	US 7,469,291 B2
	Apparatus and method for integrating authentication protocols in the establishment of connections between computing devices
Jonathan F. Hammell, Dobbinton (Canada); Ian M. Robertson, Waterloo (Canada); Michael K. Brown, Kitchener (Canada); Michael G. Kirkup, Waterloo (Canada); and Herbert A. Little, Waterloo (Canada)
Assigned to Research In Motion Limited, Waterloo, Ontario (Canada)
Filed on Sep. 22, 2004, as Appl. No. 10/945,950.
Prior Publication US 2006/0064493 A1, Mar. 23, 2006
Int. Cl. G06F 15/173 (2006.01)

U.S. Cl. 709—225

19 Claims

1. A method of integrating authentication protocols in establishing a connection between a first computing device and at least one second computing device, the method comprising the steps of:

a) receiving a request for user authentication at the first computing device to access the at least one second computing device, wherein the first computing device is a controlled-access device; and

b) establishing a connection between the first computing device and the at least one second computing device;

the establishing step comprising negotiating user authentication at the at least one second computing device by transmitting user authentication data from the first computing device to an authentication server for user authentication at the at least one second computing device, wherein the user authentication data is transmitted automatically from the first computing device to the authentication server if access to use the first computing device has been aquired;wherein the authentication server employs a two-factor token authentication method, such that a response that comprises an expected time-dependent token value and other authentication data is received by the authentication server for user authentication at the at least one second computing device;wherein the method further comprises generating the expected time-dependent token value at the first computing device, and retrieving the other authentication data from a memory store of the first computing device; andwherein both the expected time-dependent token value and the other authentication data are provided as the user authentication data transmitted automatically to the authentication server in the establishing step.