WIRELESS TOKEN DEVICE

• US 20130268687A1
• Filed: 04/09/2012
• Published: 10/10/2013
• Est. Priority Date: 04/09/2012
• Status: Abandoned Application

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Schrecker, Sven
• Application Number:
  US13/442,830
• Publication Number:
  US 20130268687A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing

Abstract

A first computing device is detected as substantially collocated with a wireless token device, using a short-range wireless communication network, and a connection is established between the first computing device and the wireless token device over the short-range wireless network. Authentication data stored in memory of the wireless token device is sent from the wireless token device to the first computing device over the short-range wireless network. The first computing device is authenticated to a particular computing session based on the authentication data and authenticating the first computing device permits the first computing device to participate in the particular computing session.

Claims

1. A method comprising:

detecting a first computing device as substantially collocated with a wireless token device, using a short-range wireless communication network;

establishing a connection between the first computing device and the wireless token device over the short-range wireless network; and

sending authentication data stored in memory of the wireless token device from the wireless token device to the first computing device over the short-range wireless network;

wherein the first computing device is authenticated to a particular computing session based on the authentication data and authenticating the first computing device permits the first computing device to participate in the particular computing session.

2. The method of claim 1, wherein the authentication data is associated with a particular user and authenticates the particular user to the particular computing session.

3. The method of claim 1, wherein the particular computing session is hosted by a server remote from the first computing device and wireless token device.

4. The method of claim 1, further comprising:

detecting a second computing device as substantially collocated with the wireless token device, using a short-range wireless communication network;

establishing a connection between the second computing device and the wireless token device over the short-range wireless network; and

sending authentication data stored in memory of the wireless token device from the wireless token device to the second computing device over a short-range wireless network;

wherein the second computing device is authenticated to the particular computing session based on sent authentication data and authenticating the second computing device permits the second computing device to participate in the particular computing session.

5. The method of claim 4, wherein the first and second computing devices are, at least temporarily, concurrently authenticated to the particular computing session.

6. The method of claim 4, wherein the first computing device is of a first type and the second computing device is of a second type different from the first type.

7. The method of claim 4, wherein at least some of the resources of the particular computing session are consumed by both the first and second computing devices and rendered on the first computing device differently than on the second computing device, wherein respective attributes of the first and second computing devices affect rendering of the resources of the particular computing session.

8. The method of claim 7, wherein attributes of the respective computing device are included in corresponding authentication data.

9. The method of claim 1, wherein authentication of the first computing device to the particular computing session is terminated.

10. The method of claim 9, further comprising determining that the first computing device is no longer substantially collocated with the wireless token device, and termination of the authentication of the first computing device to the particular computing session is based at least in part on the first computing device being no longer substantially collocated with the wireless token device.

11. The method of claim 1, further comprising sending reauthentication data stored in memory of the wireless token device from the wireless token device to the first computing device over the short-range wireless network, wherein the first computing device is reauthenticated to the particular computing session based on the reauthentication data and failure to reauthenticate to the particular computing session causes the first computing device to be removed from the particular computing session.

12. The method of claim 11, wherein the reauthentication data is different from the authentication data.

13. The method of claim 1, wherein the authentication data originates from the wireless token device and is forwarded by the first computing device to a server device hosting the particular computing session.

14. The method of claim 13, wherein the authentication data is encrypted using a public key paired to a private key of the server device.

15. The method of claim 1, wherein the authentication data is hosted on the first computing device and receipt of data from the wireless token authorizes forwarding of the authentication data to a server device hosting the particular computing session.

16. The method of claim 1, wherein the wireless token device is paired to a server device hosting the particular computing session.

17. The method of claim 1, wherein the particular computing session is at least one of a digital streaming media presentation, a session with a remotely hosted software application, and a session interacting with a remotely hosted digital file associated with a user associated with the wireless token device.

18. The method of claim 1, further comprising:

detecting a second computing device as substantially collocated with the wireless token device, using a short-range wireless communication network;

establishing a connection between the second computing device and the wireless token device over the short-range wireless network; and

sending authentication data stored in memory of the wireless token device from the wireless token device to the second computing device over the short-range wireless network;

wherein the second computing device is authenticated to a second computing session hosted by a particular remote server based on the authentication data and authenticating the second computing device permits the second computing device to participate in the second computing session.

19. The method of claim 18, wherein the second computing session is hosted by a second server system different from a first server system hosting the particular computing session.

20. The method of claim 18, wherein the second computing session is active, at least temporarily, concurrently with the first computing session.

21. The method of claim 18, wherein the first computing session is of a type different from that of the second computing session.

22. Logic encoded in non-transitory media that includes code for execution and when executed by a processor is operable to perform operations comprising:

detecting a first computing device as substantially collocated with a wireless token device, using a short-range wireless communication network;

establishing a connection between the first computing device and the wireless token device over the short-range wireless network; and

sending authentication data stored in memory of the wireless token device from the wireless token device to the first computing device over the short-range wireless network;

wherein the first computing device is authenticated to a particular computing session based on the authentication data and authenticating the first computing device permits the first computing device to participate in the particular computing session.

23. A wireless token apparatus comprising:

a processor device;

a memory element;

a short-range wireless network adapter adapted to;

detect a first computing device as substantially collocated with the apparatus, using a short-range wireless communication network;

establish a connection between the first computing device and the apparatus over the short-range wireless network; and

an authentication broker adapted to;

send authentication data stored in the memory element to the first computing device over the short-range wireless network;

wherein the first computing device is authenticated to a particular computing session based on the authentication data and authenticating the first computing device permits the first computing device to participate in the particular computing session.

24. The apparatus of claim 23, wherein the apparatus lacks user interfaces for user interaction with the particular computing session.