Microsoft Technology Licensing, LLC

Peter E Zenzerovich

Benjamin Richard Vincent

Tarek B Kamel

James Shang Kai Chou

Dejan Subotic

Sparky Toews

User-authentication-based approval of a first device via communication with a second device over a channel (e.g., an insecure channel) is described. The first device receives a session ID and first user-observable information, or an identifier thereof, from an identity provider, presents the first user-observable information to a user, and sends the session ID to the second device. The second device sends the session ID to the identity provider to obtain therefrom second user-observable information, or an identifier thereof, and a security challenge. The second user-observable information bears a user-discernable relationship to the first user-observable information and is presented to the user by the second device. The second device is capable of generating a response to the security challenge for transmission to the identity provider based at least on input received from the user, the response to the security challenge being indicative of the suitability of the first device for approval.

Growing community of inventors

Kenmore, WA, United States of America

Peter E Zenzerovich