Back to results
US 12,750,664 B2Granted
Cross platform credential sharing
AssigneeApple Inc.
InventorsYousuf H. Vaid, Christopher Sharp, Matthew C. Byington, Sunil Nair, Dmitry Vinokurov, Brandon Leventhal, Alex Pelletier, Casey Astiz
Life of this patent
Estimating the term…
Abstract
The present application relates to devices and components including apparatus, systems, and methods to share a credential for accessing a secured entity between an origination device and a recipient device. In some embodiments, the sharing may be cross platform where the recipient device executes a different platform than the origination device.
Claims20
One or more non-transitory, computer-readable media having instructions that, when executed by one or more processors of an origination device, cause the origination device to:
- detect a user indication of an access credential to be shared with a recipient device, the access credential to provide access to a secured entity;
- identify one or more limitations, comprising an indication of the access credential, that define a particular access point that is usable by the recipient device with the access credential;
- provide an indication of the one or more limitations to a credential manager;
- obtain a token corresponding to the access credential from the credential manager, wherein the token is generated based at least in part on the one or more limitations;
- generate a password for protection of the token;
- provide the token and the password to a relay server for storage, the recipient device configured to retrieve the token from the relay server with the password;
- receive a uniform resource locator (URL) for retrieving the token from the relay server;
- and
- provide, via a communication application executed by the origination device, the uniform resource locator to the recipient device for retrieval of the token.
6 more elements
An origination device, comprising:
- memory configured to store an access credential for access to an entity, the access credential to provide access to a secured entity;
- processing circuitry coupled to the memory, the processing circuitry configured to:
- display an indication that the access credential can be shared with a recipient device;
- detect a user selection of the access credential to be shared with the recipient device;
- identify one or more limitations, comprising an indication of the access credential, that define a particular access point that is usable by the recipient device with the access credential;
- provide an indication of the one or more limitations to a credential manager;
- obtain a token corresponding to the access credential, wherein the token is generated based at least in part on the one or more limitations;
- provide the token to a relay server for storage, the recipient device configured to retrieve the token from the relay server for provision of the access credential;
- receive a uniform resource locator (URL) for retrieving the token from the relay server;
- and
- provide, via a communication application executed by the origination device, the uniform resource locator to the recipient device for retrieval of the token.
8 more elements
A method, comprising:
- displaying, by an origination device, an indication that an access credential can be shared with a recipient device;
- detecting, by the origination device, a user selection of the access credential to be shared with the recipient device;
- identifying, by the origination device, one or more limitations, comprising an indication of the access credential, that define a particular access point that is usable by the recipient device with the access credential;
- providing, by the origination device, an indication of the one or more limitations to a credential manager;
- obtaining, by the origination device, a token corresponding to the access credential, wherein the token is generated based at least in part on the one or more limitations;
- providing, by the origination device, the token to a relay server for storage, the recipient device configured to retrieve the token from the relay server for provision of the access credential;
- receiving, by the origination device, a uniform resource locator (URL) for retrieving the token from the relay server;
- and
- providing, by the origination device via a communication application executed by the origination device, the uniform resource locator to the recipient device for retrieval of the token.
6 more elements
Dependencies are inferred from the claim text.