The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 19, 2019

Filed:

Dec. 31, 2016
Applicant:

Nok Nok Labs, Inc., Palo Alto, CA (US);

Inventor:

Rolf Lindemann, Steele, DE;

Assignee:

Nok Nok Labs, Inc., San Jose, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/32 (2013.01); H04L 9/32 (2006.01); H04L 9/08 (2006.01); H04L 9/14 (2006.01); G06F 3/06 (2006.01);
U.S. Cl.
CPC ...
H04L 9/3231 (2013.01); G06F 3/0608 (2013.01); G06F 3/0647 (2013.01); G06F 3/0683 (2013.01); G06F 21/32 (2013.01); H04L 9/0861 (2013.01); H04L 9/0894 (2013.01); H04L 9/14 (2013.01);
Abstract

A system, apparatus, method, and machine readable medium are described for sharing authentication data. For example, one embodiment of a method comprises: generating and storing a persistent group identification code (Group-ID) for a group of authenticators sharing a common set of authorization (Uauth) keys, an initial Group-ID to be generated on a first use of a first authenticator and/or following a factory reset of the first authenticator generating and storing an individual asymmetric wrapping key encryption key (WKEK) on a first use of the first authenticator and/or following each factory reset of the first authenticator; generating and storing a symmetric wrapping key (WK), the wrapping key to be generated on a first use of the first authenticator and/or following each factory reset of the first authenticator; generating a join-block using an authenticator identification code for the first authenticator and the WKEK, the join-block usable to join an existing authenticator group, the join block to be sent to a second authenticator; verifying the join-block at the second authenticator and generating a join response block responsive to user approval, the join response block generated by encrypting the WK and Group-ID using the WKEK, the join response block to be transmitted to the first authenticator; and decrypting the join response block and storing the WK and Group-ID.


Find Patent Forward Citations

Loading…