TOUCH-SHARE CREDENTIAL MANAGEMENT ON MULTIPLE DEVICES

• US 20180145956A1
• Filed: 11/21/2016
• Published: 05/24/2018
• Est. Priority Date: 11/21/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Anglin, Debbie A., Gu, Yu, Liu, Su
• Granted Patent: US 10,667,134 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Embodiments include method, systems and computer program products for credential management. Aspects include obtaining a first biometric information by a first processing device, wherein the first processing device has stored one or more credentials. Then, responsive to obtaining the first biometric information, the method determines whether the first biometric information is valid. The method then creates, via the first processing device, an ad-hoc network based upon the determination that the first biometric information is valid. The method, then receives a second biometric information from a second processing device through the ad-hoc network. And, then the method analyzes the second biometric information to determine whether the second biometric information is valid.

Claims

1. A computer-implemented method for credential management, the method comprising:

obtaining a first biometric information by a first processing device, wherein the first processing device has stored one or more credentials;

responsive to obtaining the first biometric information, determining whether the first biometric information is valid;

creating, by the first processing device, an ad-hoc network based upon the determination that the first biometric information is valid;

receiving a second biometric information from a second processing device through the ad-hoc network; and

analyzing the second biometric information to determine whether the second biometric information is valid.

2. The method of claim 1, wherein the second processing device transmits the second biometric information to the first processing device after obtaining the second biometric information and determining the second biometric information to be foreign to the second processing device.

3. The method of claim 2, wherein the second biometric information is obtained by the second processing device from a user of the first processing device.

4. The method of claim 1 further comprising:

determining a location of the first processing device; and

transmitting a credential from the one or more credentials to the second processing device through the ad-hoc network based upon the location of the first processing device and based upon the second biometric information being valid.

5. The method of claim 1 further comprising:

transmitting a credential from the one or more credentials to the second processing device through the ad-hoc network based upon the second biometric information being valid.

6. The method of claim 1 further comprising:

transmitting a denial to the second processing device through the ad-hoc network based upon the second biometric information being invalid.

7. The method of claim 5 further comprising:

accessing a wireless network by the second processing device by utilizing the credential.

8. The method of claim 7, wherein the credential comprises an access level for the wireless network.

9. The method of claim 8, wherein the access level comprises at least one of a full access and a partial access.

10. A computer system for credential management, the computer system including a server having a processor, the processor configured to:

obtain a first biometric information by a first processing device, wherein the first processing device has stored one or more credentials;

responsive to obtaining the first biometric information, determine whether the first biometric information is valid;

create, by the first processing device, an ad-hoc network based upon the determination that the first biometric information is valid;

receive a second biometric information from a second processing device through the ad-hoc network; and

analyze the second biometric information to determine whether the second biometric information is valid.

11. The computer system of claim 10, wherein the second processing device transmits the second biometric information to the first processing device after obtaining the second biometric information and determining the second biometric information to be foreign to the second processing device.

12. The computer system of claim 11, wherein the second biometric information is obtained by the second processing device from a user of the first processing device.

13. The computer system of claim 10, wherein the processor is further configured to:

determine a location of the first processing device;

transmit a credential from the one or more credentials to the second processing device through the ad-hoc network based upon the location of the first processing device and based upon the second biometric information being valid.

14. The computer system of claim 10, wherein the processor is further configured to:

transmit a credential from the one or more credentials to the second processing device through the ad-hoc network based upon the second biometric information being valid.

15. The computer system of claim 10, wherein the processor is further configured to:

transmit a denial to the second processing device through the ad-hoc network based upon the second biometric information being invalid.

16. The computer system of claim 14, wherein the processor is further configured to:

access a wireless network by the second processing device by utilizing the credential.

17. A computer program product for credential management, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform:

obtaining a first biometric information by a first processing device, wherein the first processing device has stored one or more credentials;

responsive to obtaining the first biometric information, determining whether the first biometric information is valid;

creating, by the first processing device, an ad-hoc network based upon the determination that the first biometric information is valid;

receiving a second biometric information from a second processing device through the ad-hoc network; and

analyzing the second biometric information to determine whether the second biometric information is valid.

18. The computer program product of claim 17, wherein the second processing device transmits the second biometric information to the first processing device after obtaining the second biometric information and determining the second biometric information to be foreign to the second processing device.

19. The computer program product of claim 18, wherein the second biometric information is obtained by the second processing device from a user of the first processing device.

20. The computer program product of claim 17 wherein the program instructions executable by the processor cause the processor to further perform:

determining a location of the first processing device;

transmitting a credential from the one or more credentials to the second processing device through the ad-hoc network based upon the location of the first processing device and based upon the second biometric information being valid.