# US 10,484,175 B2 · Authenticating a mobile device to a digital signage device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,484,175 B2
- Document ID: US10484175B2
- Status: Granted
- Kind: B2
- Application number: 15/650,100
- Filed: 2017-07-14
- Published: 2019-01-17
- Granted: 2019-11-19
- Earliest claimed: 2017-07-14
- Assignees: Adobe Inc.
- Applicants: Adobe Inc.
- Inventors: Damien M. Antipa; Antonio Sanso
- Web page: https://patentgrep.com/patent/US10484175B2

## CPC

- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- G06F 21/44: Program or device authentication
- H04L 9/302: {involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes}
- H04L 9/3215: {using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18)}
- H04L 9/3221: {interactive zero-knowledge proofs}
- H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key}
- H04L 9/3271: {using challenge-response}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 63/0838: {using one-time-passwords}
- H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity}
- H04W 12/06: Authentication
- H04W 12/08: Access security
- G06Q 30/0267: {Wireless devices}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A digital medium environment includes a computing device (e.g., a mobile device), a digital signage device, and a server. The computing device is coupled to the digital signage device via a first communication channel, e.g., according to a low emissions protocol. The digital signage device is coupled to the server via a second communication channel that is encrypted. Security is achieved using a one-time-use token and a resolution provided by the computing device that proves the computing device knows a factorization, known to both the digital signage device and the server, without exposing the factorization in the resolution. The token is communicated from the server to the digital signage device, and is not exposed to the computing device. Thus, the authentication techniques described herein are robust and secure to an attack of communication between the computing device and the digital signage device, and are seamless to the user.

## Claims

### Claim 1

In a digital medium environment to authenticate a computing device to a digital signage device, a method implemented by the digital signage device, the method comprising:
receiving an authentication request from the computing device to authenticate the computing device to the digital signage device;
sending the authentication request to a server;
receiving a challenge including a random number and a token from the server;
sending the random number in the challenge to the computing device;
receiving a resolution from the computing device based on the random number and a factorization that includes a first prime factor and a second prime factor, the resolution not disclosing the factorization and proving the factorization is known to the computing device; and
sending the resolution and the token to the server to authenticate the computing device.

### Claim 2 (depends on 1)

The method as described in claim 1, wherein the computing device is not directly coupled to the server.

### Claim 3 (depends on 1)

The method as described in claim 1, wherein the factorization is known to the computing device and the server.

### Claim 4 (depends on 1)

The method as described in claim 1, wherein the resolution is based on the random number and the factorization by raising the first prime factor to the random number and computing a modulo result with the second prime factor.

### Claim 5 (depends on 1)

The method as described in claim 1, wherein the sending the random number in the challenge to the computing device includes sending the random number in the challenge without sending the token in the challenge.

### Claim 6 (depends on 1)

The method as described in claim 1, wherein the token is a one-time-use token and expires responsive to the one-time-use.

### Claim 7 (depends on 1)

The method as described in claim 1, wherein the receiving the request, the sending the random number in the challenge, and the receiving the resolution are communications via a first communication channel, and the sending the request, the receiving the challenge, and sending the resolution are communications via a second communication channel.

### Claim 8 (depends on 7)

The method as described in claim 7, wherein the first communication channel is different than the second communication channel, and the communications via the first communication channel are according to a low emissions protocol, and the communications via the second communications channel are encrypted.

### Claim 9 (depends on 1)

The method as described in claim 1, wherein the authentication request includes a username associated with the computing device.

### Claim 10 (depends on 1)

The method as described in claim 1, wherein the authentication request includes a login request to log into the digital signage device; and
the method further comprising, responsive to the computing device being authenticated, logging in the computing device to the digital signage device and allowing the computing device to control display of information on the digital signage device.

### Claim 11 (depends on 10)

The method as described in claim 10, further comprising updating the factorization responsive to the logging in the computing device to the digital signage device.

### Claim 12

In a digital medium environment to authenticate a computing device, a system comprising:
a request processing module implemented at least partially in hardware of one or more computing devices to:
receive an authentication request from the computing device to authenticate the computing device to a digital signage device; and
send the authentication request to a server;
a challenge processing module implemented at least partially in hardware of the one or more computing devices to:
receive a challenge including a random number and a token from the server; and
send the random number in the challenge to the computing device; and
a resolution processing module implemented at least partially in hardware of the one or more computing devices to:
receive a resolution from the computing device based on the random number and a factorization that includes a first prime factor and a second prime factor, the resolution not disclosing the factorization and proving the factorization is known to the computing device; and
send the resolution and the token to the server to authenticate the computing device.

### Claim 13 (depends on 12)

The system as described in claim 12, wherein the resolution is based on the random number and the factorization by raising the first prime factor to the random number and computing a modulo result with the second prime factor.

### Claim 14 (depends on 12)

The system as described in claim 12, wherein the challenge processing module is configured to maintain the token without sending the token in the challenge to the computing device.

### Claim 15 (depends on 12)

The system as described in claim 12, wherein the token is a one-time-use token and expires responsive to the one-time-use.

### Claim 16

In a digital medium environment to authenticate a computing device to a digital signage device, a method implemented by the computing device, the method comprising:
a step for sending, by the computing device, an authentication request to authenticate the computing device to the digital signage device;
a step for receiving, by the computing device, a challenge including a random number from the digital signage device;
a step for sending, by the computing device, a resolution to the digital signage device based on the random number and a factorization that includes a first prime factor and a second prime factor, the resolution not disclosing the factorization and proving the factorization is known to the computing device; and
a step for receiving, by the computing device, an acknowledgement that the computing device is authenticated.

### Claim 17 (depends on 16)

The method as described in claim 16, further comprising a step for providing to the digital signage device information for display on the digital signage device.

### Claim 18 (depends on 16)

The method as described in claim 16, further comprising a step for receiving a query confirming the computing device should authenticate with the digital signage device.

### Claim 19 (depends on 16)

The method as described in claim 16, further comprising:
a step for receiving an advertisement based on a username in the authentication request; and
a step for displaying the advertisement on the computing device.

### Claim 20 (depends on 16)

The method as described in claim 16, wherein the resolution is further based on a zero knowledge proof of the factorization.