Apparatuses and methods for secure display on secondary display device

• US 9,619,636 B2
• Filed: 02/06/2015
• Issued: 04/11/2017
• Est. Priority Date: 02/06/2015
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Yang, Yafei, Guo, Xu, Cai, Liang, Wang, Xinmu
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US14/616,353
• Publication Number:
  US 20160232339A1
• Time in Patent Office: 795 Days
• Field of Search: 726 19
• CPC Class Codes: G06F 1/163 Wearable computers, e.g. on a belt
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06F 3/1423 controlling a plurality of local displays, e.g. CRT and flat panel display
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

One feature pertains to a computing device that includes an input interface, a communication interface, and a processing circuit that is adapted to receive a request from an application to authorize an action and generate a dynamic access code associated with the action. The processing circuit also transmits a message to a secondary display device that includes information data associated with the action and the dynamic access code for display on a display of the secondary display device. The processing circuit authorizes the action received from the application if the dynamic access code is entered into the input interface. Multiple, unique dynamic codes may also be associated with different actions the application may make requests for, which are also transmitted to the secondary display device for display.

Claims

1. A computing device, comprising:

an input interface;

a first display adapted to display a first action requesting user approval, the first action requested by an application;

a communication interface; and

a processing circuit communicatively coupled to the communication interface, the first display, and the input interface, the processing circuit adapted to;

receive a request from the application to authorize a second action that is different than the first action;

receive the request to authorize the second action while the first display displays the first action;

generate a dynamic access code;

associate the dynamic access code with the second action;

transmit a message that includes the dynamic access code and information data associated with the second action to a secondary display device for display of the message on a second display of the secondary display device; and

authorize the second action received from the application if the dynamic access code is entered into the input interface or decline the second action received from the application if the dynamic access code is not entered into the input interface.

2. The computing device of claim 1, the processing circuit further adapted to:

encrypt the message using a session key prior to transmitting the message to the secondary display device.

3. The computing device of claim 1, the processing circuit further adapted to:

provide a digital signature using a secret key to the application after authorizing the second action received from the application.

4. The computing device of claim 1, wherein the processing circuit is a secure processor that is part of a secure execution environment.

5. The computing device of claim 1, wherein the dynamic access code is at least one of a number code, an alphanumeric code, a drawing, a symbol, a picture, and/or an icon.

6. The computing device of claim 1, wherein the dynamic access code is at least one of a linear barcode and/or a matrix barcode, and the input interface includes at least one of a camera and/or a barcode scanner adapted to scan the at least one of the linear barcode and/or the matrix barcode displayed on the secondary display device to obtain barcode data, and the processing circuit is further adapted to authorize the action received from the application if the barcode data obtained matches expected barcode data transmitted to the secondary display device.

7. The computing device of claim 1, the processing circuit further adapted to:

receive a plurality of requests from the application to authorize a plurality of actions;

generate a plurality of unique dynamic access codes, each unique dynamic access code generated associated with a single action of the plurality of actions;

transmit a plurality of messages to the secondary display device for display on the display of the secondary display device, each message of the plurality of messages including information data associated with an action of the plurality of actions and the dynamic access code associated with the action of the plurality of actions; and

authorize each action of the plurality of actions if the dynamic access code associated with the action of the plurality of actions is entered into the input interface.

8. The computing device of claim 1, wherein the action includes at least one of (a) transferring of funds, (b) directing the computing device to a website, and/or (c) at least one of encrypting and/or decrypting data with a secret key.

9. The computing device of claim 1, wherein the application is resident to the computing device.

10. The computing device of claim 1, wherein the secondary display device is a wearable device.

11. The computing device of claim 1, wherein the message is transmitted to the secondary display device wirelessly and directly using a short range communication protocol.

12. The computing device of claim 1, wherein the information data associated with the action includes at least one of a financial transaction amount, a uniform resource locator (URL) address, and/or a file name to be encrypted and/or decrypted.

13. A method operational at a primary electronic communication device for secure display on a secondary display device, the method comprising:

displaying, on a first display of the primary electronic communication device, a first action requesting user approval, the first action requested by an application;

receiving, at a processing circuit of the primary electronic communication device, a request from the application to authorize a second action that is different than the first action;

receiving, at the processing circuit, the request to authorize the second action while the first display displays the first action;

generating, at the processing circuit, a dynamic access code;

associating, at the processing circuit, the dynamic access code with the second action;

transmitting a message that includes the dynamic access code and information data associated with the second action from the primary electronic communication device to the secondary display device for display of the message on a second display of the secondary display device; and

authorizing the second action received from the application if the dynamic access code is entered into an input interface of the primary electronic communication device or decline the second action received from the application if the dynamic access code is not entered into the input interface.

14. The method of claim 13, further comprising:

encrypting the message using a session key prior to transmitting the message to the secondary display device.

15. The method of claim 13, further comprising:

providing a digital signature using a secret key to the application after authorizing the second action received from the application.

16. The method of claim 13, wherein the processing circuit is a secure processor that is part of a secure execution environment.

17. The method of claim 13, wherein the dynamic access code is at least one of a number code, an alphanumeric code, a drawing, a symbol, a picture, and/or an icon.

18. The method of claim 13, wherein the dynamic access code is at least one of a linear barcode and/or a matrix barcode, and the input interface includes at least one of a camera and/or a barcode scanner adapted to scan the at least one of the linear barcode and/or the matrix barcode displayed on the secondary display device to obtain barcode data, and the method further comprising:

authorizing the action received from the application if the barcode data obtained matches expected barcode data transmitted to the secondary display device.

19. The method of claim 13, further comprising:

receiving a plurality of requests from the application to authorize a plurality of actions;

generating a plurality of unique dynamic access codes, each unique dynamic access code generated associated with a single action of the plurality of actions;

transmitting a plurality of messages from the primary electronic communication device to the secondary display device for display on the display of the secondary display device, each message of the plurality of messages including information data associated with an action of the plurality of actions and the dynamic access code associated with the action of the plurality of actions; and

authorizing each action of the plurality of actions if the dynamic access code associated with the action of the plurality of actions is entered into the input interface.

20. The method of claim 13, wherein the action includes at least one of (a) transferring of funds, (b) directing the primary electronic communication device to a website, and/or (c) at least one of encrypting and/or decrypting data with a secret key.

21. The method of claim 13, wherein the application is resident to the primary electronic communication device.

22. The method of claim 13, wherein the secondary display device is a wearable device.

23. The method of claim 13, wherein the message is transmitted to the secondary display device wirelessly and directly using a short range communication protocol.

24. The method of claim 13, wherein the information data associated with the action includes at least one of a financial transaction amount, a URL address, and/or a file name to be encrypted and/or decrypted.

25. A computing device, comprising:

an input interface;

a first display adapted to display a first action requesting user approval, the first action requested by an application;

a memory circuit;

a communication interface; and

a processing circuit communicatively coupled to the communication interface, the memory circuit, the first display, and the input interface, the processing circuit adapted to;

receive a request from the application to authorize a second action that is different than the first action;

receive the request to authorize the second action while the first display displays the first action;

transmit a message that includes information data associated with the second action to a secondary display device for display on a second display of the secondary display device;

receive, at the input interface, biometric data associated with a user of the computing device and the secondary display device; and

authorize the second action received from the application if it is determined that the biometric data received at the input interface matches biometric data stored in the memory circuit or decline the second action received from the application if no biometric data is received at the input interface that matches biometric data stored in the memory circuit.

26. The computing device of claim 25, wherein the information data associated with the action includes at least one of a financial transaction amount, a URL address, and/or a file name to be encrypted and/or decrypted.

27. A method operational at a primary electronic communication device for secure display on a secondary display device, the method comprising:

displaying, on a first display of the primary electronic communication device, a first action requesting user approval, the first action requested by an application;

receiving, at a processing circuit of the primary electronic communication device, a request from the application to authorize a second action that is different than the first action;

receiving, at the processing circuit, the request to authorize the second action while the first display displays the first action;

transmitting a message that includes information data associated with the second action from the primary electronic communication device to the secondary display device for display on a second display of the secondary display device;

receiving, at an input interface of the primary electronic communication device, biometric data associated with a user of the primary electronic communication device and the secondary display device; and

authorizing the second action received from the application if it is determined that the biometric data received at the input interface matches biometric data stored in a memory circuit of the primary electronic communication device or decline the second action received from the application if no biometric data is received at the input interface that matches biometric data stored in the memory circuit.