WIRELESS TOKEN AUTHENTICATION

• US 20130268767A1
• Filed: 04/09/2012
• Published: 10/10/2013
• Est. Priority Date: 04/09/2012
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Schrecker, Sven
• Granted Patent: US 8,819,445 B2
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses

Abstract

Authentication data is received, from a first computing device, based on data received by the first computing device from a wireless token device, the authentication data used to authenticate a first user to a particular computing session hosted remote from the first computing device. The first computing device is authenticated to the particular computing session based on the received authentication data. The first computing device is permitted to consume resources of the particular computing session. In some instances, the data received by the first computing device from the wireless token device includes the authentication data.

Claims

1. A method comprising:

receiving, from a first computing device, authentication data based on data received by the first computing device from a wireless token device over a wireless connection between the first computing device and the wireless token device and based at least in part on the wireless token device being in proximity to the first computing device, the authentication data used to authenticate a first user to a particular computing session hosted remote from the first computing device;

authenticating the first computing device to the particular computing session based on the received authentication data; and

permitting the first computing device to consume resources of the particular computing session.

2. The method of claim 1, wherein the authentication data is received from the first computing device at a first instance, the method further comprising:

receiving, from a second computing device at a second instance, the authentication data forwarded by the second computing device from the wireless token device to the server device;

authenticating the second computing device to the particular computing session based on the received authentication data; and

permitting the second computing device to consume resources of the particular computing session.

3. The method of claim 2, terminating participation of the first computing device in the particular computing session.

4. The method of claim 3, wherein the participation of the first computing device is terminated based on a removal of the wireless token device from the first computing device.

5. The method of claim 4, further comprising attempting to re-authenticate the first computing device based on forwarding of additional authentication data received by the first computing device from the wireless token device.

6. The method of claim 4, wherein the termination of the participation of the first computing device is based on termination data received from the first computing device identifying that the first computing device is no longer in communication with the wireless token device.

7. The method of claim 2, wherein both the first and second computing devices are authenticated to the particular computing session at a first instance.

8. The method of claim 2, wherein the first computing device is of a first type and the second computing device is of a second type different from the first type.

9. The method of claim 8, wherein at least some of the resources of the particular computing session are consumed by both the first and second computing devices.

10. The method of claim 9, wherein the first and second computing devices each present the at least some of the resources consumed by both the first and second computing devices.

11. The method of claim 10, wherein the at least some of the resources consumed by both the first and second computing devices are rendered on the first computing device differently than on the second computing device.

12. The method of claim 8, further comprising identifying a type of each device based on authentication data received from the respective device.

13. The method of claim 1, wherein the authentication data originates from the wireless token device and is forwarded by the first computing device to a server device hosting the particular computing session.

14. The method of claim 13, wherein the authentication data is encrypted using a public key paired to a private key of the server device.

15. The method of claim 1, wherein the authentication data is hosted on the first computing device and receipt of data from the wireless token authorizes forwarding of the authentication data to a server device hosting the particular computing session.

16. The method of claim 1, wherein the wireless token device is paired to a server device hosting the particular computing session.

17. The method of claim 1, wherein the particular computing session is a digital streaming media presentation.

18. The method of claim 1, wherein the particular computing session is a session with a software application hosted by the server device.

19. The method of claim 1, wherein the particular computing session is hosted by a cloud computing system.

20. The method of claim 1, further comprising:

identifying user profile data associated with the first user; and

applying the user profile data within the particular computing session.

21. The method of claim 1, wherein at least one other device associated with a second user other than the first user also consumes resources within the particular computing session.

22. Logic encoded in non-transitory media that includes code for execution and when executed by a processor is operable to perform operations comprising:

receiving, from a first computing device, authentication data forwarded by the first computing device from a wireless token device to a server device hosting a particular computing session, the authentication data used to authenticate a first user to the particular computing session, wherein the authentication data was received by the first computing device from the wireless token device over a wireless communication channel and based at least in part on the wireless token device being in proximity to the first computing device;

authenticating the first computing device to the particular computing session based on the received authentication data; and

permitting the first computing device to consume resources of the particular computing session.

23. A system comprising:

at least one processor device;

at least one memory element; and

a session manager, adapted when executed by the at least one processor device to;

manage hosting of a particular computing session;

receive, from a first computing device, authentication data forwarded by the first computing device from a wireless token device, the authentication data used to authenticate a first user to the particular computing session, wherein the authentication data was received by the first computing device from the wireless token device over a wireless communication channel and based at least in part on the wireless token device being in proximity to the first computing device;

authenticate the first computing device to the particular computing session based on the received authentication data; and

permit the first computing device to consume resources of the particular computing session.