Thursday, May 1, 2014

Watch me login

When the Galaxy Gear 2 is in proximity to the Galaxy S5 (which it is except when I am charging it, as I frequently am), the phone's lock screen can be bypassed. I see this as an example of the larger trend in which our things/devices, based on their location, sensing and inferences, will enable our authentication to other devices and online services.

Below is the default lock screen. I've set it up to use a security pattern rather than a PIN.


In the Gear Manager application on the S5, I can turn on the 'Auto lock' feature, whereby presence of the Gear (when it is not being charged) can lock & un-lock the phone  



I set up a pattern as a backup should I not have the Gear with me (as is the case when I am frequently charging it)


When the Gear is nearby (which it will be unless I am charging it, which happens often. Did I mention that?), I need only swipe to get past the lock screen.


This frees up valuable time that can be better spent charging up the Gear.


Friday, March 28, 2014

OAuth for BYOW (Wearables)

Walkingspree is a SaaS Wellness Program provider

Walkingspree uses technology to deliver an effective corporate wellness program for any industry. The program is based on the use of a high quality computer connected pedometer to encourage members get moving and shows how incremental bits of exercise and movement can add up over a day to deliver an effective physical activity program.
In other words, we count the steps of your employees so Vern in Accounting can brag to Lisa in Sales about how he walked to the grocery store over the weekend (to buy beer & chips).

While Walkingspree has their own line of pedometers, they clearly recognize the value of supporting the tracking bands employees already have on their wrists, like those from Fitbit.
To help members more easily integrate fitness into their daily routines, Walkingspree integrates its advanced wellness platform with all Fitbit pedometer devices. This feature automatically transfers real-time step data onto the same Walkingspree dashboard members use to track their company’s team standings, view progress on rewards, analyze achievements, and chart calories and fat burned.
Walkingspree's challenge is of course how to get the data from Fitbit's servers to its own, for it to graph, analyze, and 'value-add' (is that a verb?).
Fitbit devices can be activated for the Walkingspree platform in just a few easy steps. Once the member gives permission to link their Fitbit step data, the updates will happen seamlessly every time their Fitbit data is uploaded. Members will now be able to enjoy the benefits of both programs. 
What Walkingspree doesn't say is that the above 'permission' is manifested through the OAuth 1.0 protocol. Through the OAuth protocol, the member employee authorizes Fitbit to issue to Walkingspree a set of tokens that, when subsequently attached on the Walkingspree API calls to Fitbit servers, allows Fitbit to

  1. recognize which user's data is being queried
  2. verify that the user in question has previously given their consent
  3. verify that it is Walkingspree making the request
Interestingly, the Walkingspree Support pages indicate that some enterprises can choose to *not* allow their employees to use their Fitbit within the program


Presumably, these enterprises are worried about the security implications of all these unmanaged BYOW wristbands. 

How long till we have Dual Persona wearables - allowing for separate tracking of steps performed for the enterprise from those for personal use? 


Thursday, March 27, 2014

Introducing my stacked washer & dryer combo

This blog will explore identity issues around the Internet of Things.

All subsequent posts will be authored by my Kenmore stacked Washer & Dryer combo.

It seems they are somehow on a Google black list and so cannot themselves create a blog.

Enjoy.