Mobile based login via wireless credential transfer

• US 9,628,482 B2
• Filed: 10/31/2013
• Issued: 04/18/2017
• Est. Priority Date: 10/31/2013
• Status: Active Grant

• Current Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Original Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Inventors: Berman, Paul, Khalid, Mohammad Raheel, Kim, Ji Hoon, Bruno, Cory Michael, Caldeira de Andrada, Mauricio Pati, Vaidya, Samir
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): Wilcox, James J
• Application Number:
  US14/069,145
• Publication Number:
  US 20150121482A1
• Time in Patent Office: 1,265 Days
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal

Abstract

Systems and methods for mobile-based login via wireless credential transfer are disclosed. In some implementations, a proxy server receives a registration request for a receiver device for accessing a secure resource. The proxy server registers the receiver device in response to the registration request. The proxy server receives, from a transmitter device, information identifying the transmitter device along with authentication credentials for authenticating the receiver device to access the secure resource. The proxy server identifies the receiver device based on the information identifying the transmitter device. The proxy server forwards, to the receiver device, the authentication credentials for authenticating access of the receiver device to the secure resource.

Claims

1. A method comprising:

receiving, at a proxy server, a registration request for a receiver device for accessing a secure resource;

registering, at the proxy server, the receiver device in response to the registration request;

receiving, at the proxy server and from a transmitter device different from the receiver device, information identifying the transmitter device along with authentication credentials for authenticating the receiver device to access the secure resource, wherein the information identifying the transmitter device includes a Mobile Directory Number (MDN) and wherein the transmitter device and the receiver device are end-user computing devices;

identifying, at the proxy server, the receiver device based at least in part on the information identifying the transmitter device; and

forwarding, from the proxy server to the receiver device, the authentication credentials for authenticating access of the receiver device to the secure resource.

2. The method of claim 1, wherein:

receiving the registration request includes receiving, at the proxy server, the registration request from the receiver device, the registration request including location information of the receiver device,

receiving the information identifying the transmitter device includes receiving, at the proxy server, information identifying location information of the transmitter device, and

identifying the receiver device includes identifying, at the proxy server, a receiver device from among a plurality of receiver devices being registered at the proxy server, based on a distance between the location information of the receiver device and the location information of the transmitter device being less than a predetermined threshold distance.

3. The method of claim 2, wherein:

the secure resource include a web-based resource,

the authentication credentials include credentials for accessing the web-based resource,

the transmitter device includes a mobile device of a user, and

the receiver device includes a proximate computing device not previously associated with the user, the receiver device running a web browser for accessing the web-based resource.

4. The method of claim 1, wherein:

receiving, at the proxy server, the registration request includes receiving, at the proxy server, the registration request including information identifying the receiver device and information identifying the transmitter device, and

identifying, at the proxy server, the receiver device includes identifying, at the proxy server, a receiver device from among a plurality of receiver devices being registered at the proxy server with the information identifying the transmitter device.

5. The method of claim 1, wherein:

the secure resource includes a secure web-based resource, and

the transmitter device includes a mobile phone of a user configured to store a plurality of credentials for accessing a plurality of web-based resources, the plurality of credentials being associated with the user.

6. The method of claim 1, wherein identifying the receiver device based on the information identifying the transmitter device further includes:

transmitting, from the proxy server and to the receiver device, a verification code; and

receiving, from the transmitter device and at the proxy server, a user input corresponding to the verification code.

7. The method of claim 1, wherein identifying the receiver device based on the information identifying the transmitter device further includes:

transmitting, from the proxy server and to the transmitter device, a verification code; and

receiving, from the receiver device and at the proxy server, a user input corresponding to the verification code.

8. The method of claim 1, wherein identifying the receiver device includes identifying the receiver device based on a stored pairing of the transmitter device and the receiver device.

9. The method of claim 1, wherein identifying the receiver device includes identifying the receiver device based on geographic location information of the transmitter device and geographic location information of the receiver device.

10. A method, comprising:

receiving, at a proxy server, a registration request for a receiver device for accessing a secure resource;

registering, at the proxy server, the receiver device in response to the registration request;

receiving, at the proxy server and from a transmitter device different from the receiver device, information identifying the transmitter device along with authentication credentials for authenticating the receiver device to access the secure resource, wherein the transmitter device and the receiver device are end-user computing devices;

identifying, at the proxy server, the receiver device based at least in part on the information identifying the transmitter device; and

forwarding, from the proxy server to the receiver device, the authentication credentials for authenticating access of the receiver device to the secure resource,

wherein identifying the receiver device based on the information identifying the transmitter device further includes;

receiving, from the transmitter device, a geographic location of the transmitter device;

receiving, from the receiver device, a geographic location of the receiver device;

determining whether the receiver device is an only receiver device within a specified distance from the transmitter device;

upon determining that the receiver device is the only receiver device within the specified distance from the transmitter device, identifying the receiver device as a pair of the transmitter device; and

upon determining multiple receiver devices within a specified distance from the transmitter device, identifying the receiver device further includes;

transmitting, to the transmitter device, a verification code;

receiving, from one of the receiver devices from among the multiple receiver devices, a user input corresponding to the verification code; and

identifying the one of the receiver devices as the receiver device.

11. A method, comprising:

receiving, at a proxy server, a registration request for a receiver device for accessing a secure resource;

registering, at the proxy server, the receiver device in response to the registration request;

receiving, at the proxy server and from a transmitter device different from the receiver device, information identifying the transmitter device along with authentication credentials for authenticating the receiver device to access the secure resource, wherein the transmitter device and the receiver device are end-user computing devices;

identifying, at the proxy server, the receiver device based at least in part on the information identifying the transmitter device; and

forwarding, from the proxy server to the receiver device, the authentication credentials for authenticating access of the receiver device to the secure resource,

wherein identifying the receiver device based on the information identifying the transmitter device further includes;

receiving, from the transmitter device, a geographic location of the transmitter device;

receiving, from the receiver device, a geographic location of the receiver device;

determining whether the receiver device is an only receiver device within a specified distance from the transmitter device;

upon determining that the receiver device is the only receiver device within the specified distance from the transmitter device, identifying the receiver device as a pair of the transmitter device; and

upon determining multiple receiver devices that are end-user computing devices are within a specified distance from the transmitter device, identifying the receiver device further includes;

transmitting, to each of the multiple receiver devices, a verification code uniquely associated with a corresponding one of the multiple receiver devices;

receiving, from the transmitter device, a user input corresponding a verification code corresponding to a specific one of the multiple receiver devices; and

identifying the specific one of the multiple receiver devices as the receiver device.

12. A non-transitory computer-readable medium comprising instructions which, when executed by a proxy server, cause the proxy server to:

receive, at the proxy server, a registration request for a receiver device for accessing a secure resource;

register, at the proxy server, the receiver device in response to the registration request;

receive, at the proxy server and from a transmitter device different from the receiver device, information identifying the transmitter device along with authentication credentials for authenticating the receiver device to access the secure resource, wherein the information identifying the transmitter device includes a Mobile Directory Number (MDN) and wherein the transmitter device and the receiver device are end-user computing devices;

identify, at the proxy server, the receiver device based at least in part on the information identifying the transmitter device; and

forward, from the proxy server to the receiver device, the authentication credentials for authenticating access of the receiver device to the secure resource.

13. The non-transitory computer-readable medium of claim 12, wherein:

the instructions to receive the registration request include instructions to receive, at the proxy server, the registration request from the receiver device, the registration request including location information of the receiver device,

the instructions to receive the information identifying the transmitter device include instructions to receive, at the proxy server, information identifying location information of the transmitter device, and

the instructions to identify the receiver device include instructions to identify, at the proxy server, a receiver device from among a plurality of receiver devices being registered at the proxy server, based on a distance between the location information of the receiver device and the location information of the transmitter device being less than a predetermined threshold distance.

14. The non-transitory computer-readable medium of claim 13, wherein:

the secure resource include a web-based resource,

the authentication credentials include credentials for accessing the web-based resource,

the transmitter device includes a mobile device of a user, and

the receiver device includes a proximate computing device not previously associated with the user, the receiver device running a web browser for accessing the web-based resource.

15. The non-transitory computer-readable medium of claim 13, wherein:

the secure resource includes a secure web-based resource, and

the transmitter device includes a mobile phone of a user configured to store a plurality of credentials for accessing a plurality of web-based resources, the plurality of credentials being associated with the user.

16. The non-transitory computer-readable medium of claim 12, wherein:

the instructions to receive, at the proxy server, the registration request include instructions to receive, at the proxy server, the registration request including information identifying the receiver device and information identifying the transmitter device, and

the instructions to identify, at the proxy server, the receiver device include instructions to identify, at the proxy server, a receiver device from among a plurality of receiver devices being registered at the proxy server with the information identifying the transmitter device.

17. The non-transitory computer-readable medium of claim 12, wherein the instructions to identify the receiver device based on the information identifying the transmitter device further include instructions to:

transmit, from the proxy server and to the receiver device, a verification code; and

receive, from the transmitter device and at the proxy server, a user input corresponding to the verification code.

18. A system comprising:

one or more processors; and

a memory comprising instructions which, when executed by the one or more processors, cause the one or more processors to;

receive, at a proxy server, a registration request for a receiver device for accessing a secure resource;

register, at the proxy server, the receiver device in response to the registration request;

receive, at the proxy server and from a transmitter device different from the receiver device, information identifying the transmitter device along with authentication credentials for authenticating the receiver device to access the secure resource, wherein the information identifying the transmitter device includes a Mobile Directory Number (MDN) and wherein the transmitter device and the receiver device are end-user computing devices;

identify, at the proxy server, the receiver device based at least in part on the information identifying the transmitter device; and

forward, from the proxy server to the receiver device, the authentication credentials for authenticating access of the receiver device to the secure resource.