Computing device with integrated authentication token

• US 10,135,813 B2
• Filed: 08/28/2017
• Issued: 11/20/2018
• Est. Priority Date: 12/16/2014
• Status: Expired due to Fees

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Johansson, Jesper Mikael, Canavor, Darren Ernest, Jezorek, Matthew Ryan, Lee, Brian Young
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US15/688,207
• Publication Number:
  US 20180026971A1
• Time in Patent Office: 449 Days
• Field of Search: 726 9
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Disclosed are various embodiments for a computing device with an integrated authentication token. The computing device includes first circuitry having a processor and a memory and providing general-purpose computing capability. The computing device also includes second circuitry configured to generate data. The first circuitry is incapable of determining the data due to a separation from the second circuitry, and the first and second circuitry may be in a single enclosure.

Claims

1. A computing device, comprising:

a shared display;

a first circuitry of the computing device having an integrated second circuitry implemented in hardware;

the first circuitry including a hardware processor and a memory providing general-purpose computing capability, the first circuitry being configured to render a user interface upon the shared display such that the integrated second circuitry is coupled to the shared display that is also used by the first circuitry of the computing device;

the integrated second circuitry configured to generate a one-time password and render the generated one-time password upon the shared display in response to a predetermined condition; and

wherein the first circuitry of the computing device is incapable of determining the generated one-time password due to a separation between the first circuitry and the integrated second circuitry, and the first circuitry and the integrated second circuitry are in a single enclosure.

2. The computing device of claim 1, wherein the first circuitry of the computing device independently controls a first layer of the shared display, and the second integrated circuitry independently controls a second layer of the shared display.

3. The computing device of claim 1, further comprising at least one sensor that enables or disables rendering by the integrated second circuitry to the shared display.

4. The computing device of claim 1, wherein the integrated second circuitry is capable of rendering to a full screen of the shared display.

5. The computing device of claim 1, wherein the integrated second circuitry is capable of rendering to a portion of the shared display.

6. A computing device, comprising:

a shared display;

a first circuitry of the computing device having an integrated second circuitry implemented in hardware;

the first circuitry including a hardware processor and a memory providing general-purpose computing capability, the first circuitry configured to render a first user interface on the shared display responsive to a user entry such that the integrated second circuitry is coupled to the shared display that is also used by the first circuitry of the computing device;

the integrated second circuitry configured to render a second user interface upon the shared display in response to a predetermined condition; and

wherein the first circuitry of the computing device is incapable of determining information in the second user interface due to a separation between the first circuitry and the integrated second circuitry, and the first circuitry and the integrated second circuitry are in a single enclosure.

7. The computing device of claim 6, wherein the first circuitry controls a first layer of the shared display, and the integrated second circuitry controls a second layer of the shared display.

8. The computing device of claim 7, wherein the second layer is on top of the first layer.

9. The computing device of claim 6, wherein the second user interface includes a one-time password.

10. The computing device of claim 6, wherein the first circuitry and the integrated second circuitry are configured to use distinct power sources.

11. The computing device of claim 6, further comprising a sensor, wherein the predetermined condition comprises an activation of the sensor.

12. The computing device of claim 6, wherein the first circuitry is capable of communicating with the integrated second circuitry via a write-only channel.

13. A method, comprising:

rendering, by first circuitry of a computing device having an integrated second circuitry implemented in hardware, a first user interface upon a shared display of the computing device;

rendering, by the integrated second circuitry of the computing device, a second user interface upon the shared display responsive to a user entry such that the integrated second circuitry is coupled to the shared display that is also used by the first circuitry of the computing device; and

wherein the first circuitry of the computing device is incapable of obtaining or determining information in the second user interface due to a separation between the first circuitry and the integrated second circuitry, and the first circuitry and the integrated second circuitry are in a single enclosure.

14. The method of claim 13, further comprising:

generating, by the integrated second circuitry, a one-time password; and

including, by the integrated second circuitry, the one-time password in the second user interface.

15. The method of claim 13, wherein the shared display comprises a multi-layer display with the first circuitry controlling a lower layer and the integrated second circuitry controlling an upper layer.

16. The method of claim 13, wherein the second user interface elicits a user entry of a security credential.

17. The method of claim 13, wherein the first user interface elicits a user entry of data included in the second user interface and otherwise inaccessible to the first circuitry of the computing device.

18. The method of claim 13, further comprising:

generating, by the integrated second circuitry, data based at least in part on an initialization vector and timing information; and

including, by the integrated second circuitry, the data in the second user interface.

19. The method of claim 13, wherein rendering, by the integrated second circuitry of the computing device, the second user interface upon the shared display further comprises detecting, by the integrated second circuitry, a request from the first circuitry of the computing device via a write-only channel.

20. The method of claim 13, further comprising generating, by third circuitry of the computing device, electromagnetic interference that obfuscates electromagnetic fields generated by the integrated second circuitry.