Authentication with secondary approver

• US 10,419,933 B2
• Filed: 04/04/2018
• Issued: 09/17/2019
• Est. Priority Date: 09/29/2011
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Cotterill, Stephen H.
• Primary Examiner(s): Bhattacharya, Sam
• Application Number:
  US15/945,610
• Publication Number:
  US 20180302790A1
• Time in Patent Office: Days
• Field of Search: 455406, 455410, 455411, 455415, 726 14
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Techniques are provided for giving access to restricted content on a first device from a second device through a wireless network. In one embodiment, the first device transmits an authorization request signal to the second device or to a server in the wireless network. The second device, having received the authorization request, prompts an authorized user to give authorization to the first device by inputting an authentication key such as a password or gesture on the second device. Upon verification of the authentication key, an authorization signal may be wirelessly transmitted to the first device, permitting access to the restricted content or functions on the first device. In some embodiments, the second device may be alerted to an authorization request and may select a request for authorization from a selectable queue of requests.

Claims

1. A requesting device, including:

a display;

one or more processors; and

memory storing one or more programs, wherein the one or more programs are configured to be executed by the one or more processors, the one or more programs including instructions for;

receiving selection for initiating a request for authorization;

providing options corresponding to a plurality of authorizing devices, the plurality of authorizing devices including an authorizing device, wherein the options corresponding to the plurality of authorizing devices are displayed on the display of the requesting device;

receiving input selecting an option corresponding to the authorizing device, wherein the input is received at a location of the display corresponding to the selected option;

transmitting, by the requesting device to the authorizing device, the request for authorization, wherein the request includes content related to the request for authorization, the content for display by the authorizing device;

receiving, from the authorizing device, a response to the request for authorization, wherein the response to the request for authorization is indicative of an input at the authorizing device; and

in response to receiving a response to the request for authorization that indicates that an authorization at the authorizing device was successful, displaying, on the display of the requesting device, an indication that the authorization was successful.

2. The requesting device of claim 1, the one or more programs further including instructions for:

prior to transmitting, by the requesting device, to the authorizing device the request for authorization;

providing options corresponding to a plurality of authorizing devices, the plurality of authorizing devices including the authorizing device; and

receiving input selecting an option corresponding to the authorizing device; and

wherein transmitting, by the requesting device, to the authorizing device the request for authorization is in accordance with receiving the input selecting the authorizing device from among the plurality of authorizing devices.

3. The requesting device of claim 1, the one or more programs further including instructions for:

prior to transmitting, by the requesting device, to the authorizing device the request for authorization;

selecting the authorizing device from among a plurality of authorizing devices based on the proximity of the authorizing device to the requesting device; and

wherein transmitting, by the requesting device, to the authorizing device the request for authorization is in accordance with selecting the authorizing device from among the plurality of authorizing devices.

4. The requesting device of claim 1, wherein the request for authorization includes one or more payment transactions details.

5. The requesting device of claim 1, the one or more programs further including instructions for:

in accordance with transmitting, by the requesting device, to the authorizing device the request for authorization, forgoing transmitting to another authorizing device of a plurality of authorizing devices the request for authorization.

6. The requesting device of claim 1, the one or more programs further including instructions for:

transmitting, by the requesting device, to a second authorizing device the request for authorization.

7. The requesting device of claim 1, wherein the authorizing device is a phone and the requesting device is a computer.

8. The requesting device of claim 1, wherein the authorizing device is a wearable device and the requesting device is a computer.

9. A non-transitory computer-readable storage medium storing one or more programs that are executable by one or more processors of a requesting device with a display, the one or more programs including instructions for:

receiving selection for initiating a request for authorization;

providing options corresponding to a plurality of authorizing devices, the plurality of authorizing devices including an authorizing device, wherein the options corresponding to the plurality of authorizing devices are displayed on the display of the requesting device;

receiving input selecting an option corresponding to the authorizing device, wherein the input is received at a location of the display corresponding to the selected option;

transmitting, by the requesting device to the authorizing device, the request for authorization, wherein the request includes content related to the request for authorization, the content for display by the authorizing device;

receiving, from the authorizing device, a response to the request for authorization, wherein the response to the request for authorization is indicative of an input at the authorizing device; and

in response to receiving a response to the request for authorization that indicates that an authorization at the authorizing device was successful, displaying, on the display of the requesting device, an indication that the authorization was successful.

10. The non-transitory computer-readable storage medium of claim 9, the one or more programs further including instructions for:

prior to transmitting, by the requesting device, to the authorizing device the request for authorization;

providing options corresponding to a plurality of authorizing devices, the plurality of authorizing devices including the authorizing device; and

receiving input selecting an option corresponding to the authorizing device; and

wherein transmitting, by the requesting device, to the authorizing device the request for authorization is in accordance with receiving the input selecting the authorizing device from among the plurality of authorizing devices.

11. The non-transitory computer-readable storage medium of claim 9, the one or more programs further including instructions for:

prior to transmitting, by the requesting device, to the authorizing device the request for authorization;

selecting the authorizing device from among a plurality of authorizing devices based on the proximity of the authorizing device to the requesting device; and

wherein transmitting, by the requesting device, to the authorizing device the request for authorization is in accordance with selecting the authorizing device from among the plurality of authorizing devices.

12. The non-transitory computer-readable storage medium of claim 9, wherein the request for authorization includes one or more payment transactions details.

13. The non-transitory computer-readable storage medium of claim 9, the one or more programs further including instructions for:

in accordance with transmitting, by the requesting device, to the authorizing device the request for authorization, forgoing transmitting to another authorizing device of a plurality of authorizing devices the request for authorization.

14. The non-transitory computer-readable storage medium of claim 9, the one or more programs further including instructions for:

transmitting, by the requesting device, to a second authorizing device the request for authorization.

15. The non-transitory computer-readable storage medium of claim 9, wherein the authorizing device is a phone and the requesting device is a computer.

16. The non-transitory computer-readable storage medium of claim 9, wherein the authorizing device is a wearable device and the requesting device is a computer.

17. A method, comprising:

at a requesting device with a display;

receiving selection for initiating a request for authorization;

providing options corresponding to a plurality of authorizing devices, the plurality of authorizing devices including an authorizing device, wherein the options corresponding to the plurality of authorizing devices are displayed on the display of the requesting device;

receiving input selecting an option corresponding to the authorizing device, wherein the input is received at a location of the display corresponding to the selected option;

transmitting, by the requesting device to the authorizing device, the request for authorization, wherein the request includes content related to the request for authorization, the content for display by the authorizing device;

receiving, from the authorizing device, a response to the request for authorization, wherein the response to the request for authorization is indicative of an input at the authorizing device; and

in response to receiving a response to the request for authorization that indicates that an authorization at the authorizing device was successful, displaying, on the display of the requesting device, an indication that the authorization was successful.

18. The method of claim 17, further comprising:

prior to transmitting, by the requesting device, to the authorizing device the request for authorization;

providing options corresponding to a plurality of authorizing devices, the plurality of authorizing devices including the authorizing device; and

receiving input selecting an option corresponding to the authorizing device; and

wherein transmitting, by the requesting device, to the authorizing device the request for authorization is in accordance with receiving the input selecting the authorizing device from among the plurality of authorizing devices.

19. The method of claim 17, further comprising:

prior to transmitting, by the requesting device, to the authorizing device the request for authorization;

selecting the authorizing device from among a plurality of authorizing devices based on the proximity of the authorizing device to the requesting device; and

wherein transmitting, by the requesting device, to the authorizing device the request for authorization is in accordance with selecting the authorizing device from among the plurality of authorizing devices.

20. The method of claim 17, wherein the request for authorization includes one or more payment transactions details.

21. The method of claim 17, further comprising:

in accordance with transmitting, by the requesting device, to the authorizing device the request for authorization, forgoing transmitting to another authorizing device of a plurality of authorizing devices the request for authorization.

22. The method of claim 17, further comprising:

transmitting, by the requesting device, to a second authorizing device the request for authorization.

23. The method of claim 17, wherein the authorizing device is a phone and the requesting device is a computer.

24. The method of claim 17, wherein the authorizing device is a wearable device and the requesting device is a computer.