Abstract: A method for authentication tunneling is described. The method includes transmitting an authentication prompt to a client machine via an encrypted channel between a first authenticator application running on the remote machine and a second authenticator application running on the client machine. The authentication prompt may be associated with accessing resources via an identity management system. The method may further include receiving, from the client machine via the encrypted channel, a first authentication response comprising user verification data, an identifier of the client machine, and a first digital signature of the second authenticator application.

Abstract: A method that includes receiving, from one or more motion sensors in a device, data describing a signature arc in three-dimensional space, the signature arc having been generated by gesturing using the device; identifying, from the data describing the gestured signature arc, a plurality of points that correspond to the gestured signature arc in three-dimensional space; generating a curve along the identified plurality of points corresponding to the gestured signature arc; generating a two-dimensional representation of the gestured signature arc; and displaying, on a display screen, the generated two-dimensional representation of the gestured signature arc.

Abstract: Users of an identity provider system may be authorized to use a variety of different types of factors from a variety of different factor providers. The identity provider system monitors and analyzes the “health” of the different possible factors available to a user, e.g., their availability relative to error rate. Using the results of the analysis, the identity provider can assess which factors are the most appropriate for a given user seeking authentication and can improve the user experience for the user by emphasizing those most appropriate factors to the user.

Abstract: Users of an identity provider system may be authorized to use a variety of different types of factors from a variety of different factor providers. The identity provider system monitors and analyzes the “health” of the different possible factors available to a user, e.g., their availability relative to error rate. Using the results of the analysis, the identity provider can assess which factors are the most appropriate for a given user seeking authentication and can improve the user experience for the user by emphasizing those most appropriate factors to the user.

Abstract: Users of an identity provider system may be authorized to use a variety of different types of factors from a variety of different factor providers. The identity provider system monitors and analyzes the “health” of the different possible factors available to a user, e.g., their availability relative to error rate. Using the results of the analysis, the identity provider can assess which factors are the most appropriate for a given user seeking authentication and can improve the user experience for the user by emphasizing those most appropriate factors to the user.

Abstract: Users of an identity provider system may be authorized to use a variety of different types of factors from a variety of different factor providers. The identity provider system monitors and analyzes the “health” of the different possible factors available to a user, e.g., their availability relative to error rate. Using the results of the analysis, the identity provider can assess which factors are the most appropriate for a given user seeking authentication and can improve the user experience for the user by emphasizing those most appropriate factors to the user.

Abstract: A method that includes receiving, from one or more motion sensors in a device, data describing a signature arc in three-dimensional space, the signature arc having been generated by gesturing using the device; identifying, from the data describing the gestured signature arc, a plurality of points that correspond to the gestured signature arc in three-dimensional space; generating a curve along the identified plurality of points corresponding to the gestured signature arc; generating a two-dimensional representation of the gestured signature arc; and displaying, on a display screen, the generated two-dimensional representation of the gestured signature arc.

Abstract: A method that includes receiving, from one or more motion sensors in a device, data describing a signature arc in three-dimensional space, the signature arc having been generated by gesturing using the device; identifying, from the data describing the gestured signature arc, a plurality of points that correspond to the gestured signature arc in three-dimensional space; generating a curve along the identified plurality of points corresponding to the gestured signature arc; generating a two-dimensional representation of the gestured signature arc; and displaying, on a display screen, the generated two-dimensional representation of the gestured signature arc.

Abstract: An identity provider (“IdP”) system maintains a framework of authentication methods and security targets that enables flexible authentication policy authoring and analysis of authentication performed by users of an organization. The IdP system generates authentication method profiles that include authentication factors and attributes, which may be further classified as required or optional. The IdP system also generates security target profiles that indicate security requirements needed to satisfy the corresponding security targets. The IdP system uses the generated profiles to determine relationships between authentication methods and security targets (e.g., a list of authentication methods that satisfy a given security target). Using these relationships, the IdP system may enable users to author policies and analyze how users' authentication behaviors comply with security targets.

Abstract: An identity provider (“IdP”) system maintains a framework of authentication methods and security targets that enables flexible authentication policy authoring and analysis of authentication performed by users of an organization. The IdP system generates authentication method profiles that include authentication factors and attributes, which may be further classified as required or optional. The IdP system also generates security target profiles that indicate security requirements needed to satisfy the corresponding security targets. The IdP system uses the generated profiles to determine relationships between authentication methods and security targets (e.g., a list of authentication methods that satisfy a given security target). Using these relationships, the IdP system may enable users to author policies and analyze how users' authentication behaviors comply with security targets.

Abstract: Users of an identity provider system may be authorized to use a variety of different types of factors from a variety of different factor providers. The identity provider system monitors and analyzes the “health” of the different possible factors available to a user, e.g., their availability relative to error rate. Using the results of the analysis, the identity provider can assess which factors are the most appropriate for a given user seeking authentication and can improve the user experience for the user by emphasizing those most appropriate factors to the user.

Abstract: The disclosure discloses a wearable computing device (WCD) that would selectively and automatically activate a transceiver of the WCD for data transmission based on sensor data obtained from a sensor module of the \VCD. In some example, the sensor module may convert the physical movements of the WCD into sensor data. Then, a processor module of the WCD compares the sensor data to a predetermined pattern pre-stored in the memory. If the sensor data matches the predetermined pattern, the processor module activates the transceiver to receive/transmit data packets. If the sensor data does not match the predetermined pattern, the process goes back to the beginning, where the processor module monitors the movement of the WCD through the sensors.

Abstract: A method that includes receiving, from one or more motion sensors in a device, data describing a signature arc in three-dimensional space, the signature arc having been generated by gesturing using the device; identifying, from the data describing the gestured signature arc, a plurality of points that correspond to the gestured signature arc in three-dimensional space; generating a curve along the identified plurality of points corresponding to the gestured signature arc; generating a two-dimensional representation of the gestured signature arc; and displaying, on a display screen, the generated two-dimensional representation of the gestured signature arc.

Abstract: A method that includes receiving, from one or more motion sensors in a device, data describing a signature arc in three-dimensional space, the signature arc having been generated by gesturing using the device; identifying, from the data describing the gestured signature arc, a plurality of points that correspond to the gestured signature arc in three-dimensional space; generating a curve along the identified plurality of points corresponding to the gestured signature arc; generating a two-dimensional representation of the gestured signature arc; and displaying, on a display screen, the generated two-dimensional representation of the gestured signature arc.

Abstract: The disclosure discloses a wearable computing device (WCD) that would selectively and automatically activate a transceiver of the WCD for data transmission based on sensor data obtained from a sensor module of the \VCD. In some example, the sensor module may convert the physical movements of the WCD into sensor data. Then, a processor module of the WCD compares the sensor data to a predetern lined pattern pre-stored in the memory. If the sensor data matches the predetermined pattern, the processor module activates the transceiver to receive/transmit data packets. If the sensor data does not match the predetermined pattern, the process goes back to the beginning, where the processor module monitors the movement of the WCD through the sensors.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for ranking devices based on a distance from a merchant device. One of the methods includes displaying, in a point-of-sale system, a listing of buyers located proximate to the point-of-sale system, the buyers having indicated using their mobile devices a desire to pursue a financial transaction in association with the point-of-sale system. The point-of-sale system determines relative distances of the mobile devices of the buyers with respect to the point-of-sale system and arranges the displayed listing in the point-of-sale system based at least in part on the determined relative distances.

Abstract: A technique for providing a checkout experience using a payment card is disclosed. An electronic device at a store detects a movement of a product away from the store by using a first short-range wireless link. The electronic device then receives from the product information identifying the product. The electronic device also detects the presence of a payment card near the product around the same time that it detects the movement of the product, by using a second short-range wireless link. The electronic device then receives information from the payment card information identifying an account on a server system. Upon determining that the product is at least a certain distance away from the store for at least a certain amount of time, the electronic device processes a payment for the product by the owner of the account.

Abstract: The disclosure discloses a wearable computing device (WCD) that would selectively and automatically activate a transceiver of the WCD for data transmission based on sensor data obtained from a sensor module of the WCD. In some example, the sensor module may convert the physical movements of the WCD into sensor data. Then, a processor module of the WCD compares the sensor data to a predetermined pattern pre-stored in the memory. If the sensor data matches the predetermined pattern, the processor module activates the transceiver to receive/transmit data packets. If the sensor data does not match the predetermined pattern, the process goes back to the beginning, where the processor module monitors the movement of the WCD through the sensors.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for ranking devices based on a distance from a merchant device. One of the methods includes displaying, in a point-of-sale system, a listing of buyers located proximate to the point-of-sale system, the buyers having indicated using their mobile devices a desire to pursue a financial transaction in association with the point-of-sale system. The point-of-sale system determines relative distances of the mobile devices of the buyers with respect to the point-of-sale system and arranges the displayed listing in the point-of-sale system based at least in part on the determined relative distances.

Abstract: The disclosure discloses a wearable computing device (WCD) that would selectively and automatically activate a transceiver of the WCD for data transmission based on sensor data obtained from a sensor module of the WCD. In some example, the sensor module may convert the physical movements of the WCD into sensor data. Then, a processor module of the WCD compares the sensor data to a predetermined pattern pre-stored in the memory. If the sensor data matches the predetermined pattern, the processor module activates the transceiver to receive/transmit data packets. If the sensor data does not match the predetermined pattern, the process goes back to the beginning, where the processor module monitors the movement of the WCD through the sensors.