METHOD OF PROVIDING A CENTRALISED LOGIN

• US 20070162963A1
• Filed: 12/07/2006
• Published: 07/12/2007
• Est. Priority Date: 01/10/2006
• Status: Abandoned Application

• Current Assignee: Alcatel SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Pfleger, Nicolas, PENET, Xavier
• Application Number:
  US11/608,178
• Publication Number:
  US 20070162963A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

The invention concerns a method and a login server for providing a user with a centralised login procedure. A user has registered in a login server two or more devices he is associated with. The user performs a first login procedure on a first device of the two or more devices. Login data representative of the first login are sent from the first device to the login server. The login server verifies the login data for authentication of the user for the first device. After authentication of the user by the login server, the login server accesses credentials associated with the user for the first device and sends said credentials to the first device to unlock the first device for the user. Further, the login server accesses credentials associated with the user for another device of the two or more devices and sends said credentials to said other device. The sent credentials are used to unlock said other device for the user.

Claims

1. A method of providing a user with a centralised login procedure, the user having registered in a login server two or more devices he is associated with, whereby the method comprises the step of:

performing a first login procedure with the user on a first device of the two or more devices;

sending login data representative of the first login from the first device to the login server;

verifying, by the login server, the login data for authentication of the user for the first device;

after authentication of the user by the login server, accessing credentials associated with the user for the first device and sending said credentials to the first device to unlock the first device for the user; and

accessing, by the login server, credentials associated with the user for another device of the two or more devices and sending said credentials to said other device; and

using the received credentials to unlock said other device for the user.

2. The method of claim 1, wherein the method comprises the further step of:

using a biometric identification method in the first login procedure.

3. The method of claim 1, wherein the method comprises the further steps of:

sending a login request from the other device to the login server when said other device is switched on;

checking whether the user is authenticated for the first device;

sending in response to the login request, from the login server to said other device, credentials associated with the user for said other device if the user is authenticated for the first device.

4. The method of claim 1, wherein the method comprises the further steps of:

activating at the login server a session for the user after authentication of the user for the first device;

sending a login request from the other device to the login server when said other device is switched on;

checking whether an active session for the user exists;

sending in response to the login request, from the login server to said other device, credentials associated with the user for said other device if an active session for the user exists.

5. The method of claim 1, wherein the method comprises the further steps of:

activating at the login server a session for the user after authentication of the user for the first device;

repeatedly sending to the login server an activity report from the unlocked devices for confirming the active session for the user;

holding the session active for the user as long as the session is confirmed active by receipt of said activity reports.

6. The method of claim 1, wherein the method comprises the further steps of:

automatically logging out all of the two or more devices when the user logs out at one device of the two or more devices.

7. The method of claim 1,

wherein the method comprises the further steps of:

periodically sending, from a device to the login server, an inquiry regarding the existence of an active session for the user associated with the device;

activating at the login server a session for the user after authentication of the user for the first device;

if an active session exists on the login server, sending credentials to said device to unlock the device for the user.

8. The method of claim 1, wherein the method comprises the further steps of:

generating random credentials by the login server;

replacing the credentials currently associated with the user for one of the two or more devices by the randomly generated credentials only known to the login server.

9. A login server for providing a user with a centralised login procedure, wherein the login server comprises an interface for enabling communication with the two or more devices, a memory for storage of registration data related to two or more devices the user is associated with, and a control unit adapted to receive login data representative of a first login performed with the user on a first device of the two or more devices from the first device, verify the login data for authentication of the user for the first device, access credentials associated with the user for the first device after authentication of the user, transmit said credentials to the first device to unlock the first device for the user, access credentials associated with the user for another device of the two or more devices, and trigger the transmission of said credentials to the other device to unlock the other device for the user.

10. The login server of claim 9, wherein the login server further comprises a credentials generation unit adapted to generate credentials for one of the two or more devices.