Method and system to authenticate a user when accessing a service

• US 20030101347A1
• Filed: 11/27/2001
• Published: 05/29/2003
• Est. Priority Date: 11/27/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Company (HP Inc.)
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Letsinger, Reed
• Application Number:
  US09/996,968
• Publication Number:
  US 20030101347A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A method and system to authenticate a user accessing a service are disclosed. In one method embodiment, the present invention activates a first communication device to communicate with the service. Further, the present embodiment stores an identifier in a second communications device, wherein the second communications device has a wireless signal strength for transmitting the identifier. Moreover, the present embodiment accesses the service by the first communication device only so long as the first communication device remains within range of the second communication device.

Claims

1. A method to authenticate a user accessing a service, said method comprising:

activating a first communication device, to communicate with said service;

storing an identifier in a second communications device, wherein said second communications device has a wireless signal strength for transmitting said identifier; and

accessing said service by said first communication device, only so long as said first communication device remains within range of said second communications device.

2. The method as recited in claim 1, wherein said first communication device requires a device identifier from said second communications device.

3. The method as recited in claim 2, wherein said first communication device requires a location proximal to said second communications device in order to receive said device identifier.

4. The method as recited in claim 2, wherein said first communication device can store only one said device identifier at a time.

5. The method as recited in claim 1, wherein said second communications device has a reduced said wireless signal strength.

6. The method as recited in claim 1, wherein said second communications device provides a user identification to said first communication device.

7. The method as recited in claim 6, wherein said second communications device provides said user identification to said first communication device only upon initial access to said service by said first communication device.

8. The method as recited in claim 6, wherein said second communications device provides said user identification to said first communication device intermittently upon access to said service by said first communication device.

9. The method as recited in claim 6, wherein said second communications device provides said user identification to said first communication device constantly upon access to said service by said first communication device.

10. A user authentication system comprising:

a first communication device;

a second communications device having a signal strength for wirelessly transmitting an identifier stored within said second communications device; and

a service which performs functions according to the user, wherein said service only performs said functions so long as said first communication device remains within range of said signal strength of said second communications device.

11. The system as recited in claim 10, wherein said first communication device requires a device identifier from said second communications device.

12. The system as recited in claim 11, wherein said first communication device requires a location proximal to said second communications device in order to receive said device identifier.

13. The system as recited in claim 11, wherein said first communication device can store only one said device identifier at a time.

14. The system as recited in claim 10, wherein said second communications device has a reduced said wireless signal strength.

15. The system as recited in claim 10, wherein said second communications device can be worn.

16. The system as recited in claim 10, wherein said second communications device can be carried in a wallet.

17. The system as recited in claim 10, wherein said second communications device has a reduced said wireless signal strength.

18. The system as recited in claim 10, wherein said second communications device provides a user identification to said first communication device.

19. The system as recited in claim 18, wherein said second communications device provides said user identification to said first communication device only upon initial access to said service by said first communication device.

20. The system as recited in claim 18, wherein said second communications device provides said user identification to said first communication device intermittently upon access to said service by said first communication device.

21. The system as recited in claim 18, wherein said second communications device provides said user identification to said first communication device constantly upon access to said service by said first communication device.