# US 11,310,233 B2 · Method for authenticating smart glasses in a data network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,310,233 B2 - Document ID: US11310233B2 - Status: Granted - Kind: B2 - Application number: 16/684,805 - Filed: 2019-11-15 - Published: 2020-05-21 - Granted: 2022-04-19 - Earliest claimed: 2018-11-21 - Assignees: Teamviewer Germany GmbH - Applicants: Teamviewer Germany GmbH - Inventors: Henrik Holle; Hendrik Witt; Christoph Eggert - Web page: https://patentgrep.com/patent/US11310233B2 ## CPC - H04L 63/0815: {providing single-sign-on or federations} - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04W 12/06: Authentication - H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses - H04L 2463/082: applying multi-factor authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method for authenticating smart glasses in a data network includes transmitting a message to an authentication computer of the data network, generating a first transaction code and transmitting to the smart glasses, reading authorization data of a user, without involving the smart glasses, into the data network and processing by the authentication computer, which carries out an authentication of the user on the basis of the authorization data, and in case of a successful authentication, reading a second transaction code into the data network, wherein if a check performed by the authentication computer shows that the second transaction code matches the first, an access right is provided for the smart glasses and stored in the smart glasses, the access right enabling the smart glasses to access one or a plurality of predetermined services in the data network. ## Claims ### Claim 1 A method for authenticating smart glasses in a data network, comprising: transmitting a message by the smart glasses to an authentication computer of the data network by a digital data transfer in the data network; generating and transmitting by the authentication computer, in response to the transmitted message, a first transaction code to the smart glasses by a digital data transfer in the data network; receiving, in response to a first operation performed on a terminal not associated with the smart glasses, authorization data of a user, which is not inputted by the smart glasses; into the data network, without involvement of the smart glasses, and processing the authorization data of the user by the authentication computer, which carries out an authentication of the user on the basis of the authorization data; receiving, by the authentication computer, in a case of a successful authentication of the user, a second transaction code, which is not inputted by the smart glasses, in response to a second operation performed on the terminal; and checking by the authentication computer whether the second transaction code matches the first transaction code; and if the checking shows that the second transaction code matches the first transaction code; providing an access right for the smart glasses by the authentication computer; and storing the access right in the smart glasses, wherein the access right enables the smart glasses to access one or a plurality of predetermined services in the data network. ### Claim 2 (depends on 1) The method according to claim 1, wherein the access right comprises a preset validity period or a signature as information which must be checked when the access right of the smart glasses is used to access the predetermined service or services. ### Claim 3 (depends on 1) The method according to claim 1, wherein the transmitting of the message is triggered by an operation performed on the smart glasses or on another communication device. ### Claim 4 (depends on 1) The method according to claim 1, wherein every digital data transfer in the data network between the smart glasses and the authentication computer takes place in an encrypted manner or using a wireless communication unit of the smart glasses. ### Claim 5 (depends on 1) The method according to claim 1, wherein the first reading receiving the authorization data comprises receiving data manually input by the user, via a keyboard or manipulation of a cursor on a screen, and wherein the manually input data represent at least a portion of the authorization data. ### Claim 6 (depends on 1) The method according to claim 1, wherein receiving the authorization data comprises receiving biometric data or data of a portable data carrier by the user, and wherein the received data represent at least a portion of the authorization data. ### Claim 7 (depends on 1) The method according to claim 1, wherein the authorization data are provided in a course of a multi-factor authentication. ### Claim 8 (depends on 1) The method according to claim 1, wherein generating the first transaction code includes outputting the first transaction code on the smart glasses for the user, and wherein the second operation is a manual input of a code, which is read into the data network as the second transaction code. ### Claim 9 (depends on 1) The method according to claim 1, wherein the authentication computer is a computer on which the terminal is provided. ### Claim 10 (depends on 1) The method according to claim 1, wherein the authentication computer transmits the access right to the smart glasses via a digital data transfer in the data network. ### Claim 11 (depends on 1) The method according to claim 1, wherein the access right is output on the terminal as an analog code, wherein the analog code is digitized and stored in the smart glasses, and wherein the analog code is a visual code, which is displayed on the terminal and digitized by scanning. ### Claim 12 An authentication system for a data network, comprising: smart glasses; an authentication computer; and a terminal, wherein the authentication system is configured to, when operating in the data network, perform a method comprising: transmitting a message by the smart glasses to the authentication computer of the data network by a digital data transfer in the data network; generating and transmitting by the authentication computer, in response to the transmitted message, a first transaction code to the smart glasses by a digital data transfer in the data network; receiving, in response to a first operation performed on a terminal not associated with the smart glasses, authorization data of a user, which is not inputted by the smart glasses; processing the authorization data of the user by the authentication computer, which carries out an authentication of the user on the basis of the authorization data; receiving, by the authentication computer, in a case of a successful authentication of the user, a second transaction code, which is not inputted by the smart glasses, in response to a second operation performed on the terminal; and checking by the authentication computer whether the second transaction code matches the first transaction code; and if the checking shows that the second transaction code matches the first transaction code; providing an access right for the smart glasses by the authentication computer; and storing the access right in the smart glasses, wherein the access right enables the smart glasses to access one or a plurality of predetermined services in the data network. ### Claim 13 (depends on 12) The system according to claim 12, wherein the access right comprises a preset validity period or a signature as information which must be checked when the access right of the smart glasses is used to access the predetermined service or services. ### Claim 14 (depends on 12) The system according to claim 12, wherein the transmitting is triggered by an operation performed on the smart glasses or on another communication device. ### Claim 15 (depends on 12) The system according to claim 12, wherein every digital data transfer in the data network between the smart glasses and the authentication computer takes place in an encrypted manner or using a wireless communication unit of the smart glasses. ### Claim 16 (depends on 12) The system according to claim 12, wherein receiving the authorization data comprises receiving data manually input by the user, via a keyboard or manipulation of a cursor on a screen, and wherein the manually input data represent at least a portion of the authorization data. ### Claim 17 (depends on 12) The system according to claim 12, wherein receiving the authorization data comprises receiving biometric data or data of a portable data carrier by the user, and wherein the received data represent at least a portion of the authorization data. ### Claim 18 (depends on 12) The system according to claim 12, wherein generating the first transaction code includes outputting the first transaction code on the smart glasses for the user, and wherein the second operation is a manual input of a code, which is read into the data network as the second transaction code. ### Claim 19 An apparatus for authenticating smart glasses, comprising: an authentication computer configured to receive a message from smart glasses by a digital data transfer in a data network, and to generate and transmit, in response to the received message, a first transaction code to the smart glasses by a digital data transfer in the data network; and a terminal configured to perform a first operation and a second operation, the terminal not being associated with the smart glasses, wherein the authentication computer is further configured to: receive, in response to the first operation by the terminal, authorization data of a user, which is not inputted by the smart glasses; process the authorization data of the user to carry out an authentication of the user on the basis of the authorization data; receive, in a case of a successful authentication of the user, a second transaction code, which is not inputted by the smart glasses, in response to the second operation; check whether the second transaction code matches the first transaction code; and if it is checked that the second transaction code matches the first transaction code: provide an access right for the smart glasses; and store the access right in the smart glasses, wherein the access right enables the smart glasses to access one or a plurality of predetermined services in the data network.