Abstract:
There is provided a system comprising a first device of a user and a second device of a user, in which a user carries out a secure transaction utilising a user interface of the second device, wherein the secure transaction process sends a request to a user interface of the first device, and authorises or authenticates the transaction in dependence on a response to the request which is not transmitted from a user interface of the second device.

Description:
BACKGROUND 
       [0001]    Field of the Invention 
         [0002]    The present invention relates to effecting a secure communication utilising the user interfaces of two devices. The invention is particularly but not exclusively concerned with the use of two devices where one device is an accessory to the other device. 
         [0003]    Description of the Related Art 
         [0004]    It is generally known in the art to utilise interactive devices to conduct secure communication. 
         [0005]    An example of a secure communication is a log-on process, where a user has a unique identification which is used for logging-on to a computer device or for logging-on to a service accessed via a computing device. 
         [0006]    An example of a secure communication is a transaction process for payment. A credit card, for example, may be used to pay for a service or content utilising a user interface provided at a computing device. 
         [0007]    A computing device may be a standard computer or laptop, or may be a suitably adapted television, a tablet or a phone for example. A television may also be connected to a computer device and provide the user interface for the computing device. 
         [0008]    It is an aim of the invention to provide an improved system and method for effecting communication of secure information. 
       SUMMARY OF THE INVENTION 
       [0009]    There is provided a system comprising a first device of a user and a second device of a user, in which a user carries out a secure communication utilising a user interface of the second device, wherein the secure communication process sends a request to a user interface of the first device, and the secure communication process is completed in dependence on a response to the request which is not transmitted from a user interface of the second device. 
         [0010]    Thus the transaction process does not depend only on a transmission to a device separate to the device being used for the transaction, but depends on that device making a transmission. 
         [0011]    The request to the user interface of the first device causes the user interface to display information to the user. The information preferably request the user to provide an input. 
         [0012]    In one example a single additional device is provided, and the response is transmitted from a user interface of the single device. The user interface of the single device thus is configured to display a request to a user and is configured to receive an input from the user. 
         [0013]    The additional device is ideally a wearable device which is attached to the user, such as a watch-type device. 
         [0014]    The secure communication is to make a purchase associated with video content. 
         [0015]    The system may further comprise a third device of a user. The request is sent to a user interface of the first device, and the response is sent from a user interface of the third device. There is thus provided two devices in addition to the main device for displaying content. 
         [0016]    The first device may be interactive glasses and the third device may be a watch type device. The display part of the user interface of the interactive glasses is used, and the input part of the user interface of the watch-type device is used. 
         [0017]    The secure communication may comprise a payment transaction. The secure communication may comprise a log-in. The secure communication may comprise an authentication/authorisation process. 
         [0018]    There may be provided a server for controlling the secure communication process. The server may be connected to the second device, and the second device may be connected to the first device. Thus any communication between the server and the second device may be direct, and any communication between the server and first device may be via the second device. 
         [0019]    The first device may be associated with a third device. Any communication to the first device may be via the third device. The third device is not involved in the secure communication process other than to facilitate communication to the first device. An example here is that the first device is a watch and the third device is an associated phone, to which the watch is an accessory. The user interface of the watch is used for a secure communication conducted on the user interface of the second device, such as a tablet or television. In this example the phone is not part of the secure communication process, but may forward signals to from the watch. The third device thus may facilitate communication between the first and second devices. 
         [0020]    There is provided a method of secure communication for a system comprising a first device of a user and a second device of a user, the method comprising a user carrying out a secure communication utilising a user interface of the second device, wherein the secure communication method comprises sending a request to a user interface of the first device, and the secure communication process is completed in dependence on receiving a response to the request which is not transmitted from a user interface of the second device. 
         [0021]    The method comprises transmitting the request to the user interface of the first device to cause the user interface to display information to the user. The information preferably requests the user to provide an input. 
         [0022]    The method may comprise transmitting the request to a single additional device, and receiving the response from the user interface of the single device. The method thus configures the user interface of the single device to display a request to a user and to receive an input from the user. 
         [0023]    The method may comprise communicating with a third device of a user. The request is sent to a user interface of the first device. The method may comprise receiving the response from a user interface of the third device. There is thus provided two devices in addition to the main device for displaying content. 
         [0024]    The method may utilise a display part of the user interface of interactive glasses, and the input part of the user interface of a watch-type device. 
         [0025]    The method may provide a server for controlling the secure communication process. The method may connect the server to the second device, and the method may connect the second device to the first device. 
         [0026]    The method may associate the first device with a third device. Any communication to the first device may be via the third device. The third device may not be involved in the secure communication process other than to facilitate communication to the first device. An example here is that the first device is a watch and the third device is an associated phone, to which the watch is an accessory. The user interface of the watch is used for a secure communication conducted on the user interface of the second device, such as a tablet or television. In this example the phone is not part of the secure communication process, but may forward signals to from the watch. The third device thus may facilitate communication between the first and second devices. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS: 
         [0027]    The invention is now described by way of example with reference to the accompanying drawings, in which: 
           [0028]      FIG. 1  is a schematic bock diagram illustrating the connection of two devices in a first example; 
           [0029]      FIG. 2  is a first example method flow for controlling a transaction; 
           [0030]      FIG. 3  is an example screen shot of a user interface of a first device in a first example; 
           [0031]      FIG. 4  is a schematic bock diagram illustrating the connection of two devices in a second example; 
           [0032]      FIG. 5  is a second example method flow for controlling a transaction; 
           [0033]      FIGS. 6( a ) and 6( b )  are example screen shots of user interfaces in accordance with the second example. 
       
    
    
     DESCRIPTION OF PREFERRED EMBODIMENTS 
       [0034]    The invention is described by way reference to examples, but is not limited to features of these examples which are referred to for assisting in describing the invention. 
         [0035]    A user may utilise interactive devices and services with two devices, with one device being an accessory to the other. 
         [0036]    For example a user may watch video content on the display of a device, such as on the display of a tablet device. A user may utilise a user interface to control the delivery of video content. Such a user interface may be provided by the device. For example a touch-screen of a tablet device which displays video content, may also be used for displaying menu options to a user and detecting user inputs. 
         [0037]    Wearable technology covers a broad range of personal devices from health tracking gadgets to watches and glasses. Devices in this class come in a variety of form factors each tailored to a particular use case: glasses, a watch, a clip on pedometer, blood pressure and heart rate straps, and clothing fabrics that include sensing functions. 
         [0038]    The size of most wearable devices means that they are unable to contain the full complement of communication technology to support communication methods that are provided by a phone or a tablet for example. Moreover, it may not be beneficial for wearable devices to operate independently of other devices. For this reason, wearable devices typically function as accessories to other devices rather than as standalone devices in their own right. Communication between wearable accessories and associated phone/tablet devices may be via a direct radio connection such as Bluetooth, or via a network connection such as WiFi. Bluetooth is the most typical form of direct radio communication because of its low power consumption profile. 
         [0039]    A smart watch, for example, may act as an alternate display and interaction console for an associated second device, such as a large display device such as a tablet. These devices together can be used by a user to navigate the ecosystem of content around them, reinforcing the accessory role a watch fulfils. Where a phone or tablet can may be used to perform fine detailed actions, a watch may be used to allow the user to engage quickly. 
         [0040]    The limited screen real estate of a watch-type device and the small amount of bandwidth available to it makes direct consumption of content impractical. The use of a watch-type device in consumption of content is therefore in addition to a device on which the content is displayed. The watch-type device can be used to provide convenience and to personalise access to content. 
         [0041]    A watch-type device is likely to be one of the most personal devices a user owns in the ecosystem of consumer devices. Whilst smaller devices such as a tablet or phone are likely to be personally owned, they may be shared by others, and they may also be left in locations distinct from the users location. Interactive glasses are more likely to be kept with a user because they are worn, but as with a phone it is possible that they are left separate to the user or that the user is not always interacting with them. A watch-type device occupies a unique position in the ecosystem because it does not interfere with the user doing other tasks, and is more likely to always be attached to the user. 
         [0042]    The personal nature of a watch-type device may be used to enhance secure communication. 
         [0043]    Arrangements utilise the role of a smart watch within a video and related media ecosystem in relation to secure communication. The arrangements apply to devices other than a watch-type device, and are not limited in their applicability to use with a watch-type device, although they find particularly advantageous applicability when applied to a watch-type device. 
         [0044]    The examples disclosed herein relate to the use of a watch-type device in conjunction with a tablet device, but in general they relate to the use of any two devices which are in communication. The communication between the two devices may be controlled by one of the two devices, or there may be provided a third device such as a server which controls one or both of the devices. 
         [0045]    The examples utilise the architecture of two interconnected devices, such as a main device and an accessory device, to facilitate secure communication. 
         [0046]      FIG. 1  illustrates a first device  4   a , a second device  4   b , and a server  2 . The first and second devices  4   a ,  4   b  and the server  2  are illustrated as being connected by a network. The first device  4   a  has a processing engine  38  and a user interface  46   a . The second device  4   b  has a processing engine  38  and user interface  46   b . The devices  4   a ,  4   b  are each associated with a user  34 . 
         [0047]    The device  4   a  may be a watch-type device such as a smart watch. The device  4   b  may be a tablet or other larger screen device. Both devices operate under the control of the server  2 , with the server  2  controlling the association of the devices  4   a ,  4   b  with the user  34 . 
         [0048]    The network  2  is illustrative, and the server  2  and the devices  4   a ,  4   b  may communicate by any appropriate technique, for example by direct communication rather than by the network, or the communication between two devices may be on a distinct network. Alternatively one of the devices  4   a ,  4   b  may be connected to the network, the other of the devices  4   a ,  4   b  being connected to the network connected device by a radio link. For watch-type devices, the device is generally associated with and connected to a smart phone device. Thus the use of a watch type device in a communication may inherently involve the use of the associated smart phone, even when the communication is being conducted with a different device such as a tablet. 
         [0049]    With reference to  FIG. 2 , an example process associated with the architecture of  FIG. 1  is illustrated. 
         [0050]    As denoted in step  202 , the server  2  is connected to the first device  4   a  and the second device  4   b , and associates each of the first and second devices  4   a ,  4   b  with a particular user  34 . As denoted by step  204 , the server  2  also associates the second device  4   b  with user content. This association may allow the second device  4   b  to access and play any content associated with the user  34 , and may also allow the second device  4   b  to be used by the user  34  to purchase additional content. 
         [0051]    The server  2  configures the user interface of the first device  4   a , as denoted by step  206 , to control the content associated with the second device  4   b . This allows the user interface of the first device  4   a  to remotely control the content associated with the second device  4   b . Thus when content is displayed on the display of the second device  4   b , the user interface of the first device  4   a  is configured to control that content. When the content displayed is programme content, for example, the user interface of the first device  4   a  may provide a remote control to play, pause, fast forward etc. the content. 
         [0052]    In an example, as denoted by step  208 , a user conducts a transaction to purchase content using the user interface of the second device  4   b . A transaction to purchase content is an example of a secure communication. 
         [0053]    The server  2  manages the purchase of content by the user  34 . The second device  4   b  is connected to the server  2 , and the user&#39;s interaction with the user interface associated with the second device  4   b  to purchase content is managed by the server  2 . As denoted by step  210 , the server  2  communicates with an entity associated with the content being purchased to purchase the content. The user interface of the first device or the second device may be used for this interaction with the display of the second device. 
         [0054]    The server  2  additionally configures, as denoted by step  212 , the user interface of the first device  4   a  to authenticate/authorise the purchase of the content. Specifically the server  2  configures the user interface of the first device  4   a  to display a request associated with the purchase. The server may directly communicate with the first device to achieve this, or the server may instruct the second device to communicate with the first device to achieve this. 
         [0055]    Specifically, the server  2  controls the user interface of the first device  4   a , as denoted by step  214 , to display a request associated with the purchase transaction which is being conducted utilising the user interface of the second device. It is assumed here that the transaction is being initiated by the user interface associated with the second device, and associated information is displayed on the user interface of the second device. The display of the second device may display information related to the current status of the transaction, and may display a message for the user to check the user interface of the first device. In any event, a correspondence preferably exists between the two user interfaces, with the display of the second device at least providing a summary of the transaction. 
         [0056]      FIG. 3  shows an example display of the user interface of the first device  4   a . The display  302  includes a confirmation of the content which the user is about to purchase. Icon  304  illustrates an image associated with the purchase, for example an image associated with a film if a film is being purchased. The title of the film may also be shown alongside this icon. 
         [0057]    Two additional icons are displayed. An icon  306  displays ‘cancel’ text, and an icon  308  displays ‘confirm payment’ text. 
         [0058]    The transaction is then authorised/authenticated by detecting the user input at the user interface. In order to cancel the transaction, the icon  306  is selected. Preferably the icon is swiped or tapped to the left. In order to confirm the transaction, the icon  308  may be double tapping. Preferably some gesture other than a simple tap is used to select any icon, to avoid accidental gesture. 
         [0059]    The input detected at the user interface of the first device  4   a  is sent to the server  2 , and as denoted by step  216  the server  2  thus controls the user interface of the first device  4   a  to receive an input associated with the displayed content. Where the server is directly connected to the first device a signal associated with the user input is transmitted directly from the first device to the server. Alternatively the signal may be sent from the first device to the server via the second device. 
         [0060]    As denoted by step  218 , the server  2  then completes the transaction accordingly. Where the purchase has been confirmed, the content is downloaded and associated with the user, for example being downloaded to the second device. 
         [0061]    Examples of purchased content may be to purchase a pay-per-view (PPV) event, or to upgrade a subscription through a Smart TV or set top box (STB). 
         [0062]    The use of the user interface of the first device, to complement the purchase being made with the user interface of the second device, enables authorisation/authentication to be enhanced. The use of the additional authorisation from an additional device, which requires a transmission from the additional device to the server, provides a high degree of confidence that the requested transaction is approved by the bill payer. 
         [0063]    The first device is preferably a watch-type device. As a watch is typically always attached to a user, an alert shown on it such as the display on the user interface as shown in  FIG. 3  prompts a known user to confirm a transaction. 
         [0064]    The authorisation/authentication process provides a convenient and natural interaction process when used with a watch-type device. For example a tablet screen or a television screen displays a transaction summary, and the watch provides the opportunity to approve or decline the transaction. 
         [0065]    In this way, a secure communication is provided utilising two interconnected devices. 
         [0066]    A modification to this technique configures the transaction at the second device to be authenticated/authorised using the user interfaces of two additional devices rather than one. In an example the display part and input part described above when using the user interface of the first device is split into two, with the display part being provided on the user interface of one device, and the input part being provided at the user interface of another device. 
         [0067]    In this arrangement the architecture of  FIG. 1  is adapted, as shown in  FIG. 4 , to include a third user device  4   c . The third user device  4   c  includes a processing engine  38  consistent with the other devices, and a user interface  46   c . The third user device  4   c  is associated with the user  34 , and in the example is connected to the network. 
         [0068]    With reference to  FIG. 5 , an example process associated with the architecture of  FIG. 4  is illustrated. 
         [0069]    As denoted in step  502 , the server  2  is connected to the first device  4   a , the second device  4   b  and the third device  4   c , and associates each of the first, second and third devices  4   a ,  4   b ,  4   c  with a particular user  34 . As denoted by step  504 , the server  2  also associates the second device  4   b  with user content. This association may allow the second device  4   b  to access and play any content associated with the user  34 , and may also allow the second device  4   b  to be used by the user  34  to purchase additional content. 
         [0070]    The server  2  configures the user interfaces of the first device  4   a  and the third device  4   c , as denoted by step  206 , to control the content associated with the second device  4   b . This allows the user interfaces of the first and third devices  4   a ,  4   c  to remotely control the content associated with the second device  4   b . Thus when content is displayed on the display of the second device  4   b , the user interfaces of the first and third device  4   a ,  4   c  are configured to control that content. When the content displayed is programme content, for example, the user interfaces of the first and third devices  4   a ,  4   c  may provide remote controls to play, pause, fast forward etc. the content. 
         [0071]    In this example, as denoted by step  508 , a user again conducts a transaction to purchase content using the user interface of the second device  4   b.    
         [0072]    The server  2  manages the purchase of content by the user  34 . The second device  4   b  is connected to the server  2 , and the user&#39;s interaction with the user interface associated with the second device  4   b  to purchase content is managed by the server  2 . As denoted by step  510 , the server  2  communicates with an entity associated with the content being purchased to purchase the content. 
         [0073]    The server  2  additionally configures, as denoted by step  512 , the user interface of the first and third devices  4   a ,  4   c  to authenticate/authorise the purchase of the content. 
         [0074]    In this example the server  2  configures the user interface of the third device  4   c  to display a request associated with the purchase. Specifically, the server  2  controls the user interface of the third device  4   c , as denoted by step  514 , to display a request associated with the purchase transaction. The server transmits an appropriate signal to the user interface of the third device directly, or via the second device which has a direct radio connection to the third device. 
         [0075]    In an example, the third device is interactive glasses, and the server  2  controls the interactive glasses to display an option associated with the purchase. At the same time the display of the second device may prompt the user to make a selection based on the information displayed on the interactive glasses. 
         [0076]      FIG. 6( a )  shows an example display of the user interface of the third device  4   c . The display  602  includes a confirmation of the content which the user is about to purchase. Associated with the icon confirming the purchase is, in this example, text advising the action to be taken by the user to confirm the purchase. 
         [0077]    At the same time the display associated with the second device displays information as shown in  FIG. 6( b ) . This display  604  may display an icon representing an image of the purchase, and an icon requesting confirmation that the user will check information displayed on the user interface display of the interactive glasses. 
         [0078]    In the example the user is advised by the display of the interactive display to swipe back/forward to select a different card, and the user may thus adapted the displayed information accordingly. 
         [0079]    In an example, the transaction is then confirmed by the user providing an input at the user interface associated with the first device to confirm the purchase. The user selection of an appropriate input at the first device results in a signal being sent to the server, directly or via a connection to the second device. 
         [0080]    The transaction is then authorised/authenticated by detecting the user input at the user interface. The input detected at the user interface of the first device  4   a  is sent to the server  2 , and as denoted by step  516  the server  2  thus controls the user interface of the first device  4   a  to receive an input associated with the displayed content. 
         [0081]    As denoted by step  518 , the server  2  then completes the transaction accordingly. Where the purchase has been confirmed, the content is downloaded and associated with the user, for example being downloaded to the second device. 
         [0082]    Thus as described the transaction may be authorised by an additional device or devices, with the user interface functionality being spread amongst the plurality of additional devices when additional devices are used. 
         [0083]    Whether a single device or multiple additional devices are used, an additional signal is sent back from the device or additional devices to the server to provide authorisation or authentication of a transaction. 
         [0084]    In this way, a secure communication is provided utilising three interconnected devices. In general, a secure communication is provided utilising at least two interconnected devices. 
         [0085]    In an example an additional device may be utilised which simply facilitates communication and is not part of the secure communication process. For example where a watch type device is associated with a smart phone, any communication with the watch type device may be via the smart phone, even when the user interface of the smart phone is not being utilised. For example a transaction may be conducted utilising the user interface of a second device, such as a tablet, and a communication may be sent to the watch type device, either by the server or by the second device, via the smart phone. This may be understood with further reference to  FIG. 4 . The additional device shown,  4   c , may be a smart phone associated with the watch (being the first device  4   a ). In such case the phone  4   c  plays no active role in the secure communication. In modifications, even in such scenario the communication may bypass the smart phone associated with the watch, and allow the watch to communicate directly with the tablet (or television) for the purpose of effecting the transaction. 
         [0086]    In embodiments a purchase transaction is a purchase transaction associated with video content, but the transaction may be an alternative type of purchase transaction. 
         [0087]    The examples relate to a purchase transaction, but in general apply to a secure communication of any type. 
         [0088]    For example the secure communication may be a log-in. Log-in information is provided using the user interface of the second device, such as a tablet, and then a signal is sent to the user interface of the first device, such as a watch, to request an additional user input. In response to that additional user input at the first device, which may simply be a swipe or a double tap, the log-in is completed. 
         [0089]    For example the secure communication may be associated with an authentication/authorisation process. For example an authentication/authorisation process may utilise the transmission of encrypted messages. 
         [0090]    The examples describe a secure communication technique which allows the communication to be completed using an individual device, such as a watch or interactive glasses, rather than a shared device, such as a television. The individual device is a personal device, which is likely to be rarely away from the associated user. 
         [0091]    When a user is using interactive glasses, the server may choose to send the information associated with a credit card transaction, or any information which is of a secure nature, to the display of the interactive glasses rather than displaying the information of the screen. Credit card information may be displayed, as shown in  FIG. 6( a ) , on the display of the interactive glasses rather than the display of the second device. The system may be adapted such that on detection of the use by the user of interactive glasses, all information of a secure nature is displayed on the interactive glasses. 
         [0092]    Where a user is using interactive glasses and has an interactive watch-type device, the display of the glasses may advantageously be used with inputs being provided by the watch. 
         [0093]    Examples have been described herein, but it is to be understood that the invention is not limited to details of those examples. Details of any examples herein may include the details of any or all other examples in any combination. 
         [0094]    In addition methods and computer programs for implementing the method are contemplated. Any method or computer program may be implemented in a server controlling a device or devices, in a device, in a combination of a server and a device, in a combination of devices, or in a combination of a server and devices. 
         [0095]    Various other changes and modifications may be made by one skilled in the art without departing from the scope or spirit of the invention.