# US 2014/0157392 A1 · System and method for using a separate device to facilitate authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0157392 A1 - Document ID: US20140157392A1 - Status: Published application - Kind: A1 - Application number: 14/089,737 - Filed: 2013-11-25 - Published: 2014-06-05 - Earliest claimed: 2012-11-25 - Assignees: Angel Secure Networks, Inc. - Applicants: Angel Secure Networks, Inc. - Inventors: Fred Hewitt Smith; Cynthia Smith - Web page: https://patentgrep.com/patent/US20140157392A1 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/08: Access security - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/63: Location-dependent; Proximity-dependent - H04W 84/042: {Public Land Mobile systems, e.g. cellular systems} - H04W 84/12: WLAN [Wireless Local Area Networks] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system that incorporates the subject disclosure may perform, for example, operations including receiving a request from a first device to access information content of a second device. The process further includes determining that the first device is authorized to access the information content according to authorization credentials, and determining a token associated with the request in response to determining that the first device is authorized to access the information content. The token is forwarded to the first device, and it is confirmed that the token was received at the first device. Access to the information content of the second device is authorized in response to confirming that the token was received at the first device. Other embodiments are disclosed. ## Claims ### Claim 1 A method comprising: receiving, by a system comprising a processor, a request from a first device to access information content of a second device; determining, by the system, that the first device is authorized to access the information content according to authorization credentials; determining, by the system, a token associated with the request in response to determining that the first device is authorized to access the information content; forwarding, by the system, the token to the first device; confirming, by the system, that the token was received at the first device; and authorizing, by the system, access to the information content of the second device in response to confirming that the token was received at the first device. ### Claim 2 (depends on 1) The method of claim 1, wherein the first device comprises a mobile device. ### Claim 3 (depends on 2) The method of claim 2, wherein determining that the first device is authorized to access the information content comprises determining, by the system, a location of the first device. ### Claim 4 (depends on 3) The method of claim 3, wherein determining of the location comprises detecting proximity of the first device to a reference device. ### Claim 5 (depends on 4) The method of claim 4, wherein the reference device comprises the second device. ### Claim 6 (depends on 2) The method of claim 2, wherein the determining that the first device is authorized to access the information content comprises configuring one of a plurality of degrees of complexity. ### Claim 7 (depends on 6) The method of claim 6, further comprising adjusting, by the system, the one of the plurality of degrees of complexity from a remote location. ### Claim 8 A system comprising: a processor; and a memory that stores executable instructions that when executed by the processor, facilitate performance of operations comprising: receiving a request from a first device to access information content of a second device; determining that the first device is authorized to access the information content according to authorization credentials; determining a token associated with the request in response to determining that the first device is authorized to access the information content; forwarding the token to the first device; confirming that the token was received at the first device; and authorizing access to the information content of the second device in response to confirming that the token was received at the first device. ### Claim 9 (depends on 8) The system of claim 8, wherein the first device comprises a mobile device. ### Claim 10 (depends on 9) The system of claim 9, wherein determining that the first device is authorized to access the information content comprises determining, by the system, a location of the first device. ### Claim 11 (depends on 10) The system of claim 10, wherein determining of the location comprises detecting proximity of the first device to a reference device. ### Claim 12 (depends on 11) The system of claim 11, wherein the reference device comprises the second device. ### Claim 13 (depends on 9) The system of claim 9, wherein the determining that the first device is authorized to access the information content comprises configuring one of a plurality of degrees of complexity. ### Claim 14 (depends on 13) The system of claim 13, further comprising adjusting, by the system, the one of the plurality of degrees of complexity from a remote location. ### Claim 15 A machine-readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising: receiving a request from a first device to access information content of a second device; determining that the first device is authorized to access the information content according to authorization credentials; determining a token associated with the request in response to determining that the first device is authorized to access the information content; forwarding the token to the first device; confirming that the token was received at the first device; and authorizing access to the information content of the second device in response to confirming that the token was received at the first device. ### Claim 16 (depends on 15) The machine-readable storage medium of claim 15, wherein the determining that the first device is authorized to access the information content comprises using software agents executing on the first and second devices to examine features of one of the first device or the second device, or a combination thereof, wherein access to the information is also related to the software agents executing on the first and second devices. ### Claim 17 (depends on 16) The machine-readable storage medium of claim 16, wherein the software agents are installed from a remote location, based on a network definition file, and include functions to examine features of the first device, or the second device, or a combination thereof. ### Claim 18 (depends on 17) The machine-readable storage medium of claim 17, wherein determining of the location comprises detecting proximity of the first device to a reference device. ### Claim 19 (depends on 18) The machine-readable storage medium of claim 18, wherein the agents operate in chains that allows different examinations to proceed. ### Claim 20 (depends on 15) The machine-readable storage medium of claim 15, wherein the determining that the first device is authorized to access the information content comprises configuring one of a plurality of degrees of complexity.