Mobile Device Enabled Desktop Tethered And Tetherless Authentication

What is this patent about?

’750 is related to the field of digital authentication, specifically addressing the problem of securely logging into computing devices like laptops and desktops. Traditional methods often rely on passwords, which can be vulnerable to theft or compromise. Existing solutions using mobile device proximity have limitations, as unauthorized access can occur if a thief gains possession of the mobile device.

The underlying idea behind ’750 is to leverage a mobile device as a secure authentication token for a computer, even when the computer is offline. This involves a cloud-based clearinghouse that links a user's mobile device to their identity. When a user attempts to log in to their computer, a request is sent to the mobile device for authentication, using methods like biometrics or answering security questions.

The claims of ’750 focus on a computer-implemented method involving a cloud universal identification server. The server stores user attributes and associates a mobile device with the user's identity. Upon receiving an authentication request from a computer (via a credential provider), the server confirms the computer's identity, retrieves a communication protocol for the mobile device, transmits an authentication factor to the mobile device, and, upon successful authentication on the mobile device, sends authentication data to the computer to complete the login process.

In practice, a user installs a credential provider on their computer and registers their mobile device with the cloud service. When logging in, the user selects the mobile device authentication option. The credential provider then sends a request to the cloud service, which in turn pushes an authentication challenge to the user's mobile device. The user authenticates on their phone (e.g., using a fingerprint), and the cloud service signals the computer to grant access.

This approach differentiates itself from prior art by providing a more secure and convenient authentication method. Instead of relying solely on passwords or proximity, it uses the mobile device as a second factor authentication , enhancing security. The system also supports offline authentication by using tethered connections like USB or Bluetooth, ensuring access even without an internet connection on the computer itself. The use of a cloud clearinghouse allows for centralized management of user identities and authentication policies.