ACCESS TOKEN EVENT VIRTUALIZATION

• US 20130332727A1
• Filed: 03/06/2013
• Published: 12/12/2013
• Est. Priority Date: 06/06/2012
• Status: Abandoned Application

• Current Assignee: Aventura HQ Incorporated (Koninklijke Philips N.V.)
• Original Assignee: Aventura HQ Incorporated (Koninklijke Philips N.V.)
• Inventors: Jaudon, Joe, Lowrey, David, Williams, Adam
• Application Number:
  US13/787,206
• Publication Number:
  US 20130332727A1
• Time in Patent Office: Days
• US Class Current: 713/159
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

Systems, devices, and methods are disclosed for access token event virtualization. An access token may be received at a central server computer system from a terminal device. The access token event may indicate that an access device associated with the terminal device has received an access token. A virtual session associated with the received access token event may be identified at the central server computer system, and a set of rules may be applied to the received access token event and the identified virtual session to determine an action associated with the identified virtual session. The central server computer system may transmit an instruction to at least one device communicatively coupled with the central server computer system to carry out the action associated with the identified virtual session.

Claims

1. A method of managing access tokens, the method comprising:

receiving an access token event at a central server computer system from a terminal device, the access token event indicating that an access device associated with the terminal device has received an access token;

identifying at the central server computer system a virtual session associated with the received access token event;

applying a set of rules to the received access token event and the identified virtual session to determine an action associated with the identified virtual session; and

transmitting an instruction to at least one device communicatively coupled with the central server computer system to carry out the action associated with the identified virtual session.

2. The method of claim 1, further comprising:

communicating with the terminal device to cause the terminal device to prompt a user associated with the access token for at least one authentication credential; and

receiving the at least one authentication credential at the central server computer system from the terminal device.

3. The method of claim 2, further comprising:

authenticating the user based on the at least one authentication credential; and

associating the identified virtual session with the terminal device at the central server computer system in response to the authentication of the user based on the at least one authentication credential.

4. The method of claim 1, wherein the at least one device communicatively coupled with the central server computer system comprises the terminal device, the action associated with the identified virtual session comprising:

selectively forwarding session data for the virtual session between the central server computer system and the terminal device.

5. The method of claim 4, further comprising:

determining at the central server computer system that a user associated with the virtual session has moved to a location of the terminal device based on the received access token event;

wherein the selectively forwarding the session data for the virtual session between the central server computer system and the terminal device occurs in response to the determination that the user has moved to the location of the terminal device.

6. The method of claim 5, further comprising:

updating at least one aspect of the virtual session based on the determination that the user has moved to the location of the terminal device.

7. The method of claim 4, wherein the action associated with the virtual session comprises:

causing a user interface for the virtual session to be displayed at the terminal device.

8. The method of claim 1, wherein the at least one device communicatively coupled with the central server computer system comprises a second terminal device associated with the virtual session.

9. The method of claim 8, wherein the action associated with the virtual session comprises:

disassociating the second terminal device from the virtual session at the central server computer system in response to receiving the access token event.

10. The method of claim 8, wherein the action associated with the virtual session further comprises:

logging the user off of the second terminal device.

11. The method of claim 8, wherein the action associated with the virtual session comprises prompting a user of the second terminal device to enter at least one authentication credential;

the method further comprising;

receiving the at least one authentication credential from the second terminal device;

wherein the transmission of the instruction to carry out the action associated with the identified virtual session occurs in response to the at least one authentication credential received from the second terminal device.

12. A central server computer system configured to manage access tokens, the central server computer system comprising:

an access token event module configured to receive an access token event from a terminal device communicatively coupled with the central server computer system, the access token event indicating that an access device associated with the terminal device has received an access token;

a session module configured to identify a virtual session associated with the received access token event;

a rules engine module configured to apply a set of rules to the received access token event and the identified virtual session to determine an action associated with the identified virtual session; and

an instruction module configured to transmit an instruction to at least one device communicatively coupled with the central server computer system to carry out the action associated with the identified virtual session.

13. The central server computer system of claim 12, further comprising:

an authentication module configured to communicate with the terminal device to cause the terminal device to prompt a user associated with the access token for at least one authentication credential; and

receive the at least one authentication credential at the central server computer system from the terminal device.

14. The central server computer system of claim 13, wherein:

the authentication module is further configured to authenticate the user based on the at least one authentication credential; and

the session module is further configured to associate the identified virtual session with the terminal device at the central server computer system in response to the authentication of the user based on the at least one authentication credential.

15. The central server computer system of claim 12, wherein the at least one device communicatively coupled with the central server computer system comprises the terminal device, the action associated with the identified virtual session comprising:

selectively forwarding session data for the virtual session between the central server computer system and the terminal device.

16. The central server computer system of claim 15, further comprising:

a location module configured to determine that a user associated with the virtual session has moved to a location of the terminal device based on the received access token event;

wherein the selectively forwarding the session data for the virtual session between the central server computer system and the terminal device occurs in response to the determination that the user has moved to the location of the terminal device.

17. The central server computer system of claim 16, wherein the session module is further configured to:

update at least one aspect of the virtual session based on the determination that the user has moved to the location of the terminal device.

18. The central server computer system of claim 15, wherein the session module is further configured to:

cause a user interface for the virtual session to be displayed at the terminal device based on the authentication of the user and the association of the virtual session with the terminal device.

19. The central server computer system of claim 12, wherein the at least one device communicatively coupled with the central server computer system comprises a second terminal device associated with the virtual session.

20. The central server computer system of claim 19, wherein the action associated with the virtual session comprises:

disassociating the second terminal device from the virtual session at the central server computer system in response to receiving the access token event.

21. The central server computer system of claim 19, wherein the action associated with the virtual session further comprises:

logging the user off of the second terminal device.

22. The central server computer system of claim 19, wherein the action associated with the virtual session comprises prompting a user of the second terminal device to enter at least one authentication credential;

the central server computer system further comprising;

an authentication module configured to receive the at least one authentication credential from the second terminal device;

wherein the transmission of the instruction to carry out the action associated with the identified virtual session occurs in response to the at least one authentication credential received from the second terminal device.

23. A computer program product, comprising:

a tangible computer readable device comprising computer readable instructions stored thereon, the computer readable program instructions comprising;

computer readable program instructions configured to cause at least one processor to receive an access token event at a central server computer system from a terminal device, the access token event indicating that an access device associated with the terminal device has received an access token;

computer readable program instructions configured to cause the at least one processor to identify at the central server computer system a virtual session associated with the received access token event;

computer readable program instructions configured to cause the at least one processor to apply a set of rules to the received access token event and the identified virtual session to determine an action associated with the identified virtual session; and

computer readable program instructions configured to cause the at least one processor to transmit an instruction to at least one device communicatively coupled with the central server computer system to carry out the action associated with the identified virtual session.