System and method for authenticating multiple devices with a same credential

• US 9,178,962 B2
• Filed: 11/26/2013
• Issued: 11/03/2015
• Est. Priority Date: 11/28/2012
• Status: Active Grant

• Current Assignee: Qualcomm Atheros Incorporated (Qualcomm, Inc.)
• Original Assignee: Qualcomm, Inc.
• Inventors: Le Nerriec, Yohan, Bing, Jehan Gerard, Guion, Alexandre, Menter, Judah John, Tai, Daniel D.
• Primary Examiner(s): To, Baotran N
• Application Number:
  US14/091,049
• Publication Number:
  US 20140150079A1
• Time in Patent Office: 707 Days
• Field of Search: 726/8
• US Class Current: 1/1
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/1094 Inter-user-equipment sessions transfer or sharing
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

A first device implements an application platform that is shared with a second device. The application platform can be implemented so that the first device and the second device operate to have a same identity to at least the network service. The first device provides a user interface in order to receive input for accessing or using the network service. Additionally, the first device communicates input received in response to providing the user interface to the network service. The first device can receive a token from the network service in response to communicating the input. Additionally, the first device can communicate a set of data items to the second device. The set of data items includes the token and one or more identifiers that enable the second device to access and use the network service while appearing as the first device to the network service.

Claims

1. A system comprising:

a memory that stores instructions;

one or more processors that use instructions stored in memory to;

identify a device used to communicate a set of credentials;

determine that the identified device is not a first-in-time device used to access a network service using the set of credentials;

determine whether a condition is satisfied for authenticating the identified device as a follow on device to the first-in-time device, the condition including the identified device accessing the network service using the set of credentials within a defined time period following the first-in-time device accessing the network service using the set of credentials;

if the condition is satisfied, permit access to the network service for the identified device based on the set of user credentials;

else deny access to the network service.

2. The system of claim 1, wherein the condition includes the identified device being a next device after the first-in-time device to access the network service using the set of credentials.

3. The system of claim 1, wherein if the identified device is permitted to access the network service, the one or more processors permit the first-in-time device and the identified device to access the network service during a same session.

4. The system of claim 1, wherein the set of credentials include a password.

5. The system of claim 1, wherein the set of credentials includes an encrypted token.

6. A method for providing a network service, the method being implemented by one or more processors and comprising:

identifying a device used to communicate a set of credentials;

determining that the identified device is not a first-in-time device used to access the network service using the set of credentials;

making a determination as to whether a condition is satisfied for authenticating the identified device a follow on device to the first-in-time device, the condition including the identified device accessing the network service using the set of credentials within a defined time period following the first-in-time device accessing the network service using the set of credentials; and

permitting access to the network service for the identified device based on the set of user credentials only if the condition is satisfied.

7. The method of claim 6, wherein the condition includes the identified device being a next device after the first-in-time device to access the network service using the set of credentials.

8. The method of claim 6, wherein if the identified device is permitted to access the network service, the one or more processors permit the first-in-time device and the identified device to access the network service during a same session.

9. The method of claim 6, wherein the set of credentials include a password.

10. The method of claim 6, wherein the set of credentials includes an encrypted token.

11. A non-transitory computer-readable medium that stores instructions that, when executed by one or more processors, causes the one or more processors to perform operations that include:

identifying a device used to communicate a set of credentials;

determining that the identified device is not a first-in-time device used to access a network service using the set of credentials;

determining whether a condition is satisfied for authenticating the device as a follow on identified device to the first-in-time device, the condition including the identified device accessing the network service using the set of credentials within a defined time period following the first-in-time device accessing the network service using the set of credentials;

if the condition is satisfied, permit access to the network service for the identified device based on the set of user credentials;

else deny access to the network service.

12. The computer-readable medium of claim 11, wherein the condition includes the identified device being a next device after the first-in-time device to access the network service using the set of credentials.

13. The computer-readable medium of claim 11, wherein if the identified device is permitted to access the network service, the one or more processors permit the first-in-time device and the identified device to access the network service during a same session.

14. The computer-readable medium of claim 11, wherein the set of credentials include a password.

15. The computer-readable medium of claim 11, wherein the set of credentials includes an encrypted token.

16. A system comprising:

means for identifying a device used to communicate a set of credentials;

means for determining that the identified device is not a first-in-time device used to access a network service using the set of credentials;

means for making a determination as to whether a condition is satisfied for authenticating the identified device as a follow on device to the first-in-time device, the condition including the identified device accessing the network service using the set of credentials within a defined time period following the first-in-time device accessing the network service using the set of credentials;

means for permitting access to the network service for the identified device based on the set of user credentials only if the condition is satisfied.

17. The system of claim 16, wherein the condition includes the identified device being a next device after the first-in-time device to access the network service using the set of credentials.

18. The system of claim 16, wherein if the identified device is permitted to access the network service, the one or more processors permit the first-in-time device and the identified device to access the network service during a same session.

19. The system of claim 16, wherein the set of credentials include a password.

20. The system of claim 16, wherein the set of credentials includes an encrypted token.