Provisioning a device to be an authentication device
AssigneeAmazon Technologies, Inc.
InventorsGregory B. Roth, Nathan R. Fitch, Graeme D. Baer
Life of this patent
Estimating the term…
Abstract
In certain embodiments, a web services system receives a request to provision a device, such as a telephone, as an authentication device. The web services system initiates display of an image communicating a key to allow the telephone to capture the image and to send key information associated with the key. The web services system receives the key and determines that the key information is valid. In response to the determination, the web services system sends a seed to the telephone to provision the telephone to be an authentication device. The telephone can use the seed to generate one-time passcodes to access a service of the web services system.
Claims20
A computer-implemented method, comprising:
- causing a computing device to capture an image displayed on a first system, wherein the image is obtained from a second system as a result of the first system submitting a request to the second system through a first communication channel to generate the image;
- determining a challenge code from the image;
- generating a response based at least in part on the challenge code and a first authentication information, wherein the first authentication information is obtained by the computing device in response to the computing device transmitting an encryption key generated based on another image to the second system;
- and
- submitting, from the computing device, the response to the second system through a second communication channel, different from the first communication channel, to verify the computing device to perform one or more operations provided by the second system.
A system, comprising:
- one or more processors;
- and
- memory that stores computer-executable instructions that are executable by the one or more processors to cause the system to:
- obtain an image from a first system, wherein the image is obtained as a result of the first system submitting a request that causes a second system to produce the image;
- extract a challenge code based at least in part on the image;
- calculate a response based at least in part on the challenge code and a first authentication information obtained as a result of the system transmitting an encryption key determined based on another image to the second system;
- and
- transmit the response to the second system through a first communication channel to verify the system to perform one or more operations provided by the second system.
A system, comprising:
- one or more processors;
- and
- memory that stores computer-executable instructions that are executable by the one or more processors to cause the system to:
- generate an image as a result of obtaining a request from a computing device;
- cause the image to be displayed on the computing device, the image encoding an encryption key and enabling an authentication application of a device to obtain a first authentication information based at least in part on the image;
- provide the first authentication information to the device in response to obtaining the encryption key generated based, at least in part, on the image from the device;
- obtain a passcode generated based at least in part on the first authentication information;
- validate the authentication application based at least in part on the passcode and the first authentication information matching a second authentication information;
- generate another image to be displayed on the computing device;
- and
- obtain a response from the device generated based at least in part on;
- the first authentication information, and
- a challenge code to verify the device to perform one or more operations, the challenge code determined based at least in part on the another image.
Dependencies are inferred from the claim text.