System and method for enabling seamless transfer of a secure session

• US 8,880,884 B2
• Filed: 07/15/2013
• Issued: 11/04/2014
• Est. Priority Date: 01/16/2012
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Seibert, Philip M., Sanaullah, Abu, Robison, Charles D. Jr., Cox, Claude L., Shepherd, Jason A.
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US13/941,818
• Publication Number:
  US 20130305350A1
• Time in Patent Office: 477 Days
• Field of Search: 713150-152, 713/161, 713/163, 713168-173, 726 2- 4, 726/17, 380277-278
• US Class Current: 713/168
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

An information handling system includes a memory and a processor to execute instructions stored in the memory, which causes the processor to at least: send identification information to a second information handling system in response to an identification request broadcast from the second information handling system via a short-range communication; receive first authentication information for a local application and a remote service from the second information handling system; receive a copy of the local application; authenticate a user for the copy of the local application and for the remote service prior to the user logging on to the information handling system; receive second authentication information from the user to access the information handling system; authenticate the user to the information handling system; and automatically initiate a secure session between the copy of the local application and the remote service when the user is authenticated to the information handling system.

Claims

1. An information handling system comprising:

a memory; and

a processor to execute instructions stored in the memory to cause the processor to at least;

receive first authentication information for a local application and a remote service from a second information handling system via a short-range communication;

receive a copy of the local application, wherein the copy of the local application includes session data from a secure session between the local application and the remote service, and keys used to encrypt and decrypt information sent during the secure session;

authenticate a user for the copy of the local application and for the remote service prior to the user logging on to the information handling system based on the first authentication information;

authenticate the user to the information handling system based on second authentication information received from the user; and

automatically initiate a secure session between the copy of the local application and the remote service when the user is authenticated to the information handling system.

2. The information handling system of claim 1 wherein the instructions further cause the processor to:

send identification information to the second information handling system in response to an identification request broadcast from the second information handling system via the short-range communication.

3. The information handling system of claim 1 wherein the instructions further cause the processor to:

detect a third information handling system with a second short-range communication of the information handling system when the user is authenticated to the information handling system;

receive a list of trusted devices;

receive identification information for the third information handling system;

verify that the third information handling system is a trusted device when the identification information for the third information handling system is in the list of trusted devices;

send the authentication information for the copy of the local application and the remote service to the third information handling system when the third information handling system is within the second short-range communication and is verified as a trusted device; and

send an updated of the copy of the local application to the third information handling system.

4. The information handling system of claim 1 wherein the keys are a private key and a public key associated with the local application, and a public key received from the remote service.

5. The information handling system of claim 1 wherein the secure session is initiated at a point ended by the user on the second device based on the session data in an updated copy of the local application.

6. The information handling system of claim 1 wherein the identification request is broadcast from the second information handling system when a user is authenticated for the local application on the second information handling system and the remote service.

7. A method comprising:

receiving, at a first device, first authentication information for a local application and a remote service from a second device via a short-range communication;

receiving a copy of the local application, wherein the copy of the local application includes session data from a secure session between the local application and the remote service, and keys used to encrypt and decrypt information sent during the secure session;

authenticating, at the first device, a user for the copy of the local application and for the remote service prior to the user logging on to the first device based on the first authentication information;

authenticating the user to the first device based on second authentication information received from the user; and

automatically initiating a secure session between the copy of the local application and the remote service when the user is authenticated to the first device.

8. The method of claim 7 further comprising:

sending, from the first device, identification information to the second device in response to an identification request broadcast from the second device via the short-range communication.

9. The method of claim 7 further comprising:

detecting a third device with a second short-range communication of the first device when the user is authenticated to the first device;

receiving a list of trusted devices;

receiving identification information for the third device;

verifying that the third device is a trusted device when the identification information for the third device is in the list of trusted devices;

sending the authentication information for the copy of the local application and the remote service to the third device when the third device is within the second short-range communication and is verified as a trusted device; and

sending, from the first device, a updated of the copy of the local application to the third device.

10. The method of claim 7 wherein the identification request is broadcast from the second device when a user is authenticated for a local application on the second device and a remote service.

11. The method of claim 7 wherein the keys are a private key and a public key associated with the local application, and a public key received from the remote service.

12. The method of claim 7 wherein the secure session is initiated at a point ended by the user on the second device based on the session data in an updated copy of the local application.

13. A method comprising:

authenticating, at a device, a user for a local application and for a remote service based on authentication information received at the device;

detecting, by the device, a nearby device when the user is authenticated for the local application and for the remote service;

receiving identification information from the nearby device;

verifying the nearby device as a trusted device in response to the identification information for the device being located in a list of trusted devices;

sending the authentication information for the local application and the remote service to the nearby device in response to the nearby device being verified, wherein the nearby device uses the authentication information for the local application and the remote service to pre-authenticate the nearby device for the local application and the remote service prior to the user accessing the nearby device; and

initiating a secure session between the local application and the remote service.

14. The method of claim 13 further comprising:

creating a list of trusted devices for a user prior to when the user is authenticated for the local application and the remote service.

15. The method of claim 13 wherein the nearby device is within a short-range communication of the device.

16. The method of claim 15 wherein the short-range communication is selected from a group consisting of a blue tooth communication and a near field communication.

17. The method of claim 13 wherein the identification information is service set identification.

18. The method of claim 13 wherein the list of trusted devices is stored in a cloud of services associated with the remote service.

19. The method of claim 13 wherein the update includes session data from the secure session, keys used to encrypt and decrypt information sent during the secure session.

20. The method of claim 13 wherein the keys are a private key and a public key associated with the local application, and a public key received from the remote service.