Device, method, and system for augmented reality security

• US 9,405,889 B2
• Filed: 03/17/2015
• Issued: 08/02/2016
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: da Cruz Pinto, Juan Marcelo, Cuenca-Acuna, Francisco Matias
• Primary Examiner(s): Harriman, Dant Shaifer
• Application Number:
  US14/660,406
• Publication Number:
  US 20150193609A1
• Time in Patent Office: 504 Days
• Field of Search: 726/9
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06K 7/1417 2D bar codes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

Devices and methods for authenticating a user of a mobile computing device to a content server include establishing a communication session between a target computing device and the content server that is identified by a session ID. The target computing device generates a pairing token using the session ID, which pairing token may be a two-dimensional bar code such as a quick response (“QR”) code, and presents the pairing token to the mobile computing device. The mobile computing device captures the pairing token and authenticates the user of the mobile computing device to an authentication server. The target computing device receives an authentication token from the authentication server in response to the mobile computing device successfully authenticating the user to the authentication server. The target computing device accesses content on the content server using the authentication token. Other embodiments are described and claimed.

Claims

1. A mobile computing device to authenticate a user to a content server, the mobile computing device comprising:

a pairing module to (i) capture a pairing token presented by a target computing device using a sensor of the mobile computing device, wherein the pairing token is indicative of a session ID and comprises a feature of the target computing device detectable by the sensor of the mobile computing device; and

(ii) determine the session ID based on the pairing token, wherein the session ID identifies a communication session between the target computing device and the content server;

a user interface module to (i) present a login user interface in response to a determination of the session ID based on the pairing token and (ii) receive user credentials provided by the user using the login user interface; and

an authentication module to (i) authenticate the user to the mobile computing device as a function of the user credentials; and

(ii) authenticate the mobile computing device to an authentication server using the session ID in response to a successful authentication of the user to the mobile computing device.

2. The mobile computing device of claim 1, wherein the authentication module is to transmit an identification of a third party login server to the authentication server.

3. The mobile computing device of claim 1, wherein:

the sensor comprises a camera;

the pairing token comprises a two-dimensional bar code; and

the pairing module is to capture the pairing token using the camera.

4. The mobile computing device of claim 1, wherein:

the sensor comprises an audio sensor;

the pairing token comprises an audio signal; and

the pairing module is to capture the pairing token using the audio sensor.

5. The mobile computing device of claim 1, wherein the pairing module is to determine a uniform resource indicator from the pairing token.

6. The mobile computing device of claim 1, wherein the user interface module is to receive the login user interface from a third-party login server.

7. The mobile computing device of claim 1, wherein the user interface module is to present an interface that allows the user to define a level of access to personal information of the user stored on the content server.

8. A method to authenticate a user of a mobile computing device to a content server, the method comprising:

capturing, by the mobile computing device, a pairing token presented by a target computing device using a sensor of the mobile computing device, wherein the pairing token is indicative of a session ID and comprises a feature of the target computing device detectable by the sensor of the mobile computing device;

determining, by the mobile computing device, the session ID based on the pairing token, wherein the session ID identifies a communication session between the target computing device and the content server;

presenting, by the mobile computing device, a login user interface in response to a determination of the session ID based on the pairing token;

authenticating, by the mobile computing device, the user to the mobile computing device by collecting user credentials received through the login user interface; and

authenticating, by the mobile computing device, the mobile computing device to an authentication server using the session ID in response to a successful authentication of the user to the mobile computing device.

9. The method of claim 8, further comprising transmitting an identification of a third party login server to the authentication server.

10. The method of claim 8, wherein capturing the pairing token comprises capturing a two-dimensional bar code using a camera of the mobile computing device.

11. The method of claim 8, wherein capturing the pairing token comprises capturing an audio signal using an audio sensor of the mobile computing device.

12. The method of claim 8, wherein determining the session ID further comprises determining a uniform resource indicator from the pairing token.

13. The method of claim 8, further comprising:

presenting an interface that allows the user to define a level of access to personal information of the user stored on the content server.

14. One or more non-transitory computer-readable storage media comprising a plurality of instructions that in response to being executed cause a mobile computing device to:

capture a pairing token presented by a target computing device using a sensor of the mobile computing device, wherein the pairing token is indicative of a session ID and comprises a feature of the target computing device detectable by the sensor of the mobile computing device;

determine the session ID based on the pairing token, wherein the session ID identifies a communication session between the target computing device and a content server;

present a login user interface in response to a determination of the session ID based on the pairing token;

authenticate the user to the mobile computing device by collecting user credentials received through the login user interface; and

authenticate the mobile computing device to an authentication server using the session ID in response to a successful authentication of the user to the mobile computing device.

15. The one or more non-transitory computer-readable storage media of claim 14, further comprising instructions that cause the mobile computing device to transmit an identification of a third party login server to the authentication server.

16. The one or more non-transitory computer-readable storage media of claim 14, wherein to capture the pairing token comprises to capture a two-dimensional bar code using a camera of the mobile computing device.

17. The one or more non-transitory computer-readable storage media of claim 14, wherein to capture the pairing token comprises to capture an audio signal using an audio sensor of the mobile computing device.

18. The one or more non-transitory computer-readable storage media of claim 14, further comprising instructions that cause the mobile computing device to determine a uniform resource indicator from the pairing token.

19. The one or more non-transitory computer-readable storage media of claim 14, further comprising instructions that cause the mobile computing device to receive the login user interface from a third-party login server.

20. The one or more non-transitory computer-readable storage media of claim 14, further comprising a plurality of instructions that in response to being executed cause the mobile computing device to allow, with the user interface, the user to define a level of access to personal information of the user stored on the content server.