Method and apparatus for providing user authentication and identification based on a one-time password
    1.
    发明授权
    Method and apparatus for providing user authentication and identification based on a one-time password 有权
    基于一次性密码提供用户认证和识别的方法和装置

    公开(公告)号:US09100392B2

    公开(公告)日:2015-08-04

    申请号:US14033103

    申请日:2013-09-20

    CPC classification number: H04L63/0838

    Abstract: An approach is provided for authenticating and/or identifying a user through machine-transferrable one-time password codes. A user device sends to an authentication platform a request for a one-time password for authenticating a user at a relying party device. A machine readable form of the one-time password deliverable to the relying party device over an air gap between the user device and the relying party device is determined and transmitted. The relying party device reverts the machine readable form back to the one-time password, and transmits the one-time password to the authentication platform to authenticate the user device.

    Abstract translation: 提供了一种用于通过机器可传输的一次性密码代码来认证和/或识别用户的方法。 用户设备向认证平台发送用于在依赖方设备认证用户的一次性密码的请求。 确定并发送在用户设备和依赖方设备之间通过空白间隔传递给依赖方设备的一次性密码的机读形式。 依赖方设备将机器读取形式恢复为一次性密码,并将一次性密码发送到认证平台,以对用户设备进行认证。

    Method and system for providing zero sign on user authentication
    2.
    发明授权
    Method and system for providing zero sign on user authentication 有权
    在用户认证上提供零符号的方法和系统

    公开(公告)号:US09553872B2

    公开(公告)日:2017-01-24

    申请号:US14033139

    申请日:2013-09-20

    CPC classification number: H04L63/0853 H04L63/0815 H04L63/18

    Abstract: An approach for receiving a request for an authentication code for presentation in an authentication user interface, wherein the request is from a relying party and wherein the authentication user interface is presented by the relying party at a first device. The approach further involves transmitting the authentication code to the relying party. The approach also involves authenticating a user with respect to the relying party by determining that a second device associated with the user has read the authentication code from the authentication user interface of the first device, wherein the second device is a previously authenticated device.

    Abstract translation: 一种用于接收对认证用户界面中呈现的认证码的请求的方法,其中所述请求来自依赖方,并且其中所述认证用户界面由所述依赖方在第一设备处呈现。 该方法还涉及将认证码发送给依赖方。 该方法还涉及通过确定与用户相关联的第二设备从第一设备的认证用户界面读取认证代码来认证相对于依赖方的用户,其中第二设备是先前认证的设备。

    Mobile application security score calculation
    3.
    发明授权
    Mobile application security score calculation 有权
    移动应用安全分数计算

    公开(公告)号:US09098708B2

    公开(公告)日:2015-08-04

    申请号:US14298672

    申请日:2014-06-06

    CPC classification number: G06F21/577

    Abstract: The security or other attributes of mobile applications may be assessed and assigned a security score. In one implementation, a device may obtain information relating to the mobile applications, and may determine, for each of the mobile applications, a number of security scores. Each of the security scores may define a level of risk for a security category relating to a mobile application. The device may further combine the security scores, for each of the mobile applications, to obtain, for each of the mobile applications, a final security score.

    Abstract translation: 可以评估移动应用的安全性或其他属性并分配安全分数。 在一个实现中,设备可以获得与移动应用有关的信息,并且可以为每个移动应用确定多个安全分数。 每个安全分数可以定义与移动应用相关的安全类别的风险级别。 该装置还可以针对每个移动应用进一步组合安全分数,以为每个移动应用获得最终的安全分数。

Patent Agency Ranking