# US 7,467,298 B2 · Methods and arrangements for selectively maintaining parental access consent in a network environment

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 7,467,298 B2
- Document ID: US7467298B2
- Status: Granted
- Kind: B2
- Application number: 09/836,584
- Filed: 2001-04-16
- Published: 2002-12-05
- Granted: 2008-12-16
- Earliest claimed: 2001-04-16
- Assignees: Microsoft Corporation
- Inventors: Christopher E. Mitchell; Wei-Quiang Michael Guo
- Web page: https://patentgrep.com/patent/US7467298B2

## CPC

- H04L 63/126: {the source of the received data}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/4012: {Verifying personal identification numbers [PIN]}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Methods and arrangements are provided which associate a first user with a second user in a first device, and selectively provide information about the association of the first and second user to a second device as directed by the first user, without requiring the second user to be logged in to either the first or second device. The information about the association of the first and second user is provided to the second device via a validation code or validation protocol that essentially identifies the first user and the second user, when the first user is logged in to the second device. Here, for example, the validation code may identify the second user by an identifier and a name, and possibly provide modifications to a consent parameter associated with the second user. In certain implementations, at least a portion of the validation code may be encrypted when sent from the first device to the second device. By way of example, in certain instances, the first user may be a parent/guardian to the second user. The first device may include a network server that is configured to act as an authentication server, and the second device may include a network server that is configured to act as an affiliated server associated with the authentication server.

## Claims

### Claim 1

A method comprising:
associating a first entity with a second entity in a first device;
determining whether to provide information about the association of the first and second entities to a second device as directed by the first entity;
in response to the determining, providing the information to a second device without the second entity being logged in to either the first or second device, the providing further includes providing the second device with a validation code that identifies the first entity and the second entity, when the first entity is operatively associated with the second device, wherein the validation code identifies modifications to a consent parameter associated with the second entity; and
facilitating access of the second entity to the second device based on the information.

### Claim 2 (depends on 1)

The method as recited in claim 1, wherein the first entity and the second entity are selected from a group of entities that includes users, organizations, companies, devices, computers, servers, computer programs, and applications.

### Claim 3 (depends on 1)

The method as recited in claim 1, wherein the validation code identifies the second entity by an identifier and a name.

### Claim 4 (depends on 1)

The method as recited in claim 1, wherein providing the second device with the validation code further includes encrypting at least a portion of the validation code.

### Claim 5 (depends on 1)

The method as recited in claim 1, wherein associating the first entity with the second entity in the first device further includes logically associating a first entity profile with a second entity profile.

### Claim 6 (depends on 1)

The method as recited in claim 1, wherein the first entity is a parent/guardian of the second entity.

### Claim 7 (depends on 1)

The method as recited in claim 1, wherein the first device includes a network server that is configured to act as an authentication server.

### Claim 8 (depends on 7)

The method as recited in claim 7, wherein the second device includes a network server that is configured to act as an affiliated server associated with the authentication server.

### Claim 9

A computer-readable storage medium having stored thereon computer-executable instructions, comprising:
associating a first entity with a second entity in a first device;
causing the first device to determine whether to provide information about the association of the first and second entities to a second device as directed by the first entity;
in response to the determining, causing the first device to provide the information to the second device without the second entity being logged in to either the first or second device and also causing the first device to provide the second device with a validation code that identifies the first entity and the second entity, when the first entity is operatively associated with the second device, wherein the validation code identifies modifications to a consent parameter associated with the second entity; and
facilitating access of the second entity to the second device based on the information.

### Claim 10 (depends on 9)

The computer-readable medium as recited in claim 9, wherein the first entity and the second entity are selected from a group of entities that includes users, organizations, companies, devices, computers, servers, computer programs, and applications.

### Claim 11 (depends on 9)

The computer-readable storage medium as recited in claim 9, wherein the validation code identifies the second entity by an identifier and a name.

### Claim 12 (depends on 9)

The computer-readable medium as recited in claim 9, wherein causing the first device to provide the second device with the validation code further includes encrypting at least a portion of the validation code.

### Claim 13 (depends on 9)

The computer-readable medium as recited in claim 9, wherein associating the first entity with the second entity in the first device further includes logically associating a first entity profile with a second entity profile.

### Claim 14 (depends on 9)

The computer-readable medium as recited in claim 9, wherein the flit user is a parent/guardian of the second user.

### Claim 15 (depends on 9)

The computer-readable medium as recited in claim 9, wherein the first device includes a network sewer that is configured to act as an authentication server.

### Claim 16 (depends on 15)

The computer-readable medium as recited in claim 15, wherein the second device includes a network server that is configured to act as an affiliated server associated with the authentication server.

### Claim 17

An apparatus comprising:
memory having information associating a first user of the apparatus with a second user of the apparatus; and
logic operatively coupled to the memory and configured to respond to inputs from the first user by determining whether to output information about the association of the first and second users to a second device as directed by the first user;
outputting the information to the second device without the second user being logged into the apparatus; and
facilitating access of the second user to the second device based on the information;
wherein the logic is configurable to be operatively connected to at least one external device and is further configured to selectively output the information within a validation code that identifies the first user and the second user, when the first user signs-in to the external device; and
the validation code facilitates the first user to review the information, wherein the validation code identifies modifications to a consent parameter associated with the second user.

### Claim 18 (depends on 17)

The apparatus as recited in claim 17, wherein the validation code identifies the second user by an identifier and a name.

### Claim 19 (depends on 17)

The apparatus as recited in claim 17, wherein the logic is further configured to encrypt at least a portion of the validation code.

### Claim 20 (depends on 17)

The apparatus as recited in claim 17, wherein the logic is further configured logically associate a first user profile with a second user profile in the memory.

### Claim 21 (depends on 17)

The apparatus as recited in claim 17, wherein the first user is a parent/guardian of the second user.

### Claim 22 (depends on 17)

The apparatus as recited in claim 17, wherein the apparatus is included in a network server that is configured to act as an authentication server.

### Claim 23 (depends on 22)

The apparatus as recited in claim 22, wherein the external device includes a network server that is configured to act as an affiliated server associated with the authentication server.

### Claim 24

A computer-readable medium having stored thereon a data structure, comprising:
a validation code that identifies a first entity and a second entity, wherein the validation code identifies modifications to a consent parameter associated with the second entity; and
a user profile of the second entity with consent information designated by the first entity, wherein the validation code facilitates the first entity to review the consent information and the consent information facilitates the second entity to access a server.

### Claim 25 (depends on 24)

The computer-readable medium as recited in claim 24, wherein the first entity and the second entity are selected from a group of entities that includes users, organizations, companies, devices, computers, servers, computer programs, and applications.

### Claim 26 (depends on 24)

The computer-readable medium as recited in claim 24, wherein the validation code identifies the second entity by an identifier and a name.

### Claim 27 (depends on 26)

The computer-readable medium as recited in claim 26, wherein at least a portion of the validation code is encrypted.

### Claim 28

An apparatus comprising:
memory; and
logic operatively coupled to the memory and configured to allow a first entity to be operatively associated with the apparatus, determine whether to provide information about the association of the first entity and at least one other entity to a second device as directed by the first entity, and receive the information without the at least one other entity being logged in to the apparatus, wherein:
the first entity includes a first user, the at least one other entity includes a second user,
without requiring the at least one other entity to be operatively associated with the apparatus includes without requiring the second user to be logged in to the apparatus,
the validation code identifies modifications to a consent parameter associated with the at least one other entity.

### Claim 29 (depends on 28)

The apparatus as recited in claim 28, wherein the first entity and the at least one other entity are selected from a group of entities that includes users, organizations, companies, devices, computers, servers, computer programs, and applications.

### Claim 30 (depends on 28)

The apparatus as recited in claim 28, wherein the logic is configurable to receive the information about the association from an external device via a validation code that identifies the first entity and the at least one other entity, when the first entity is operatively associated with the external device.

### Claim 31 (depends on 28)

The apparatus as recited in claim 28, wherein the validation code identifies the at least one other entity by an identifier and a name.

### Claim 32 (depends on 28)

The apparatus as recited in claim 28, wherein the logic is further configured to decrypt the validation code, as needed.

### Claim 33 (depends on 28)

The apparatus as recited in claim 28, wherein, in response to the validation code, the logic is further configurable to output previously gathered information relating to the at least one other entity to the external device.

### Claim 34 (depends on 28)

The apparatus as recited in claim 28, wherein the first user is a parent/guardian of the second user.

### Claim 35 (depends on 28)

The apparatus as recited in claim 28, wherein the apparatus is included in a network server that is configured to act as an affiliate server.

### Claim 36 (depends on 28)

The apparatus as recited in claim 28, wherein the external device includes a network server that is configured to act as an authentication server.