filed: 08/13/2014
• Issued: 08/06/2019
• Est. Priority Date: 08/13/2014
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Anderson, Glen J.
• Primary Examiner(s): Thiaw, Catherine
• Application Number:
  US14/459,216
• Publication Number:
  US 20160050204A1
• Time in Patent Office: 1,819 Days
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses

Abstract

An apparatus may include a memory to store authentication information for authenticating to a device group and a wearable device identifier for an unauthenticated device, a communications interface to transmit a probe signal over a local communication path and receive a reply message to the probe signal, and a device authentication module. The device authentication module may be to monitor the reply message, and schedule transmission of the authentication information over the local communication path when the reply message comprises the device identifier and a proximity indicator that identifies a local origin of the reply message.

Claims

1. An apparatus, comprising:

a processor;

a communication interface coupled to the processor;

a local communication path interface coupled to the processor; and

memory coupled to the processor, the memory comprising a device identifier and instructions that when executed by the processor cause the processor to;

transmit, via the communication interface, a message to a device group authentication device, the message comprising an indication of the device identifier;

receive, via the communication interface, a return message from the device group authentication device, the return message comprising an indication of authentication information for the device group, the authentication information to allow communication, via the communication interface, with one or more devices of the device group without manually entering authentication information;

transmit, over a local communication path via the local communication path interface, a first probe signal, the first probe signal to ping for additional devices to authenticate to the device group;

receive, over the local communication path via the local communication path interface, a reply message from an additional device, the reply message responsive to the first probe signal;

determine whether the additional device is proximate to the apparatus based at least in part on the local communication path and the reply message; and

transmit, over the local communication path via the local communication path interface, an authentication message based on a determination that the additional device is proximate to the apparatus, the authentication message comprising the indication of the authentication information to allow the additional device to communicate, via the communication interface, with one or more devices of the device group without manually entering authentication information.

2. The apparatus of claim 1, the local communication path comprising an electrically conductive surface.

3. The apparatus of claim 2, the electrical conductive surface is a skin surface of a user of the apparatus and the additional device.

4. The apparatus of claim 1, the memory comprising instructions that when executed by the processor further cause the processor to:

generate a user query responsive to receipt of the reply message;

receive a user authorization message responsive to the user query; and

transmit the authentication message responsive to the determination that the additional device is proximate to the apparatus or responsive to receiving the user authorization message.

5. The apparatus of claim 1, the memory comprising instructions that when executed by the processor further cause the processor to generate an operation signal when in an operating configuration.

6. The apparatus of claim 5, the memory comprising instructions that when executed by the processor further cause the processor to generate the first probe signal when the operation signal is received.

7. The apparatus of claim 5, the memory comprising instructions that when executed by the processor further cause the processor to repeatedly scan for a signal over the local communication path interface when the operation signal is received.

8. The apparatus of claim 1, the memory comprising instructions that when executed by the processor further cause the processor to:

transmit, via the local communication path interface, a second probe signal over a local communication path, the second probe signal to ping for additional devices to authenticate to the device group;

receive, over the local communication path via the local communication path interface, a reply message from a second additional device;

determine whether to authenticate the second additional device to the device group based in part on the reply message; and

transmit, over the local communication path via the local communication path interface, an second authentication message based on a determination to authenticate the second additional device to the device group, the second authentication message comprising an indication of the authentication information to allow the second additional device to communicate with one or more devices of the device group without manually entering authentication information.

9. The apparatus of claim 8, the reply message from the second additional device comprising an indication of biometric information, the memory comprising instructions that when executed by the processor further cause the processor to determine whether to authenticate the second additional device to the device group based in part on the biometric information.

10. At least one non-transitory machine-readable storage medium comprising instructions that when executed by a processor at a computing device, cause the processor to:

transmit, via a communication interface, a message to a device group authentication device, the message comprising an indication of a device identifier for the computing device;

receive, via the communication interface, a return message from the device group authentication device, the return message comprising an indication of authentication information for the device group, the authentication information to allow communication, via the communication interface, with one or more devices of the device group without manually entering authentication information;

transmit, over a local communication path via a local communication path interface, a first probe signal, the first probe signal to ping for additional devices to authenticate to the device group;

receive, over the local communication path via the local communication path interface, a reply message from an additional device;

determine whether the additional device is proximate to the computing device based at least in part on the local communication path and the reply message; and

transmit, over the local communication path via the local communication path interface, an authentication message based on a determination that the additional device is proximate to the computing device, the authentication message comprising the indication of the authentication information to allow the additional device to communicate, via the communication interface, with one or more devices of the device group without manually entering authentication information.

11. The at least one non-transitory machine-readable storage medium of claim 10, the local communication path comprising an electrically conductive surface.

12. The at least one non-transitory machine-readable storage medium of claim 11, the electrically conductive surface is a skin surface of a user of the computing device and the additional device.

13. The at least one non-transitory machine-readable storage medium of claim 10, comprising instructions that when executed by the computing device, cause the computing device to:

generate a user query responsive to receipt of the reply message;

receive a user authorization message responsive to the user query; and

transmit the authentication message responsive to the determination that the additional device is proximate to the apparatus or responsive to receiving the user authorization message.

14. The at least one non-transitory machine-readable storage medium of claim 10, the comprising instructions that when executed by the computing device further cause the computing device to:

transmit, via the local communication path interface, a second probe signal over a local communication path, the second probe signal to ping for additional devices to authenticate to the device group;

receive, over the local communication path via the local communication path interface, a reply message from a second additional device;

determine whether to authenticate the second additional device to the device group based in part on the reply message; and

transmit, over the local communication path via the local communication path interface, an second authentication message based on a determination to authenticate the second additional device to the device group, the second authentication message comprising an indication of the authentication information to allow the second additional device to communicate with one or more devices of the device group without manually entering authentication information.

15. The at least one non-transitory machine-readable storage medium of claim 14, the reply message from the second additional device comprising an indication of biometric information, the medium comprising instructions that when executed by the computing device further cause the computing device to determine whether to authenticate the second additional device to the device group based in part on the biometric information.

16. A computer implemented method, comprising:

transmitting, from a computing device via a communication interface, a message to a device group authentication device, the message comprising an indication of a device identifier for the computing device;

receiving, at the computing device via the communication interface, a return message from the device group authentication device, the return message comprising an indication of authentication information for the device group, the authentication information to allow communication, via the communication interface, with one or more devices of the device group without manually entering authentication information;

transmitting, over a local communication path via a local communication path interface, a first probe signal to ping for additional devices to authenticate to the device group;

receiving, over the local communication path via the local communication path interface, a reply message from an additional device;

determining whether the additional device is proximate to the computing device based at least in part on the local communication path and the reply message; and

transmitting, over the local communication path via the local communication path interface, an authentication message based on a determination that the additional device is proximate to the computing device, the authentication message comprising the indication of the authentication information to allow the additional device to communicate, via the communication interface, with one or more devices of the device group without manually entering authentication information.

17. The computer implemented method of claim 16, the local communication path comprising an electrically conductive surface.

18. The computer implemented method of claim 17, the electrically conductive surface is a skin surface of a user of the computing device and the additional device.

19. The computer implemented method of claim 16, comprising:

generating a user query responsive to receipt of the reply message;

receiving a user authorization message responsive to the user query; and

transmitting the authentication message responsive to the determination that the additional device is proximate to the apparatus or responsive to receiving the user authorization message.

20. The computer implemented method of claim 16, comprising:

transmitting, via the local communication path interface, a second probe signal over a local communication path, the second probe signal to ping for additional devices to authenticate to the device group;

receiving, over the local communication path via the local communication path interface, a reply message from a second additional device;

determining whether to authenticate the second additional device to the device group based in part on the reply message; and

transmitting, over the local communication path via the local communication path interface, an second authentication message based on a determination to authenticate the second additional device to the device group, the second authentication message comprising an indication of the authentication information to allow the second additional device to communicate with one or more devices of the device group without manually entering authentication information.

21. The computer implemented method of claim 20, the reply message from the second additional device comprising an indication of biometric information, the method comprising determining whether to authenticate the second additional device to the device group based in part on the biometric information.