# US 10,375,081 B2 · Techniques and system for extended authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,081 B2 - Document ID: US10375081B2 - Status: Granted - Kind: B2 - Application number: 14/459,216 - Filed: 2014-08-13 - Published: 2016-02-18 - Granted: 2019-08-06 - Earliest claimed: 2014-08-13 - Assignees: Intel Corporation - Applicants: Intel Corporation - Inventors: Glen J. Anderson - Web page: https://patentgrep.com/patent/US10375081B2 ## CPC - H04L 63/104: {Grouping of entities} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 12/06: Authentication - H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract An apparatus may include a memory to store authentication information for authenticating to a device group and a wearable device identifier for an unauthenticated device, a communications interface to transmit a probe signal over a local communication path and receive a reply message to the probe signal, and a device authentication module. The device authentication module may be to monitor the reply message, and schedule transmission of the authentication information over the local communication path when the reply message comprises the device identifier and a proximity indicator that identifies a local origin of the reply message. ## Claims ### Claim 1 An apparatus, comprising: a processor; a communication interface coupled to the processor; a local communication path interface coupled to the processor; and memory coupled to the processor, the memory comprising a device identifier and instructions that when executed by the processor cause the processor to: transmit, via the communication interface, a message to a device group authentication device, the message comprising an indication of the device identifier; receive, via the communication interface, a return message from the device group authentication device, the return message comprising an indication of authentication information for the device group, the authentication information to allow communication, via the communication interface, with one or more devices of the device group without manually entering authentication information; transmit, over a local communication path via the local communication path interface, a first probe signal, the first probe signal to ping for additional devices to authenticate to the device group; receive, over the local communication path via the local communication path interface, a reply message from an additional device, the reply message responsive to the first probe signal; determine whether the additional device is proximate to the apparatus based at least in part on the local communication path and the reply message; and transmit, over the local communication path via the local communication path interface, an authentication message based on a determination that the additional device is proximate to the apparatus, the authentication message comprising the indication of the authentication information to allow the additional device to communicate, via the communication interface, with one or more devices of the device group without manually entering authentication information. ### Claim 2 (depends on 1) The apparatus of claim 1, the local communication path comprising an electrically conductive surface. ### Claim 3 (depends on 2) The apparatus of claim 2, the electrical conductive surface is a skin surface of a user of the apparatus and the additional device. ### Claim 4 (depends on 1) The apparatus of claim 1, the memory comprising instructions that when executed by the processor further cause the processor to: generate a user query responsive to receipt of the reply message; receive a user authorization message responsive to the user query; and transmit the authentication message responsive to the determination that the additional device is proximate to the apparatus or responsive to receiving the user authorization message. ### Claim 5 (depends on 1) The apparatus of claim 1, the memory comprising instructions that when executed by the processor further cause the processor to generate an operation signal when in an operating configuration. ### Claim 6 (depends on 5) The apparatus of claim 5, the memory comprising instructions that when executed by the processor further cause the processor to generate the first probe signal when the operation signal is received. ### Claim 7 (depends on 5) The apparatus of claim 5, the memory comprising instructions that when executed by the processor further cause the processor to repeatedly scan for a signal over the local communication path interface when the operation signal is received. ### Claim 8 (depends on 1) The apparatus of claim 1, the memory comprising instructions that when executed by the processor further cause the processor to: transmit, via the local communication path interface, a second probe signal over a local communication path, the second probe signal to ping for additional devices to authenticate to the device group; receive, over the local communication path via the local communication path interface, a reply message from a second additional device; determine whether to authenticate the second additional device to the device group based in part on the reply message; and transmit, over the local communication path via the local communication path interface, an second authentication message based on a determination to authenticate the second additional device to the device group, the second authentication message comprising an indication of the authentication information to allow the second additional device to communicate with one or more devices of the device group without manually entering authentication information. ### Claim 9 (depends on 8) The apparatus of claim 8, the reply message from the second additional device comprising an indication of biometric information, the memory comprising instructions that when executed by the processor further cause the processor to determine whether to authenticate the second additional device to the device group based in part on the biometric information. ### Claim 10 At least one non-transitory machine-readable storage medium comprising instructions that when executed by a processor at a computing device, cause the processor to: transmit, via a communication interface, a message to a device group authentication device, the message comprising an indication of a device identifier for the computing device; receive, via the communication interface, a return message from the device group authentication device, the return message comprising an indication of authentication information for the device group, the authentication information to allow communication, via the communication interface, with one or more devices of the device group without manually entering authentication information; transmit, over a local communication path via a local communication path interface, a first probe signal, the first probe signal to ping for additional devices to authenticate to the device group; receive, over the local communication path via the local communication path interface, a reply message from an additional device; determine whether the additional device is proximate to the computing device based at least in part on the local communication path and the reply message; and transmit, over the local communication path via the local communication path interface, an authentication message based on a determination that the additional device is proximate to the computing device, the authentication message comprising the indication of the authentication information to allow the additional device to communicate, via the communication interface, with one or more devices of the device group without manually entering authentication information. ### Claim 11 (depends on 10) The at least one non-transitory machine-readable storage medium of claim 10, the local communication path comprising an electrically conductive surface. ### Claim 12 (depends on 11) The at least one non-transitory machine-readable storage medium of claim 11, the electrically conductive surface is a skin surface of a user of the computing device and the additional device. ### Claim 13 (depends on 10) The at least one non-transitory machine-readable storage medium of claim 10, comprising instructions that when executed by the computing device, cause the computing device to: generate a user query responsive to receipt of the reply message; receive a user authorization message responsive to the user query; and transmit the authentication message responsive to the determination that the additional device is proximate to the apparatus or responsive to receiving the user authorization message. ### Claim 14 (depends on 10) The at least one non-transitory machine-readable storage medium of claim 10, the comprising instructions that when executed by the computing device further cause the computing device to: transmit, via the local communication path interface, a second probe signal over a local communication path, the second probe signal to ping for additional devices to authenticate to the device group; receive, over the local communication path via the local communication path interface, a reply message from a second additional device; determine whether to authenticate the second additional device to the device group based in part on the reply message; and transmit, over the local communication path via the local communication path interface, an second authentication message based on a determination to authenticate the second additional device to the device group, the second authentication message comprising an indication of the authentication information to allow the second additional device to communicate with one or more devices of the device group without manually entering authentication information. ### Claim 15 (depends on 14) The at least one non-transitory machine-readable storage medium of claim 14, the reply message from the second additional device comprising an indication of biometric information, the medium comprising instructions that when executed by the computing device further cause the computing device to determine whether to authenticate the second additional device to the device group based in part on the biometric information. ### Claim 16 A computer implemented method, comprising: transmitting, from a computing device via a communication interface, a message to a device group authentication device, the message comprising an indication of a device identifier for the computing device; receiving, at the computing device via the communication interface, a return message from the device group authentication device, the return message comprising an indication of authentication information for the device group, the authentication information to allow communication, via the communication interface, with one or more devices of the device group without manually entering authentication information; transmitting, over a local communication path via a local communication path interface, a first probe signal to ping for additional devices to authenticate to the device group; receiving, over the local communication path via the local communication path interface, a reply message from an additional device; determining whether the additional device is proximate to the computing device based at least in part on the local communication path and the reply message; and transmitting, over the local communication path via the local communication path interface, an authentication message based on a determination that the additional device is proximate to the computing device, the authentication message comprising the indication of the authentication information to allow the additional device to communicate, via the communication interface, with one or more devices of the device group without manually entering authentication information. ### Claim 17 (depends on 16) The computer implemented method of claim 16, the local communication path comprising an electrically conductive surface. ### Claim 18 (depends on 17) The computer implemented method of claim 17, the electrically conductive surface is a skin surface of a user of the computing device and the additional device. ### Claim 19 (depends on 16) The computer implemented method of claim 16, comprising: generating a user query responsive to receipt of the reply message; receiving a user authorization message responsive to the user query; and transmitting the authentication message responsive to the determination that the additional device is proximate to the apparatus or responsive to receiving the user authorization message. ### Claim 20 (depends on 16) The computer implemented method of claim 16, comprising: transmitting, via the local communication path interface, a second probe signal over a local communication path, the second probe signal to ping for additional devices to authenticate to the device group; receiving, over the local communication path via the local communication path interface, a reply message from a second additional device; determining whether to authenticate the second additional device to the device group based in part on the reply message; and transmitting, over the local communication path via the local communication path interface, an second authentication message based on a determination to authenticate the second additional device to the device group, the second authentication message comprising an indication of the authentication information to allow the second additional device to communicate with one or more devices of the device group without manually entering authentication information. ### Claim 21 (depends on 20) The computer implemented method of claim 20, the reply message from the second additional device comprising an indication of biometric information, the method comprising determining whether to authenticate the second additional device to the device group based in part on the biometric information.