# US 11,907,351 B2 · Secure cross-device authentication system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,907,351 B2 - Document ID: US11907351B2 - Status: Granted - Kind: B2 - Application number: 17/873,105 - Filed: 2022-07-25 - Published: 2024-01-25 - Granted: 2024-02-20 - Earliest claimed: 2022-07-24 - Assignees: Uab 360 It - Applicants: Uab 360 It - Inventors: Mindaugas Valkaitis - Web page: https://patentgrep.com/patent/US11907351B2 ## CPC - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/44: Program or device authentication - G06F 21/602: {Providing cryptographic facilities or services} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB} - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - H04L 9/3247: {involving digital signatures} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 2209/127: Trusted platform modules [TPM] - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method including receiving, by a second user device, an authentication message indicating that the second user device is to authenticate a first user device with a service provider that provides a service to the first user device; determining, by the second user device, one or more authentication factors associated with authenticating the first user device with the service provider; encrypting, by the second user device, the one or more authentication factors based at least in part on utilizing an encryption key associated with a trusted device included in the first user device; and transmitting, by the second user device, one or more encrypted authentication factors to enable authentication of the first user device with the service provider is disclosed. Various other aspects are contemplated. ## Claims ### Claim 1 A method, comprising: receiving, by a second user device, an authentication message indicating that the second user device is to assist with authenticating a first user device based at least in part on a determination that a biometric unit is available to the second user device, the authenticating being with a service provider that authenticates the first device in relation to providing a service to the first user device; determining, by the second user device, one or more authentication factors associated with authenticating the first user device with the service provider; encrypting, by the second user device, the one or more authentication factors based at least in part on utilizing an encryption key associated with a trusted device included in the first user device; and transmitting, by the second user device, one or more encrypted authentication factors along with an indication of successful verification of biometric information to enable authentication of the first user device with the service provider. ### Claim 2 (depends on 1) The method of claim 1, wherein determining the one or more authentication factors includes determining a first authentication factor, and determining a second authentication factor based at least in part on successful authentication of the first factor by the service provider. ### Claim 3 (depends on 1) The method of claim 1, wherein determining the one or more authentication factors includes determining a first authentication factor based at least in part on a predetermined string of alphanumeric characters. ### Claim 4 (depends on 1) The method of claim 1, wherein determining the one or more authentication factors includes determining a first authentication factor, and determining a second authentication factor based at least in part on predetermined secret information and a security algorithm. ### Claim 5 (depends on 1) The method of claim 1, wherein encrypting the one or more authentication factors includes verifying the biometric information. ### Claim 6 (depends on 1) The method of claim 1, wherein the encryption key associated with the trusted device includes a public key generated by the trusted device. ### Claim 7 (depends on 1) The method of claim 1, wherein the biometric unit is available to the second user device when the biometric unit is included in the second user device. ### Claim 8 A second user device for enabling authentication of a first user device, the second user device comprising: a memory; and a processor communicatively coupled to the memory, the memory and the processor being configured to: receive an authentication message indicating that the second user device is to assist with authenticating a first user device based at least in part on a determination that a biometric unit is available to the second user device, the authenticating being with a service provider that authenticates the first device in relation to providing a service to the first user device; determine one or more authentication factors associated with authenticating the first user device with the service provider; encrypt the one or more authentication factors based at least in part on utilizing an encryption key associated with a trusted device included in the first user device; and transmit, by the second user device, one or more encrypted authentication factors along with an indication of successful verification of biometric information to enable authentication of the first user device with the service provider. ### Claim 9 (depends on 8) The second user device of claim 8, wherein, to determine the one or more authentication factors, the memory and the processor are configured to determine a first authentication factor, and to determine a second authentication factor based at least in part on successful authentication of the first factor by the service provider. ### Claim 10 (depends on 8) The second user device of claim 8, wherein, to determine the one or more authentication factors, the memory and the processor are configured to determine a first authentication factor based at least in part on a predetermined string of alphanumeric characters. ### Claim 11 (depends on 8) The second user device of claim 8, wherein, to determine the one or more authentication factors, the memory and the processor are configured to determine a first authentication factor, and to determine a second authentication factor based at least in part on predetermined secret information and a security algorithm. ### Claim 12 (depends on 8) The second user device of claim 8, wherein, to encrypt the one or more authentication factors, the memory and the processor are configured to verify the biometric information. ### Claim 13 (depends on 8) The second user device of claim 8, wherein the encryption key associated with the trusted device includes a public key generated by the trusted device. ### Claim 14 (depends on 8) The second user device of claim 8, wherein the biometric unit is available to the second user device when the biometric unit is included in the second user device. ### Claim 15 A non-transitory computer-readable medium configured to store instructions, which when executed by a processor associated with a second user device for enabling authentication of a first user device, configure the processor to: receive an authentication message indicating that the second user device is to assist with authenticating a first user device based at least in part on a determination that a biometric unit is available to the second user device, the authenticating being with a service provider that authenticates the first device in relation to providing a service to the first user device; determine one or more authentication factors associated with authenticating the first user device with the service provider; encrypt the one or more authentication factors based at least in part on utilizing an encryption key associated with a trusted device included in the first user device; and transmit, by the second user device, one or more encrypted authentication f factors along with an indication of successful verification of biometric information actors to enable authentication of the first user device with the service provider. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein, to determine the one or more authentication factors, the processor is configured to determine a first authentication factor, and to determine a second authentication factor based at least in part on successful authentication of the first factor by the service provider. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein, to determine the one or more authentication factors, the processor is configured to determine a first authentication factor based at least in part on a predetermined string of alphanumeric characters. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein, to determine the one or more authentication factors, the processor is configured to determine a first authentication factor, and to determine a second authentication factor based at least in part on predetermined secret information and a security algorithm. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein, to encrypt the one or more authentication factors, the processor is configured to verify the biometric information. ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the encryption key associated with the trusted device includes a public key generated by the trusted device.