# US 2019/0246273 A1 · Cross-device login to improve service efficiency > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0246273 A1 - Document ID: US20190246273A1 - Status: Published application - Kind: A1 - Application number: 16/384,592 - Filed: 2019-04-15 - Published: 2019-08-08 - Earliest claimed: 2016-12-21 - Assignees: Alibaba Group Holding Limited - Applicants: Alibaba Group Holding Limited - Inventors: Qi ZHOU - Web page: https://patentgrep.com/patent/US20190246273A1 ## CPC - H04W 12/06: Authentication - H04B 11/00: Transmission systems employing ultrasonic, sonic or infrasonic waves - H04L 63/0815: {providing single-sign-on or federations} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04W 12/30: Security of mobile devices; Security of mobile applications - H04W 12/50: Secure pairing of devices - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 2463/082: applying multi-factor authentication - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04B: TRANSMISSION - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A server receives a login request from a first device. The login request includes login information used for an application login. In response to receiving the login request from the first device, the server transmits, to a second device different from the first device, a first message including a verification code. The first message instructs the second device to broadcast an audio signal including the verification code. The verification code is used to verify the first device by the server. ## Claims ### Claim 1 A computer-implemented method, comprising: receiving, by a server and from a first device, a login request, wherein the login request includes login information used for an application login; and in response to receiving the login request from the first device, transmitting, by the server and to a second device different from the first device, a first message including a verification code, wherein the first message instructs the second device to broadcast an audio signal including the verification code, and the verification code is used to verify the first device by the server. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the first device is a device to be authorized by the server, the second device is an authorized device by the server, the server generates the verification code after receiving the login request from the first device, and the second device encodes, based on an encoding rule included in the first message received from the server, the verification code into the audio signal for broadcasting. ### Claim 3 (depends on 2) The computer-implemented method of claim 2, further comprising: in response to receiving the login request from the first device, transmitting, by the server and to the first device, a second message instructing the first device to perform audio sensing; receiving, by the server and from the first device, a second verification code, wherein the second verification code is automatically extracted and decoded by the first device from the audio signal broadcasted by the second device; and verifying, by the server, the first device based on the verification code and the received second verification code. ### Claim 4 (depends on 3) The computer-implemented method of claim 3, wherein the second message instructs the first device to enable a microphone of the first device. ### Claim 5 (depends on 3) The computer-implemented method of claim 3, wherein verifying the first device comprises: determining, by the server, whether the received second verification code matches the verification code; and in response to determining that the received second verification code matches the verification code: verifying, by the server, the first device; and authorizing, by the server, the application login on the first device. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, further comprising: determining, by the second device, whether the first device senses the audio signal within a predetermined time period; and in response to determining that the first device does not sense the audio signal within the predetermined time period, transmitting, by the second device, a timeout indication associated with the verification code to the server. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, wherein the audio signal further includes a device identifier of the second device. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein the first message is transmitted by the server to the second device through an authorized channel between the server and the second device, and the audio signal is broadcasted by the second device based on near-field acoustic communication. ### Claim 9 A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising: receiving, by a server and from a first device, a login request, wherein the login request includes login information used for an application login; and in response to receiving the login request from the first device, transmitting, by the server and to a second device different from the first device, a first message including a verification code, wherein the first message instructs the second device to broadcast an audio signal including the verification code, and the verification code is used to verify the first device by the server. ### Claim 10 (depends on 9) The non-transitory, computer-readable medium of claim 9, wherein the first device is a device to be authorized by the server, the second device is an authorized device by the server, the server generates the verification code after receiving the login request from the first device, and the second device encodes, based on an encoding rule included in the first message received from the server, the verification code into the audio signal for broadcasting. ### Claim 11 (depends on 10) The non-transitory, computer-readable medium of claim 10, the operations further comprising: in response to receiving the login request from the first device, transmitting, by the server and to the first device, a second message instructing the first device to perform audio sensing; receiving, by the server and from the first device, a second verification code, wherein the second verification code is automatically extracted and decoded by the first device from the audio signal broadcasted by the second device; and verifying, by the server, the first device based on the verification code and the received second verification code. ### Claim 12 (depends on 11) The non-transitory, computer-readable medium of claim 11, wherein the second message instructs the first device to enable a microphone of the first device. ### Claim 13 (depends on 11) The non-transitory, computer-readable medium of claim 11, wherein verifying the first device comprises: determining, by the server, whether the received second verification code matches the verification code; and in response to determining that the received second verification code matches the verification code: verifying, by the server, the first device; and authorizing, by the server, the application login on the first device. ### Claim 14 (depends on 9) The non-transitory, computer-readable medium of claim 9, the operations further comprising: determining, by the second device, whether the first device senses the audio signal within a predetermined time period; and in response to determining that the first device does not sense the audio signal within the predetermined time period, transmitting, by the second device, a timeout indication associated with the verification code to the server. ### Claim 15 (depends on 9) The non-transitory, computer-readable medium of claim 9, wherein the audio signal further includes a device identifier of the second device. ### Claim 16 (depends on 9) The non-transitory, computer-readable medium of claim 9, wherein the first message is transmitted by the server to the second device through an authorized channel between the server and the second device, and the audio signal is broadcasted by the second device based on near-field acoustic communication. ### Claim 17 A computer-implemented system, comprising: one or more computers; and one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising: receiving, by a server and from a first device, a login request, wherein the login request includes login information used for an application login; and in response to receiving the login request from the first device, transmitting, by the server and to a second device different from the first device, a first message including a verification code, wherein the first message instructs the second device to broadcast an audio signal including the verification code, and the verification code is used to verify the first device by the server. ### Claim 18 (depends on 17) The computer-implemented system of claim 17, wherein the first device is a device to be authorized by the server, the second device is an authorized device by the server, the server generates the verification code after receiving the login request from the first device, and the second device encodes, based on an encoding rule included in the first message received from the server, the verification code into the audio signal for broadcasting. ### Claim 19 (depends on 18) The computer-implemented system of claim 18, the operations further comprising: in response to receiving the login request from the first device, transmitting, by the server and to the first device, a second message instructing the first device to perform audio sensing; receiving, by the server and from the first device, a second verification code, wherein the second verification code is automatically extracted and decoded by the first device from the audio signal broadcasted by the second device; and verifying, by the server, the first device based on the verification code and the received second verification code. ### Claim 20 (depends on 18) The computer-implemented system of claim 18, wherein the second message instructs the first device to enable a microphone of the first device.