TRANSFERRING AUTHENTICATED SESSIONS AND STATES BETWEEN ELECTRONIC DEVICES

• US 20160125490A1
• Filed: 10/30/2014
• Published: 05/05/2016
• Est. Priority Date: 10/30/2014
• Status: Active Grant

• Current Assignee: eBay Inc.
• Original Assignee: eBay Inc.
• Inventors: Angal, Rajeev, Pesic, Nebojsa
• Granted Patent: US 10,783,565 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: G06Q 30/0641 Shopping interfaces

Abstract

In various example embodiments, a system and method for transferring an authenticated session of an application running on one electronic device to a second electronic device after determining the second electronic device is a trusted device are presented. In one embodiment, an instruction is received to transfer an authenticated session of an application running on a first device associated with a user account to a second device associated with the user account. The second device is verified to be associated with the user account of the first device. The second device is determined to be a trusted device of an authorized user of the user account. The authenticated session of the application running on the first device is transferred to the second device to reproduce a current state of the authenticated session on the second device.

Claims

1. A method comprising:

receiving an instruction to transfer an authenticated session of an application running on a first device associated with a user account to a second device associated with the user account;

verifying, by a hardware processor, the second device is associated with the user account of the first device;

determining, by the hardware processor, the second device is a trusted device of an authorized user of the user account; and

transferring the authenticated session of the application running on the first device to the second device to reproduce a current state of the authenticated session.

3. The method of claim 1, further comprising:

receiving instructions to authenticate the session of the application running on the first device based on a user id and password.

4. The method of claim 1, wherein verifying the second device as being associated with the user of the first device further comprises:

determining the second device is included on a device list associated with the user account for the application.

5. The method of claim 1, wherein determining the second device is the trusted device of the user further comprises:

determining a device reputation of the second device; and

determining the second device is the trusted device based on the device reputation.

6. The method of claim 5, wherein determining the device reputation of the second device further comprises:

determining the device reputation based on transactions on behalf of the user on the second device.

7. The method of claim 5, wherein determining the device reputation of the second device further comprises:

accessing recorded user activity on the second device, the recorded user activity representing user data tracked while the user is on an active session of the application; and

determining no fraudulent activity was identified from the recorded user activity.

8. The method of claim 1, wherein determining the second device is the trusted device of the user further comprises:

determining only good transactions on behalf of the user have occurred on the second device.

9. The method of claim 1, wherein determining the second device is the trusted device of the user further comprises:

determining the second device is included on a device list associated with the user account for the application; and

determining the second device is a known good device.

10. The method of claim 9, wherein determining the second device is the known good device further comprises:

automatically determining the known good device based on good transactions using the application on the second device.

11. The method of claim 9, wherein determining the second device is the known good device further comprises:

receiving instructions indicating the user has indicated the second device is a known good device.

12. The method of claim 9, wherein determining the second device is the known good device further comprises:

determining the second device is not included on the known bad device list.

14. The method of claim 1, wherein determining the second device is the trusted device of the user further comprises:

accessing characteristics of the second device, the characteristics including a device type; and

determining the second device is the trusted device based on the characteristics of the second device.

15. The method of claim 1, wherein determining the second device is the trusted device of the user further comprises:

determining the second is the trusted device of the user based on a risk score.

16. The method of claim 1, wherein transferring the authenticated session of the application running on the first device to the second device further comprises:

activating the authenticated session on the second device to move the authenticated session to the second device; and

deactivating the authenticated session on the first device.

17. The method of claim 1, wherein transferring the authenticated session of the application running on the first device to the second device further comprises:

activating the authenticated session on the second device to copy the authenticated session onto the second device; and

continuing to keep the authenticated session active on the first device.

18. The method of claim 1, wherein transferring the authenticated session of the application running on the first device to the second device further comprises:

transferring a state of the authenticated session of the application running on the first device at a designated security level to the second device, wherein the first device is associated with a first user and the second device associated with a second user.

2. The method of claim I, further comprising:

receiving instructions to register the second device with the user account for authenticated session transfers;

creating a device identifier for the second device; and

adding the device identifier to a device list associated with the user account.

13. The method of claim 2, wherein the device identifier is a unique random number.

19. A system, comprising:

at least one processor configured to perform operations for processor-implemented modules including;

an interface module configured to receive an instruction to transfer personal application data from an authenticated session of an application running on a first device associated with a first user having a first user account to a second device associated with a second user having a second user account;

a device identification module configured to;

verify that the first user having the first user account is within the trusted group of the second user having the second user account; and

verify the first device is associated with the second device;

a device trust module configured to identify from the application, the first device is a trusted device based on a device reputation of the first device; and

a communication manager module configured to transfer the personal application data from the authenticated session of the application running on the first device to the second device to reproduce the personal application data from the authenticated session of the first user on the first device to an authenticated session of the second user on the second device.

20. A non-transitory machine readable medium storing instructions that, when executed by at least one processor of a machine, cause the machine to perform operations comprising:

receiving an instruction to transfer an authenticated session of an application running on a first device associated with a user account to a second device associated with the user account;

verifying, by a hardware processor, the second device is associated with the user account of the first device;

determining, by the hardware processor, the second device is a trusted device of an authorized user of the user account based on good transactions on behalf of the user on the second device; and

12

transferring the authenticated session of the application running on the first device to the second device to reproduce a current state of the authenticated session.