Service-initiated user authentication via delegated methods

    公开(公告)号:US10979430B1

    公开(公告)日:2021-04-13

    申请号:US15598251

    申请日:2017-05-17

    Abstract: A computer-facilitated service receives a request from a user to access resources provided by the computer-facilitated service. In response to the request, the computer-facilitated service selects an authentication method that can be performed by a remote authentication provider. The computer-facilitated service causes the remote authentication provider to perform the authentication method. In response to an authentication decision provided by the remote authentication provider, the computer-facilitated service determines whether the user has been authenticated by the remote authentication provider. If so, the computer-facilitated service fulfills the request from the user to access the resources.

    Secure network-enabled lock
    22.
    发明授权

    公开(公告)号:US10911224B1

    公开(公告)日:2021-02-02

    申请号:US15927915

    申请日:2018-03-21

    Abstract: A method of implementing a network-enabled secure door lock, comprising determining, at a first component of the lock, a nonce; wirelessly transmitting the nonce to a second component of the door lock, the first component and second component selectively mechanically engagable with one another to prevent relative movement between the first component and second component to prevent opening of a door; receiving, at the first component, a first message; using a cryptographic key associated with the second component and the nonce to validate the first message; and as a result of determining that the message is valid, transmitting a second message indicating that the first component and second component have become mechanically engaged with one another.

    Distributing variable entropy ephemeral security credentials across channels of variable assurance

    公开(公告)号:US10333946B1

    公开(公告)日:2019-06-25

    申请号:US15189493

    申请日:2016-06-22

    Abstract: Disclosed are various embodiments for distributing and verifying ephemeral security credentials of variable entropy across channels of communication of variable levels of security assurance. In one embodiment, a security credential is generated for a user account. A subset of a set of communication channels associated with the user account is determined based at least in part on respective measures of entropy and/or security assurance corresponding to individual ones of the set of communication channels. The security credential is divided into multiple portions. A corresponding portion of the portions is sent across individual channels of subset of channels. A client computing device is authenticated for access to the user account based at least in part on receiving the portions of the security credential.

    Trustworthy indication of software integrity

    公开(公告)号:US09727737B1

    公开(公告)日:2017-08-08

    申请号:US14810275

    申请日:2015-07-27

    CPC classification number: G06F21/577 G06F3/04842 G06F3/04883 G06F2221/033

    Abstract: Computing devices are disclosed that include functionality for providing a trustworthy indication of software integrity. The computing devices include a hardware trust evaluation device capable of determining the trustworthiness of computer programs executing on the devices. At least one trust indicator is also connected to the hardware trust evaluation device for providing an external indication of the trustworthiness of a computer program. Additional security information regarding the trustworthiness of the computer program may be displayed on the primary display device of the computing device. The display of the security information is triggered by a user of the computing device submitting a request through a secure mechanism, where the request is unobservable and inaccessible to programs executing on the computing device. Additional secure mechanisms, such as a unique user interface for displaying the security information, can be utilized to ensure the authenticity of the displayed security information.

    Synchronizing authentication sessions between applications

    公开(公告)号:US10785201B2

    公开(公告)日:2020-09-22

    申请号:US15962309

    申请日:2018-04-25

    Abstract: Disclosed are various embodiments for synchronizing authentication sessions between applications. A token exchange service receives a first authentication token from a client computing device. The first authentication token corresponds to a registration of an application of the client computing device for a user account. The first authentication token is validated. A second authentication token is generated, corresponding to a browser-based session for the user account. The second authentication token is sent to the client computing device.

Patent Agency Ranking