Passwordless strong authentication using trusted devices
AssigneeAmazon Technologies, Inc.
InventorBharath Kumar Bhimanaik
Life of this patent
Estimating the term…
Abstract
A code for accessing a resource having a customer account associated therewith is presented via a secondary device, and authentication data indicative of the code that was presented is received from a primary device. The primary device is identified as a trusted device associated with the customer account responsive to receiving the authentication data therefrom, and the secondary device is authenticated for access to the resource responsive to identification of the primary device as the trusted device associated with the customer account.
Claims21
A computer-implemented method comprising:
- capturing, by a mobile device, a code presented by an electronic device or a presentation device associated with the electronic device, wherein the electronic device received the code in response to an access attempt of a resource, wherein the electronic device is different from the mobile device;
- generating, by at least one hardware processor associated with the mobile device, authentication data at least partially derived from the code captured by the mobile device;
- and
- transmitting the authentication data from the mobile device to an authentication server in order to grant the electronic device access to the resource based on the authentication data indicating that the code was captured by the mobile device.
A computer-implemented method comprising:
- receiving, by an authentication server, a request to access a resource by an electronic device, wherein the resource is associated with a user account;
- transmitting, by the authentication server to the electronic device, a code for permitting access to the resource;
- receiving, by the authentication server from a mobile device, authentication data indicative of the code that was transmitted to the electronic device, wherein the code is received by the mobile device from the electronic device or a presentation device associated with the electronic device;
- identifying the mobile device as a trusted device associated with the user account responsive to receiving the authentication data from the mobile device;
- and
- authenticating the electronic device for access to the resource responsive to receiving the authentication data from the mobile device and identifying the mobile device as the trusted device associated with the user account.
A server for authenticating a customer, the server comprising:
- a code generator configured to generate a code for permitting access to a resource;
- a transceiver configured to:
- receive a request to access the resource by an electronic device;
- transmit the code for permitting access to the resource to the electronic device;
- and
- receive, from a mobile device, authentication data indicative of the code that was transmitted to the electronic device, wherein the code is received by the mobile device from the electronic device or a presentation device associated with the electronic device;
- and
- an authentication module configured to identify the mobile device as a trusted device associated with a user account responsive to receiving the authentication data and authenticating the electronic device for access to the resource responsive to identifying the mobile device as the trusted device associated with the user account,
- the authentication module further configured to automatically sign in the electronic device to the user account for the resource.
A computer-implemented method comprising:
- transmitting, by a network server, a code to be presented on an electronic device, wherein the code is associated with a service being presented by the electronic device;
- receiving, by the network server, authentication data indicative of the code from a mobile device, wherein the mobile device captures the code from the electronic device, wherein the electronic device is different from the mobile device;
- and
- authorizing, by the network server, permission for the electronic device to access the service being presented by the electronic device responsive to receiving the transmitted code from the mobile device.
Dependencies are inferred from the claim text.