公开(公告)号：US11693936B2

公开(公告)日：2023-07-04

申请号：US16043441

申请日：2018-07-24

申请人： VMware, Inc.

发明人： Shengbo Teng ,  Wen Wang ,  Bin Guo ,  Wenping Fan ,  Tony Lu ,  Daniel James Beveridge

IPC分类号： G06F21/32 ,  H04L9/32 ,  H04L9/40

CPC分类号： G06F21/32 ,  H04L9/3213 ,  H04L63/08 ,  H04L63/107 ,  H04L63/108

摘要： A system is described for authenticating a user on a client device using the user's mobile device and utilizing the audio channel. An authentication server receives a request from the client to initiate a session for the user, creates the session, and sends a session token back to the client along with a request for authentication. The client broadcasts an audio transmission containing the token to the mobile device over an audio channel using data-over-sound transmission. The mobile device receives the transmission via a microphone, obtains the token and the server identity from the transmission, and sends user credentials that are stored on the mobile device along with the token identifying the session directly to the authentication server. The server verifies the received credentials, confirms the token, and logs the user into the session.

公开(公告)号：US20200034521A1

公开(公告)日：2020-01-30

申请号：US16043441

申请日：2018-07-24

申请人： VMware, Inc.

发明人： Shengbo Teng ,  Wen Wang ,  Bin Guo ,  Wenping Fan ,  Tony Lu ,  Daniel James Beveridge

IPC分类号： G06F21/32 ,  G10L19/018 ,  H04L29/06 ,  H04L9/32

摘要： A system is described for authenticating a user on a client device using the user's mobile device and utilizing the audio channel. An authentication server receives a request from the client to initiate a session for the user, creates the session, and sends a session token back to the client along with a request for authentication. The client broadcasts an audio transmission containing the token to the mobile device over an audio channel using data-over-sound transmission. The mobile device receives the transmission via a microphone, obtains the token and the server identity from the transmission, and sends user credentials that are stored on the mobile device along with the token identifying the session directly to the authentication server. The server verifies the received credentials, confirms the token, and logs the user into the session.