Provisioning a device to be an authentication device
AssigneeAmazon Technologies, Inc.
InventorsGregory B. Roth, Nathan R. Fitch, Graeme D. Baer
Life of this patent
Estimating the term…
Abstract
In certain embodiments, a web services system receives a request to provision a device, such as a telephone, as an authentication device. The web services system initiates display of an image communicating a key to allow the telephone to capture the image and to send key information associated with the key. The web services system receives the key and determines that the key information is valid. In response to the determination, the web services system sends a seed to the telephone to provision the telephone to be an authentication device. The telephone can use the seed to generate one-time passcodes to access a service of the web services system.
Claims20
A computer-implemented method, comprising:
- validating an authentication application based at least in part on a passcode generated based at least in part on first authentication information matching second authentication information, the first authentication information obtained based at least in part on an image displayed on a computing device;
- generating another image to be displayed on the computing device;
- and
- obtaining a response from a device generated based at least in part on:
- the first authentication information, and
- a challenge code to verify the device to perform one or more operations, the challenge code determined based at least in part on the another image.
A system, comprising:
- one or more processors;
- and
- memory that stores computer-executable instructions that are executable by the one or more processors to cause the system to:
- validate an authentication application based at least in part on a passcode generated based at least in part on first authentication information matching second authentication information, the first authentication information obtained based at least in part on a first media item presented on a computing device;
- generate another media item to be displayed on the computing device;
- and
- obtain a response from a device generated based at least in part on:
- the first authentication information, and
- a challenge code to verify the device to perform one or more operations, the challenge code determined based at least in part on the another media item.
A non-transitory computer-readable storage medium comprising executable instructions that, when executed by one or more processors of a first computer system, cause the first computer system to at least:
- validate an authentication application based at least in part on a passcode generated based at least in part on first authentication information matching second authentication information, the first authentication information obtained based at least in part on a first media item presented on a computing device;
- generate another media item to be displayed on the computing device;
- and
- obtain a response from a device generated based at least in part on:
- the first authentication information, and
- data to verify the device to perform one or more operations, the data determined based at least in part on the another media item.
Dependencies are inferred from the claim text.