US 12,074,865 B1
Techniques for signing into a user account using a trusted client device
Max M. Gunther, San Francisco, CA (US); Onar Vikingstad, San Jose, CA (US); Ramiro Calvo, Palo Alto, CA (US); Isabella M. Funke, San Francisco, CA (US); Eric D. Friedman, Berkeley, CA (US); Hervé Sibert, Le Mans (FR); David P. Remahl, Woodside, CA (US); Yannick L. Sierra, San Francisco, CA (US); Frank B. Dancs, San Carlos, CA (US); and Sudhakar N. Mambakkam, Saratoga, CA (US)
Assigned to Apple Inc., Cupertino, CA (US)
Filed by Apple Inc., Cupertino, CA (US)
Filed on Jan. 18, 2019, as Appl. No. 16/252,515.
Claims priority of provisional application 62/620,393, filed on Jan. 22, 2018.
Int. Cl. H04L 29/06 (2006.01); G06F 21/71 (2013.01); G06K 7/14 (2006.01); G06K 19/06 (2006.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01); H04L 65/1069 (2022.01)
CPC H04L 63/0838 (2013.01) [G06F 21/71 (2013.01); G06K 7/1417 (2013.01); G06K 19/06037 (2013.01); H04L 9/0869 (2013.01); H04L 9/3213 (2013.01); H04L 9/3228 (2013.01); H04L 63/0428 (2013.01); H04L 63/061 (2013.01); H04L 63/0853 (2013.01); H04L 63/0861 (2013.01); H04L 63/102 (2013.01); H04L 63/108 (2013.01); H04L 63/18 (2013.01); H04L 65/1069 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for implementing a security protocol, the method comprising, by a trusted client device:
obtaining a one-time secret (OTS) displayed by a host device;
extracting information encoded within the OTS;
utilizing the information to transmit, to the host device, at least one message that causes the host device to transition from displaying the OTS to displaying instructions for verifying an identity of a user of the trusted client device;
verifying the identity of the user using at least one sensor of the trusted client device;
in response to verifying the identity of the user:
negotiating an encryption key with the host device based on the OTS,
establishing, using the encryption key, a communication session between the trusted client device and the host device; and
providing, via the communication session, credentials to the host device to enable the host device to perform at least one action.