# US 10,484,384 B2 · Indirect authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,384 B2 - Document ID: US10484384B2 - Status: Granted - Kind: B2 - Application number: 15/250,152 - Filed: 2016-08-29 - Published: 2017-02-23 - Granted: 2019-11-19 - Earliest claimed: 2011-09-29 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Stephen H. Cotterill - Web page: https://patentgrep.com/patent/US10484384B2 ## CPC - H04L 63/101: {Access control lists [ACL]} - G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} - G06F 21/35: communicating wirelessly - G06F 21/36: by graphic or iconic representation - G06F 21/40: by quorum, i.e. whereby two or more security principals are required - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04W 12/06: Authentication - H04W 12/08: Access security - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 12/77: Graphical identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Techniques are provided for or granting authorization to restricted content on a display device from an authorizing device. In one embodiment, the display device may operate in a display mode where only unrestricted content is accessible. To access restricted content, the display device may transmit an authorization request signal to the authorizing device. The authorizing device, having received the authorization request, prompts an authorized user to enter an authentication input, such as a password or gesture, on the authorizing device. Upon verification of the authentication input, the authorizing device is authenticated. An authorization signal is transmitted to the display device, and the display device may operate in an authorized mode, having access to otherwise restricted content or functions. ## Claims ### Claim 1 A system, comprising: a display device comprising a display device processing system coupled to a network, the display device processing system configured to: operate, by the display device, in a display mode, wherein restricted content is not accessible by the display device when the display device is operating in the display mode; transmit, from the display device, an authorization request signal over the network to a plurality of authorizing devices, wherein the plurality of authorizing devices includes an authorizing device, and wherein the authorization request signal includes a request to operate in an authorized mode to access the restricted content, receive, by the display device, an authorization signal over the network, wherein the authorization signal includes authorization to operate in the authorized mode to access the restricted content, and operate, by the display device, in the authorized mode in response to receiving the authorization signal, wherein restricted content is accessible by the display device when the display device is operating in the authorized mode; the authorizing device comprising an authorizing device processing system coupled to the network, the authorizing device processing system configured to: receive, by the authorizing device, the authorization request signal over the network from the display device, and receive, by the authorizing device, an authentication input to authorize the display device to operate in the authorized mode to access the restricted content, wherein the authentication input is received from a user of the authorizing device to verify the user of the authorizing device by determining whether the authentication input matches stored credentials corresponding to the user of the authorizing device, and wherein the user of the display device and the user of the authorizing device are different users; and a server comprising a server processing system coupled to the network, the server processing system configured to transmit, from the server, the authorization signal to the display device over the network if the authentication input matches the stored credentials corresponding to the user of the authorizing device. ### Claim 2 (depends on 1) The system of claim 1, wherein at least one of the display device and the authorizing device further comprises a touch screen. ### Claim 3 (depends on 1) The system of claim 1, wherein the display device processing system is configured to operate in a ready mode before operating in the authorized mode, wherein the display device processing system is configured to receive and process the authorization signal while operating in the ready mode. ### Claim 4 (depends on 3) The system of claim 3, wherein the display device processing system is configured to operate in the ready mode upon receiving a ready-mode input. ### Claim 5 (depends on 4) The system of claim 4, wherein the display device processing system is configured to transmit an authorization request signal upon receiving the ready-mode input. ### Claim 6 (depends on 1) The system of claim 1, wherein the authorizing device processing system is configured to prompt for the authentication input on the authorizing device in response to receiving the authorization request signal. ### Claim 7 (depends on 1) The system of claim 1, wherein the authorizing device processing system is configured to produce an indication in response to receiving an authorization request signal from the display device, wherein the indication comprises an audio indication, a visual indication, or a combination thereof. ### Claim 8 (depends on 1) The system of claim 1, wherein the authorizing device processing system is configured to receive the authentication input for verifying an identity of the user of the authorizing device. ### Claim 9 (depends on 8) The system of claim 8, wherein the server comprises an authentication server and wherein the server processing system is configured to verify the identity of the user of the authorizing device bused on the authentication input. ### Claim 10 (depends on 9) The system of claim 9 wherein the server further comprises an application server and wherein the server processing system is configured to receive authentication data from the authentication server and transmit the authorization signal based on the authentication data. ### Claim 11 (depends on 1) The system of claim 1, wherein the authorizing device processing system is configured to receive the authorization request signal from the display device and request the authentication input from the user of the authorizing device in response to receiving the authorization request signal. ### Claim 12 An indirect authorization system, comprising: a display device, wherein the display device is configured to: operate, by the display device, in a display mode where restricted content is not accessible by the display device, transmit, from the display device, a request signal to a plurality of authorizing devices before entering an authorized mode where a portion of the restricted content is accessible by the display device, wherein the plurality of authorizing devices includes an authorizing device, and wherein the request signal includes a request to operate in the authorized mode to access the restricted content, receive, by the display device, an authorization signal, wherein the authorization signal includes authorization to operate in the authorized mode to access the restricted content, and operate, by the display device, in the authorized mode in response to receiving the authorization signal; the authorizing device configured to: receive, by the authorizing device, the request signal from the display device and receive, by the authorizing device, an authentication input from a user of the authorizing device to verify the user of the authorizing device by determining whether the authentication input matches stored credentials corresponding to the user of the authorizing device, wherein the user of the display device and the user of the authorizing device are different users; a server configured to: receive, by the server, the authentication input from the authorizing device, authenticate, by the server, the authentication input by determining that the authenticate input matches the stored credentials corresponding to the user of the authorizing device, and transmit, from the server, the authorization signal to the display device; and a wireless network configured to support communication between the display device, the authorizing device, and the server. ### Claim 13 (depends on 12) The indirect authorization system of claim 12, wherein the authorizing device is configured to queue received request signals from a plurality of display devices. ### Claim 14 (depends on 12) The indirect authorization system of claim 12, wherein the display device is configured to select one of a plurality of authorizing devices for transmitting the request signal. ### Claim 15 (depends on 12) The indirect authorization system of claim 12, wherein the request signal is one of an optical signal and an audio signal. ### Claim 16 (depends on 15) The indirect authorization system of claim 15, wherein the authorizing device comprises a camera configured to detect the optical signal. ### Claim 17 A method, comprising: operating a display device in display mode, wherein restricted content is not accessible by the display device when the display device is operating in the display mode; transmitting, by the display device, an authorization request signal to a plurality of authorizing devices, wherein the plurality of authorizing devices includes an authorizing device, and wherein the authorization request signal includes a request to operate in an authorized mode to access the restricted content; receiving an authentication input at an authorizing device from a user of the authorizing device to verify the user of the authorizing device by determining whether the authentication input matches stored credentials corresponding to the user of the authorizing device, wherein the user of the display device and the user of the authorizing device are different users; wirelessly transmitting an authorization signal to the display device from a device external to the display device if the authentication input matches the stored credentials corresponding to the user of the authorizing device, wherein the authorization signal includes authorization to operate in the authorized mode to access the restricted content; and operating the display device in an authorized mode after the display device receives the authorization signal, wherein operating the display device in the authorized mode comprises accessing some or all of the restricted content by the user. ### Claim 18 (depends on 17) The method of claim 17, comprising operating the display device in a ready mode in response to receiving a ready-mode input on the display device. ### Claim 19 (depends on 18) The method of claim 18, comprising transmitting an authorization request from display device to the authorizing device when the display device is operating in the ready mode. ### Claim 20 (depends on 17) The method of claim 17, comprising authenticating the authentication input by comparing the authentication input to an account database in an authentication server.