Secure authentication of devices
AssigneeAmazon Technologies, Inc.
InventorsYogesh Vilas Golwalkar, Bharath Kumar Bhimanaik
Life of this patent
Estimating the term…
Abstract
Disclosed are various embodiments for an authentication service. A unique identifier is associated with a device access token for a client to be authenticated. An authentication identifier is sent to an authenticated client. The client to be authenticated communicates the authentication identifier and unique identifier to the authentication service to complete authentication.
Claims17
A system, comprising:
- at least one computing device;
- and
- a device authentication service executed in the at least one computing device, the device authentication service causing the at least one computing device to at least:
- associate a device access token with a unique identifier and a user account;
- communicate an authentication identifier corresponding to the unique identifier to a first client device, the first client device being authenticated with the user account, wherein the authentication identifier is associated with an authentication state of the user account and the first client device is configured to provide the authentication identifier to a second client device in a quick response (QR) code;
- associate the user account with the second client device in response to obtaining the authentication identifier and the unique identifier from the second client device, wherein the second client device captures the authentication identifier from the first client device via a camera integrated within the second client device;
- and
- communicate the device access token to the second client device, wherein the device access token is used by the second client device to authenticate access to a third party service.
A method, comprising:
- associating a device access token with a unique identifier and a user account;
- communicating an authentication identifier corresponding to the unique identifier to a first client device, the first client device being authenticated with the user account, wherein the authentication identifier is associated with an authentication state of the user account and the first client device is configured to provide the authentication identifier to a second client device in a quick response (QR) code;
- associating the user account with the second client device in response to obtaining the authentication identifier and the unique identifier from the second client device, wherein the second client device captures the authentication identifier from the first client device via a camera integrated within the second client device;
- and
- communicating the device access token to the second client device, wherein the device access token is used by the second client device to authenticate access to a third party service.
A non-transitory computer-readable medium embodying a program executable in at least one computing device, the program, when executed, causing the at least one computing device to at least:
- associate a device access token with a unique identifier and a user account;
- communicate an authentication identifier corresponding to the unique identifier to a first client device, the first client device being authenticated with the user account, wherein the authentication identifier is associated with an authentication state of the user account and the first client device is configured to provide the authentication identifier to a second client device in a quick response (QR) code;
- associate the user account with the second client device in response to obtaining the authentication identifier and the unique identifier from the second client device, wherein the second client device captures the authentication identifier from the first client device via a camera integrated within the second client device;
- and
- communicate the device access token to the second client device, wherein the device access token is used by the second client device to authenticate access to a third party service.
Dependencies are inferred from the claim text.