DEVICE, METHOD, AND SYSTEM FOR AUGMENTED REALITY SECURITY

• US 20140096220A1
• Filed: 09/28/2012
• Published: 04/03/2014
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Cuenca-Acuna, Francisco, Da Cruz Pinto, Juan Marcelo
• Granted Patent: US 8,990,914 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06K 7/1417 2D bar codes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

Devices and methods for authenticating a user of a mobile computing device to a content server include establishing a communication session between a target computing device and the content server that is identified by a session ID. The target computing device generates a pairing token using the session ID, which pairing token may be a two-dimensional bar code such as a quick response (“QR”) code, and presents the pairing token to the mobile computing device. The mobile computing device captures the pairing token and authenticates the user of the mobile computing device to an authentication server. The target computing device receives an authentication token from the authentication server in response to the mobile computing device successfully authenticating the user to the authentication server. The target computing device accesses content on the content server using the authentication token. Other embodiments are described and claimed.

Claims

1. A target computing device to authenticate a user to a content server, the target computing device comprising:

a pairing module to (i) generate a pairing token using a session ID received from the content server and (ii) present the pairing token to a mobile computing device controlled by the user to allow the user to authenticate to an authentication server;

an authentication module to receive an authentication token from the authentication server in response to successful authentication of the user by the mobile computing device; and

a content management module to access content on the content server using the authentication token.

2. The target computing device of claim 1, wherein to access content on the content server comprises to access user profile information of the user.

3. The target computing device of claim 1, wherein the content management module is to process the content accessed from the content server.

4. The target computing device of claim 3, wherein to process the content comprises to display the content accessed from the content server or to complete a purchase transaction on the target computing device.

5. The target computing device of claim 1, further comprising a display, wherein the pairing token comprises a token selected from the group consisting of a two-dimensional bar code and a quick response (“

QR”

) code, and the pairing module is to present the pairing token by displaying the pairing token on the display of the target computing device.

6. The target computing device of claim 1, further comprising an audio device, wherein the pairing token comprises an audio signal and the pairing module is to present the pairing token by playing the pairing token using the audio device of the target computing device.

7. A mobile computing device to authenticate a user to a content server, the mobile computing device comprising:

a pairing module to (i) capture a pairing token presented by a target computing device; and

(ii) determine a session ID from the pairing token, wherein the session ID identifies a communication session between the target computing device and the content server; and

an authentication module to (i) to collect user credentials provided by the user;

(ii) authenticate the user to the mobile computing device as a function of the user credentials; and

(iii) authenticate the mobile computing device to an authentication server using the session ID.

8. The mobile computing device of claim 7, wherein the authentication module is to authenticate the mobile computing device to the authentication server in response to successfully authenticating the user to the mobile computing device.

9. The mobile computing device of claim 7, further comprising a camera, wherein the pairing token comprises a token selected from the group consisting of a two-dimensional bar code and a quick response (“

QR”

) code, and the pairing module is to capture the pairing token using the camera.

10. The mobile computing device of claim 7, further comprising an audio sensor, wherein the pairing token comprises an audio signal, and the pairing module is to capture the pairing token using the audio sensor.

11. The mobile computing device of claim 7, further comprising a user interface module to (i) receive a login user interface from a third-party login server, (ii) present the login user interface to the user, and (iii) receive user credentials provided by the user using the login user interface.

12. The mobile computing device of claim 7, further comprising a user interface module to present a user interface to the user, wherein the user interface is to allow the user to define a level of access to personal information of the user stored on the content server.

13. One or more machine-readable media comprising a plurality of instructions that in response to being executed result in a target computing device:

generating, on the target computing device, a pairing token using a session ID received from a content server, wherein the session ID identifies a communication session between the target computing device and the content server;

presenting, from the target computing device, the pairing token to a mobile computing device;

receiving, on the target computing device, an authentication token from an authentication server in response to successful authentication of a user of the mobile computing device by the mobile computing device; and

accessing, with the target computing device, content on the content server using the authentication token.

14. The machine-readable media of claim 13, wherein accessing content on the content server comprises accessing user profile information stored on the content server.

15. The machine-readable media of claim 13, further comprising a plurality of instructions that in response to being executed result in the computing device processing, on the target computing device, the content accessed on the content server.

16. The machine-readable media of claim 15, wherein processing the content comprises displaying on the target computing device the content accessed on the content server or completing a purchase transaction on the target computing device.

17. The machine-readable media of claim 13, wherein presenting the pairing token comprises at least one of:

displaying a two-dimensional bar code on a display of the target computing device and playing an audio signal using an audio device of the target computing device.

18. One or more machine-readable media comprising a plurality of instructions that in response to being executed result in a mobile computing device:

capturing, on the mobile computing device, a pairing token presented by a target computing device;

determining, on the mobile computing device, a session ID from the pairing token, wherein the session ID identifies a communication session between the target computing device and a content server;

authenticating a user of the mobile computing device to the mobile computing device by collecting user credentials on the mobile computing device; and

authenticating the mobile computing device to an authentication server using the session ID.

19. The machine-readable media of claim 18, wherein capturing the pairing token comprises capturing a two-dimensional bar code using a camera of the mobile computing device, capturing a quick response (“

QR”

) code using a camera of the mobile computing device, or capturing an audio signal using an audio sensor of the mobile computing device.

20. The machine-readable media of claim 18, wherein collecting user credentials comprises:

receiving, on the mobile computing device, a login user interface provided by a third-party login server;

presenting, on the mobile computing device, the login user interface; and

receiving, with the mobile computing device, the user credentials using the login user interface.

21. The machine-readable media of claim 18, further comprising:

presenting, on the mobile computing device, a user interface; and

allowing, with the user interface, the user to define a level of access to personal information of the user stored on the content server.