Indirect authentication

• US 10,484,384 B2
• Filed: 08/29/2016
• Issued: 11/19/2019
• Est. Priority Date: 09/29/2011
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Cotterill, Stephen H.
• Primary Examiner(s): Wright, Bryan F
• Application Number:
  US15/250,152
• Publication Number:
  US 20170054731A1
• Time in Patent Office: 1,177 Days
• Field of Search: 726 4
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Techniques are provided for or granting authorization to restricted content on a display device from an authorizing device. In one embodiment, the display device may operate in a display mode where only unrestricted content is accessible. To access restricted content, the display device may transmit an authorization request signal to the authorizing device. The authorizing device, having received the authorization request, prompts an authorized user to enter an authentication input, such as a password or gesture, on the authorizing device. Upon verification of the authentication input, the authorizing device is authenticated. An authorization signal is transmitted to the display device, and the display device may operate in an authorized mode, having access to otherwise restricted content or functions.

Claims

1. A system, comprising:

a display device comprising a display device processing system coupled to a network, the display device processing system configured to;

operate, by the display device, in a display mode, wherein restricted content is not accessible by the display device when the display device is operating in the display mode;

transmit, from the display device, an authorization request signal over the network to a plurality of authorizing devices, wherein the plurality of authorizing devices includes an authorizing device, and wherein the authorization request signal includes a request to operate in an authorized mode to access the restricted content,

receive, by the display device, an authorization signal over the network, wherein the authorization signal includes authorization to operate in the authorized mode to access the restricted content, and

operate, by the display device, in the authorized mode in response to receiving the authorization signal, wherein restricted content is accessible by the display device when the display device is operating in the authorized mode;

the authorizing device comprising an authorizing device processing system coupled to the network, the authorizing device processing system configured to;

receive, by the authorizing device, the authorization request signal over the network from the display device, and

receive, by the authorizing device, an authentication input to authorize the display device to operate in the authorized mode to access the restricted content, wherein the authentication input is received from a user of the authorizing device to verify the user of the authorizing device by determining whether the authentication input matches stored credentials corresponding to the user of the authorizing device, and wherein the user of the display device and the user of the authorizing device are different users; and

a server comprising a server processing system coupled to the network, the server processing system configured to transmit, from the server, the authorization signal to the display device over the network if the authentication input matches the stored credentials corresponding to the user of the authorizing device.

2. The system of claim 1, wherein at least one of the display device and the authorizing device further comprises a touch screen.

3. The system of claim 1, wherein the display device processing system is configured to operate in a ready mode before operating in the authorized mode, wherein the display device processing system is configured to receive and process the authorization signal while operating in the ready mode.

4. The system of claim 3, wherein the display device processing system is configured to operate in the ready mode upon receiving a ready-mode input.

5. The system of claim 4, wherein the display device processing system is configured to transmit an authorization request signal upon receiving the ready-mode input.

6. The system of claim 1, wherein the authorizing device processing system is configured to prompt for the authentication input on the authorizing device in response to receiving the authorization request signal.

7. The system of claim 1, wherein the authorizing device processing system is configured to produce an indication in response to receiving an authorization request signal from the display device, wherein the indication comprises an audio indication, a visual indication, or a combination thereof.

8. The system of claim 1, wherein the authorizing device processing system is configured to receive the authentication input for verifying an identity of the user of the authorizing device.

9. The system of claim 8, wherein the server comprises an authentication server and wherein the server processing system is configured to verify the identity of the user of the authorizing device bused on the authentication input.

10. The system of claim 9 wherein the server further comprises an application server and wherein the server processing system is configured to receive authentication data from the authentication server and transmit the authorization signal based on the authentication data.

11. The system of claim 1, wherein the authorizing device processing system is configured to receive the authorization request signal from the display device and request the authentication input from the user of the authorizing device in response to receiving the authorization request signal.

12. An indirect authorization system, comprising:

a display device, wherein the display device is configured to;

operate, by the display device, in a display mode where restricted content is not accessible by the display device,

transmit, from the display device, a request signal to a plurality of authorizing devices before entering an authorized mode where a portion of the restricted content is accessible by the display device, wherein the plurality of authorizing devices includes an authorizing device, and wherein the request signal includes a request to operate in the authorized mode to access the restricted content,

receive, by the display device, an authorization signal, wherein the authorization signal includes authorization to operate in the authorized mode to access the restricted content, and

operate, by the display device, in the authorized mode in response to receiving the authorization signal;

the authorizing device configured to;

receive, by the authorizing device, the request signal from the display device and

receive, by the authorizing device, an authentication input from a user of the authorizing device to verify the user of the authorizing device by determining whether the authentication input matches stored credentials corresponding to the user of the authorizing device, wherein the user of the display device and the user of the authorizing device are different users;

a server configured to;

receive, by the server, the authentication input from the authorizing device,

authenticate, by the server, the authentication input by determining that the authenticate input matches the stored credentials corresponding to the user of the authorizing device, and

transmit, from the server, the authorization signal to the display device; and

a wireless network configured to support communication between the display device, the authorizing device, and the server.

13. The indirect authorization system of claim 12, wherein the authorizing device is configured to queue received request signals from a plurality of display devices.

14. The indirect authorization system of claim 12, wherein the display device is configured to select one of a plurality of authorizing devices for transmitting the request signal.

15. The indirect authorization system of claim 12, wherein the request signal is one of an optical signal and an audio signal.

16. The indirect authorization system of claim 15, wherein the authorizing device comprises a camera configured to detect the optical signal.

17. A method, comprising:

operating a display device in display mode, wherein restricted content is not accessible by the display device when the display device is operating in the display mode;

transmitting, by the display device, an authorization request signal to a plurality of authorizing devices, wherein the plurality of authorizing devices includes an authorizing device, and wherein the authorization request signal includes a request to operate in an authorized mode to access the restricted content;

receiving an authentication input at an authorizing device from a user of the authorizing device to verify the user of the authorizing device by determining whether the authentication input matches stored credentials corresponding to the user of the authorizing device, wherein the user of the display device and the user of the authorizing device are different users;

wirelessly transmitting an authorization signal to the display device from a device external to the display device if the authentication input matches the stored credentials corresponding to the user of the authorizing device, wherein the authorization signal includes authorization to operate in the authorized mode to access the restricted content; and

operating the display device in an authorized mode after the display device receives the authorization signal, wherein operating the display device in the authorized mode comprises accessing some or all of the restricted content by the user.

18. The method of claim 17, comprising operating the display device in a ready mode in response to receiving a ready-mode input on the display device.

19. The method of claim 18, comprising transmitting an authorization request from display device to the authorizing device when the display device is operating in the ready mode.

20. The method of claim 17, comprising authenticating the authentication input by comparing the authentication input to an account database in an authentication server.