Unattended secure device authorization
AssigneeNCR Corporation
InventorsRichard Han, Andrew J. Wurfel
Life of this patent
Estimating the term…
Abstract
Unattended secure device authorization techniques are provided. An operating system (OS) module, which is responsible for device validation when that device is interfaced to a host device, is enhanced. The enhanced OS module silently checks the peripheral device's identifier against a white list and if a match occurs, the enhanced OS module grants permission to the host device applications; if no match occurs, the enhanced OS module silently rejects application access to the device. In an embodiment, the enhanced OS module interacts with the device to determine whether the device is to be authorized or rejected.
Claims8
A method, comprising:
- identifying, by an authenticator executing on a host, a device interfaced to the host;
- checking, by the authenticator, a device identifier obtained from the device against authorized device identifiers;
- automatically granting, by the authenticator, an application access to the device when the device identifier is one of the authorized device identifiers, including interacting, by the authenticator, with a device interface of the device to authenticate the device for application access, wherein interacting includes encrypting, by the authenticator, a message with a key that is sent to the device interface and receiving, by the authenticator, a decrypted version back from the device interface indicating access is to be granted and authentication passed for the application to access the device;
- and
- automatically denying, by the authenticator, the application access to the device when the device identifier is unmatched in the authorized device identifiers.
Dependencies are inferred from the claim text.