User interface for a device requesting remote authorization

• US 9,847,999 B2
• Filed: 09/19/2016
• Issued: 12/19/2017
• Est. Priority Date: 05/19/2016
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Van Os, Marcel, Anton, Peter D., Dicker, George R., Pitschel, Donald W., Shearer, Nicholas J., Alabi, Oluwatomiwa B., Diederich, Anton K.
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US15/269,801
• Publication Number:
  US 20170339151A1
• Time in Patent Office: 456 Days
• Field of Search: None
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The present disclosure generally relates to techniques for managing a remote authorization to proceed with an action, such as creating a secure network connection. In some examples, a requesting device receives selection of one or more options. The requesting device transmits a request to proceed with an action to an authenticating device. The authenticating device concurrently displays an indication of the request to proceed with the action, information about the selected one or more options, and an indication of the requesting device. The authenticating device receives authorization to proceed with the action and transmits a response to the requesting device regarding the request to proceed with the action.

Claims

1. A method, comprising:

receiving, at a requesting device with a display, selection of one or more options;

receiving, at the requesting device, selection of an option to proceed with an action associated with the selected one or more options;

transmitting, by the requesting device, a request to proceed with the action, wherein the request includes information about the selected one or more options;

receiving, by an authenticating device with a display, the request to proceed with the action;

concurrently displaying, on the display of the authenticating device;

an indication of the request to proceed with the action,

the information about the selected one or more options, and

an indication of the requesting device;

displaying, on the display of the authenticating device, a request for authorization to proceed with the action;

receiving, at the authenticating device, an input that is responsive to the request for authorization to proceed with the action;

transmitting, by the authenticating device, a response to the request to proceed with the action, the response to the request to proceed with the action based on the input that is responsive to the request for authorization to proceed with the action;

receiving, by the requesting device, the response to the request to proceed with the action;

in accordance with a determination, at the requesting device, that the response to the request to proceed with the action indicates that the authorization at the authenticating device was successful, displaying, on the display of the requesting device, an indication that the authorization was successful; and

in accordance with a determination, at the requesting device, that the response to the request to proceed with the action indicates that the authorization at the authenticating device was not successful, displaying, on the display of the requesting device, an indication that the authorization was not successful.

2. The method of claim 1, wherein the authenticating device includes hardware configured to respond to the input that is responsive to the request for authorization to proceed with the action and wherein the requesting device does not include the hardware.

3. The method of claim 2, wherein the action is creating a secure network connection between the authenticating device and a remote server, the method further comprising:

in response to determining, at the authenticating device, that the input that is responsive to the request for authorization to proceed with the action is consistent with input authorized to proceed with the action, proceeding, by the authenticating device, with the action using the hardware configured to respond to the input that is responsive to the request for authorization to proceed with the action.

4. The method of claim 2, wherein the action is creating a secure network connection between the requesting device and a remote server, the method further comprising:

in response to determining, at the authenticating device, that the input that is responsive to the request for authorization to proceed with the action is consistent with input authorized to proceed with the action, transmitting, by the authenticating device, a token to the requesting device, the token generated using hardware configured to respond to the input that is responsive to the request for authorization to proceed with the action;

receiving, at the requesting device, the token from the authenticating device; and

proceeding, by the requesting device, with the action using the token received from the authenticating device.

5. The method of claim 1, wherein the indication of the requesting device includes a graphical representation of the requesting device.

6. The method of claim 1, wherein the authenticating device is in a locked state when receiving, at the authenticating device, the input that is responsive to the request for authorization to proceed with the action, the method further comprising:

in response to determining, at the authenticating device, that the input that is responsive to the request for authorization to proceed with the action is consistent with input authorized to proceed with the action,

maintaining the authenticating device in the locked state while transmitting, by the authenticating device, the response to the request to proceed with the action, the response to the request to proceed with the action based on the input.

7. The method of claim 1, wherein the requesting device is signed into a service using an account when transmitting the request to proceed with the action and the authenticating device is signed into the service using the account when receiving the request to proceed with the action.

8. The method of claim 1, further comprising:

transmitting, by the authenticating device, a token to a server, wherein the server uses the token to obtain a resource associated with the token.

9. The method of claim 1, further comprising:

transmitting, by the requesting device, a token to a server, wherein the server uses the token to obtain a resource associated with the token.

10. The method of claim 1, wherein the authenticating device is a phone and the requesting device is a television device.

11. The method of claim 1, wherein the authenticating device is a phone and the requesting device is a computer.

12. The method of claim 1, wherein the authenticating device is a wearable device and the requesting device is a television device.

13. The method of claim 1, wherein the authenticating device is a wearable device and the requesting device is a computer.

14. A system, comprising:

a requesting device, including;

a display;

one or more processors; and

memory storing one or more programs, wherein the one or more programs are configured to be executed by the one or more processors, the one or more programs including instructions for;

receiving selection of one or more options;

receiving selection of an option to proceed with an action associated with the selected one or more options;

transmitting a request to proceed with the action, wherein the request includes information about the selected one or more options;

receiving a response to the request to proceed with the action;

in accordance with a determination that the response to the request to proceed with the action indicates that the authorization at the authenticating device was successful, displaying, on the display, an indication that the authorization was successful; and

in accordance with a determination that the response to the request to proceed with the action indicates that the authorization at the authenticating device was not successful, displaying, on the display, an indication that the authorization was not successful; and

an authenticating device, including;

a display;

one or more processors; and

memory storing one or more programs, wherein the one or more programs are configured to be executed by the one or more processors, the one or more programs including instructions for;

receiving the request to proceed with the action;

concurrently displaying, on the display;

an indication of the request to proceed with the action,

the information about the selected one or more options, and

an indication of the requesting device;

displaying, on the display, a request for authorization to proceed with the action;

receiving an input that is responsive to the request for authorization to proceed with the action; and

transmitting the response to the request to proceed with the action, the response to the request to proceed with the action based on the input that is responsive to the request for authorization to proceed with the action.

15. The system of claim 14, wherein the authenticating device includes hardware configured to respond to the input that is responsive to the request for authorization to proceed with the action and wherein the requesting device does not include the hardware.

16. The system of claim 15, wherein the action is creating a secure network connection between the authenticating device and a remote server, the system further comprising:

in response to determining, at the authenticating device, that the input that is responsive to the request for authorization to proceed with the action is consistent with input authorized to proceed with the action, proceeding, by the authenticating device, with the action using the hardware configured to respond to the input that is responsive to the request for authorization to proceed with the action.

17. The system of claim 15, wherein the action is creating a secure network connection between the requesting device and a remote server, the system further comprising:

in response to determining, at the authenticating device, that the input that is responsive to the request for authorization to proceed with the action is consistent with input authorized to proceed with the action, transmitting, by the authenticating device, a token to the requesting device, the token generated using hardware configured to respond to the input that is responsive to the request for authorization to proceed with the action;

receiving, at the requesting device, the token from the authenticating device; and

proceeding, by the requesting device, with the action using the token received from the authenticating device.

18. The system of claim 14, wherein the indication of the requesting device includes a graphical representation of the requesting device.

19. The system of claim 14, wherein the authenticating device is in a locked state when receiving, at the authenticating device, the input that is responsive to the request for authorization to proceed with the action, the system further comprising:

in response to determining, at the authenticating device, that the input that is responsive to the request for authorization to proceed with the action is consistent with input authorized to proceed with the action,

maintaining the authenticating device in the locked state while transmitting, by the authenticating device, the response to the request to proceed with the action, the response to the request to proceed with the action based on the input.

20. The system of claim 14, wherein the requesting device is signed into a service using an account when transmitting the request to proceed with the action and the authenticating device is signed into the service using the account when receiving the request to proceed with the action.

21. The system of claim 14, further comprising:

transmitting, by the authenticating device, a token to a server, wherein the server uses the token to obtain a resource associated with the token.

22. The system of claim 14, further comprising:

transmitting, by the requesting device, a token to a server, wherein the server uses the token to obtain a resource associated with the token.

23. The system of claim 14, wherein the authenticating device is a phone and the requesting device is a television device.

24. The system of claim 14, wherein the authenticating device is a phone and the requesting device is a computer.

25. The system of claim 14, wherein the authenticating device is a wearable device and the requesting device is a television device.

26. The system of claim 14, wherein the authenticating device is a wearable device and the requesting device is a computer.