Supporting auto-logon for multiple devices

• US 20050091539A1
• Filed: 10/26/2004
• Published: 04/28/2005
• Est. Priority Date: 10/28/2003
• Status: Abandoned Application

• Current Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Wang, Zhe Peng, Zhao, Shi Wan, Chi, Chang Yan
• Application Number:
  US10/973,637
• Publication Number:
  US 20050091539A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

Enables multiple devices of a same user to logon automatically. An example of a method includes: registering the user and the user'"'"'s multiple user devices with a Multiple Device Authentication (MDA) apparatus; authenticating at least one of the user'"'"'s registered devices by the MDA apparatus and selecting the authenticated device as a master device; selecting one or more slave devices from the registered user devices; adding the selected master device and one or more selected slave devices to an active device table; if a user device accessing the MDA apparatus is in the active device table, causing the user device logon directly and automatically without first authenticating the user device. Operation of authentication is needed only once to enable user'"'"'s multiple devices to logon the server automatically and conveniently. Seamless switch between different devices can be implemented, resulting in improved single-sign-on solution over the prior art.

Claims

1. A method for enabling multiple user devices of a user to logon automatically, comprising steps of:

registering said user and said user'"'"'s multiple user devices with a Multiple Device Authentication (MDA) apparatus;

authenticating at least one of the user'"'"'s registered devices by said MDA apparatus and selecting said authenticated device as a master device;

selecting at least one slave devices from said registered user devices;

Adding said selected master device and the at least one selected slave devices to an active device table; and

if a user device accessing said MDA apparatus is in said active device table, causing said user device logon directly and automatically without first authenticating said user device.

2. The method according to claim 1, characterized in that:

the step of registering said user with the MDA apparatus further comprises registering said user'"'"'s name, profession, hobbies or customized user information;

the step of registering said multiple user devices with the MDA apparatus further comprises registering each of said multiple devices'"'"' name, device type and the information of security level; and

associating said registered user with at least one registered user devices of said user.

3. The method according to claim 1, characterized in that the step of authenticating at least one of the user'"'"'s registered devices using said MDA apparatus further comprises:

said user device sending a request to the MDA apparatus for authentication;

said MDA apparatus authenticating the user'"'"'s device with at least one authentication methods based on the user device'"'"'s capability information carried in said request, wherein said authentication methods at least includes;

user'"'"'s name/password-based authentication, HTTP-based authentication, form-based authentication, or HTTP client certificate authentication; and

said MDA apparatus sending a confirmation message to said authenticated user devices.

4. The method according to claim 1 further comprising steps of:

if said master device finds there is an unregistered user device, sending an information related to the unregistered user device to MDA apparatus;

said MDA apparatus adding said unregistered user device to a list of user'"'"'s devices, and then sending the updated list of user'"'"'s devices to said user; and

selecting said unregistered devices and adding the selected unregistered devices to the active device table.

5. The method according to claim 1, characterized in that when the user uses another user device to access MDA, said method further comprises steps of:

determining whether said another user device is in the active device table;

if the result of said determining step is “

YES”

, then causing said another user device to pass the authentication of the MDA apparatus automatically; and

if the result of said determining step is “

NO”

, then performing the authentication to said other device through said master device.

6. The method according to claim 1 or claim 5, characterized in that the step of performing the authentication to said other device through said master device further comprises:

said MDA apparatus generating a form containing user'"'"'s name, password and comment and sending said form to the user;

said MDA apparatus querying if said user has authenticated user devices based on the user'"'"'s name, comment and blanked password, which are input by said user; and

then sending the comment to said authenticated user device;

confirming another user device on the authenticated user device; and

said MDA apparatus performing authentication for another user device automatically according to the confirmation message.

7. The method according to claim 6, characterized in that said another user device is a public device or a user device with lower security level.

12. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for enabling multiple user devices of a user to logon automatically, said method steps comprising the steps of claim 1.

8. A MDA (Multiple Device Authentication) apparatus for enabling a user'"'"'s multiple devices to logon automatically, wherein said multiple devices communicate with said MDA apparatus, the multiple user devices logon at least one servers which provide contents or services via said MDA apparatus, characterized in that said MDA apparatus comprises:

a registration module for receiving registration information of the user and the user'"'"'s at least one user devices, wherein registered user is associated with the registered user'"'"'s devices;

an authentication module for authenticating at least one of the user'"'"'s multiple devices, said authenticated device being identified as master device;

an active devices table storage module for storing the information related to master device and slave devices, wherein the slave devices are referred as at least one user devices selected from the registration module and registered without authentication; and

a device access right arbitration module for inquiring if the device accessing said MDA apparatus is in activate device table, and causing said user device to logon automatically when said user device is in activate device table.

9. The apparatus according to claim 8, wherein said authentication module uses at least one of the following authentication methods including user'"'"'s name/password-based authentication, HTTP-based authentication, form-based authentication, HTTP client certificate authentication to authenticate said user devices.

10. The apparatus according to claim 8 further comprising:

a user'"'"'s device profile storage module for storing information related to user'"'"'s multiple devices, wherein said information includes device name, device type and security level; and

a user profile storage module for storing information related to the users, wherein said information includes user'"'"'s name, profession, hobbies and customized user information.

11. The apparatus according to claim 8, characterized in that said authentication module is further used to generate a HTTP response which is sent to said user, wherein said response contains the user devices stored in said activate device table and can logon in the name of said user.

13. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing enablement of multiple user devices of a user to logon automatically, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of:

registering said user and said user'"'"'s multiple user devices with a Multiple Device Authentication (MDA) apparatus;

authenticating at least one of the user'"'"'s registered devices by said MDA apparatus and selecting said authenticated device as a master device;

selecting at least one slave devices from said registered user devices;

Adding said selected master device and the at least one selected slave devices to an active device table; and

if a user device accessing said MDA apparatus is in said active device table, causing said user device logon directly and automatically without first authenticating said user device.

18. An article of manufacture as recited in claim 13, the computer readable program code means in said article of manufacture wherein:

the step of registering said user with the MDA apparatus further comprises registering said user'"'"'s name, profession, hobbies or customized user information;

the step of registering said multiple user devices with the MDA apparatus further comprises registering each of said multiple devices'"'"' name, device type and the information of security level; and

further comprising computer readable program code means for causing a computer to effect associating said registered user with at least one registered user devices of said user.

14. A computer program product comprising a computer usable medium having computer readable program code means embodied therein for causing functions of an MDA (Multiple Device Authentication) apparatus for enabling a user'"'"'s multiple devices to logon automatically, wherein said multiple devices communicate with said MDA apparatus, the multiple user devices logon at least one servers which provide contents or services via said MDA apparatus, the computer readable program code means in said computer program product comprising computer readable program code means for causing a computer to effect:

a registration module for receiving registration information of the user and the user'"'"'s at least one user devices, wherein registered user is associated with the registered user'"'"'s devices;

an authentication module for authenticating at least one of the user'"'"'s multiple devices, said authenticated device being identified as master device;

an active devices table storage module for storing the information related to master device and slave devices, wherein the slave devices are referred as at least one user devices selected from the registration module and registered without authentication; and

a device access right arbitration module for inquiring if the device accessing said MDA apparatus is in activate device table, and causing said user device to logon automatically when said user device is in activate device table.

15. A computer program product as recited in claim 14, wherein said authentication module uses at least one of the following authentication methods including user'"'"'s name/password-based authentication, HTTP-based authentication, form-based authentication, HTTP client certificate authentication to authenticate said user devices.

16. A computer program product as recited in claim B 1, the computer readable program code means in said computer program product further comprising computer readable program code means for causing a computer to effect a user'"'"'s device profile storage module for storing information related to user'"'"'s multiple devices, wherein said information includes device name, device type and security level;

and

a user profile storage module for storing information related to the users, wherein said information includes user'"'"'s name, profession, hobbies and customized user information.

17. A computer program product as recited in claim B1, wherein said authentication module is further used to generate a HTTP response which is sent to said user, wherein said response contains the user devices stored in said activate device table and can logon in the name of said user.

19. An article of manufacture as recited in claim Al, the computer readable program code means in said article of manufacture wherein:

the step of authenticating at least one of the user'"'"'s registered devices using said MDA apparatus further comprises;

said user device sending a request to the MDA apparatus for authentication;

said MDA apparatus authenticating the user'"'"'s device with at least one authentication methods based on the user device'"'"'s capability information carried in said request, wherein said authentication methods at least includes;

user'"'"'s name/password-based authentication, HTTP-based authentication, form-based authentication, or HTTP client certificate authentication; and

said MDA apparatus sending a confirmation message to said authenticated user devices.

20. An article of manufacture as recited in claim A1, the computer readable program code means in said article of manufacture further comprising computer readable program code means for causing a computer to effect steps of:

if said master device finds there is an unregistered user device, sending an information related to the unregistered user device to MDA apparatus;

said MDA apparatus adding said unregistered user device to a list of user'"'"'s devices, and then sending the updated list of user'"'"'s devices to said user; and

selecting said unregistered devices and adding the selected unregistered devices to the active device table.