Secure cryptoprocessor for authorizing connected device requests

Abstract

A computing device described herein utilizes a secure cryptoprocessor of the computing device to compute a response to a request for authorization received from another local or remote device. The secure cryptoprocessor computes the response based on protected authorization credentials stored by the secure cryptoprocessor for one or more devices. The computing device then provides the computed response to the other device to cause the other device to grant or deny authorization. The computing device may also display information associated with the request for authorization, receive input indicating approval of the request, and utilize the secure cryptoprocessor in response to the received input.

What is claimed is: 
     
         1 . A computer system comprising:
 one or more processors; and   one or more computer-readable hardware storage devices having stored thereon computer-executable instructions, the computer-executable instructions being executable by the one or more processors to cause the computer system to:
 receive a logon request to access protected content; 
 based on information provided with the logon request, consult a certificate store to identify a remote authorization device that corresponds to the information provided with the logon request; 
 after identifying the remote authorization device, communicate an authorization request to the remote authorization device which triggers a prompt to be displayed at a user interface of the remote authorization device with a plurality of selectable options that are selectable to either approve or deny the authorization request; and 
 in response to receiving an indication that at least one of the plurality of selectable options has been selected, either approve or deny the logon request at the computer system, wherein approving or denying the logon request is based on determining which selectable option was selected at the user interface of the remote authorization device. 
   
     
     
         2 . The computer system of  claim 1 , wherein the remote authorization device is a smart mobile phone. 
     
     
         3 . The computer system of  claim 1 , wherein the information provided with the logon request includes only a username. 
     
     
         4 . The computer system of  claim 1 , wherein the remote authorization device includes a private key corresponding to a certificate stored in the certificate store. 
     
     
         5 . The computer system of  claim 1 , wherein a pin prompt is displayed at the user interface of the remote authorization device, which requires a pin to be entered prior to the prompt being displayed. 
     
     
         6 . The computer system of  claim 1 , wherein additional information is also displayed as a part of the prompt, the additional displayed information including at least one image that is displayed on the user interface of the remote authorization device, the at least one image having a corresponding image on the computer system. 
     
     
         7 . The computer system of  claim 6 , wherein the at least one image is provided by the computer system, and wherein execution of the computer-executable instructions furthers causes the computer system to provide the at least one image to the remote authorization device. 
     
     
         8 . The computer system of  claim 7 , wherein the at least one image is a photo of a user who is using the computer system such that the corresponding image is also the photo of the user, wherein the computer system captured the photo of the user. 
     
     
         9 . One or more hardware storage devices having stored thereon computer-executable instructions, the computer-executable instructions being executable by one or more processors of a computer system to cause the computer system to:
 receive a logon request to access protected content;   based on information provided with the logon request, consult a certificate store to identify a remote authorization device that corresponds to the information provided with the logon request;   after identifying the remote authorization device, communicate an authorization request to the remote authorization device; and   in response to receiving an indication that at least one option of a plurality of selectable options that are associated with approving or denying the authorization request has been selected at a user interface of the remote authorization device, either approve or deny the logon request at the computer system, wherein approving or denying the logon request is based on determining which option of a plurality of selectable options was selected at the user interface of the remote authorization device, wherein the plurality of selectable options were presented at the remote authorization device as a prompt in response to the authorization request.   
     
     
         10 . The one or more hardware storage devices of  claim 9 , wherein the remote authorization device is a mobile device. 
     
     
         11 . The one or more hardware storage devices of  claim 9 , wherein the information provided with the logon request includes a username. 
     
     
         12 . The one or more hardware storage devices of  claim 9 , wherein the remote authorization device includes a private key. 
     
     
         13 . The one or more hardware storage devices of  claim 9 , wherein the prompt further includes a pin prompt that is also displayed on the user interface of the remote authorization device, the pin prompt requiring entry of a pin. 
     
     
         14 . The one or more hardware storage devices of  claim 9 , wherein additional information is also displayed as a part of the prompt, the additional displayed information including at least one image that is displayed on the user interface of the remote authorization device, the at least one image having a corresponding image on the computer system. 
     
     
         15 . The one or more hardware storage devices of  claim 14 , wherein the at least one image is a photo of a user who is using the computer system such that the corresponding image is also the photo of the user, wherein the computer system captured the photo of the user. 
     
     
         16 . The one or more hardware storage devices of  claim 9 , wherein the remote authorization device is required to be within a determined proximity to the computer system. 
     
     
         17 . A method that is implemented by one or more processors of a computer system, the method comprising:
 receiving a logon request to access protected content;   based on information provided with the logon request, consulting a certificate store to identify a remote authorization device that corresponds to the information provided with the logon request;   after identifying the remote authorization device, communicating an authorization request to the remote authorization device which triggers a prompt to be displayed at a user interface of the remote authorization device with a plurality of selectable options that are selectable to either approve or deny the authorization request; and   in response to receiving an indication that at least one of the plurality of selectable options has been selected, either approve or deny the logon request at the computer system, wherein approving or denying the logon request is based on determining which selectable option was selected at the user interface of the remote authorization device.   
     
     
         18 . The method of  claim 17 , wherein a pin prompt is also displayed on the user interface of the remote authorization device, the pin prompt requiring entry of a pin. 
     
     
         19 . The method of  claim 17 , wherein additional information is also displayed as a part of the prompt, the additional displayed information including at least one image that is displayed on the user interface of the remote authorization device, the at least one image having a corresponding image on the computer system. 
     
     
         20 . The method of  claim 17 , wherein the remote authorization device includes a private key corresponding to a certificate stored in the certificate store.