Password management

• US 10,341,113 B2
• Filed: 04/11/2018
• Issued: 07/02/2019
• Est. Priority Date: 05/08/2013
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Starner, Thad Eugene, Johnson, Michael Patrick
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Almeida, Devin E
• Application Number:
  US15/950,827
• Publication Number:
  US 20180234244A1
• Time in Patent Office: 447 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/013 Eye tracking input arrangements G06F3/015 takes precedence
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Methods, apparatus, and computer-readable media are described herein related to biometric authentication. A first computing device can detect a machine-readable code displayed by a second computing device, where the machine-readable code can identify protected information viewable via the second computing device. In response to detecting the machine-readable code, the first computing device can acquire biometric data via one or more biometric sensors associated with the first computing device. Based at least in part on the biometric data, the first computing device can generate an authentication message that includes authentication information and identifies the protected information. The first computing device can then send the authentication message to an authentication server for verification of the authentication information, where verification of the authentication information can allow access to the protected information via the second computing device.

Claims

1. A method, comprising:

determining, by a wearable computing device, that the wearable computing device is being worn;

while the wearable computing device is determined to be worn, detecting, by the wearable computing device, a machine-readable code associated with protected information that is accessible via a second computing device; and

responsive to detecting the machine-readable code;

obtaining biometric data from one or more biometric sensors associated with the wearable computing device,

based at least in part on the biometric data, the wearable computing device generating an authentication message that includes authentication information and identifies the protected information, and

sending the authentication message to an authentication server for verification of the authentication information, wherein verification of the authentication information allows access to the protected information via the second computing device.

2. The method of claim 1, further comprising:

after sending the authentication message to the authentication server for the verification of the authentication information, deleting the biometric data.

3. The method of claim 1, wherein verification of the authentication information includes a determination of whether the biometric data substantially matches stored biometric data, the method further comprising:

responsive to the determination being that the biometric data substantially matches the stored biometric data, the wearable computing device receiving information indicating that access to the protected information via the second computing device has been granted.

4. The method of claim 1, wherein verification of the authentication information includes a determination of whether the biometric data substantially matches stored biometric data, the method further comprising:

responsive to the determination being that the biometric data does not substantially match the stored biometric data, the wearable computing device entering into a guest-operation mode, wherein the wearable computing device is configured to disable guest-operation-related functionality of the wearable computing device after entering the guest-operation mode, and wherein the wearable computing device is configured to enable the guest-operation-related functionality after exiting the guest-operation mode.

5. The method of claim 1, wherein the biometric data includes eye-scan data corresponding to at least one eye.

6. The method of claim 1, wherein the biometric data includes fingerprint corresponding to at least one finger.

7. The method of claim 1, wherein at least one of the machine-readable code and the protected information is displayed on a webpage.

8. The method of claim 1, wherein the wearable computing device is a head-mountable device (HMD), wherein the HMD includes an eyeglass frame configuration.

9. A method, comprising:

detecting, by a wearable computing device, a machine-readable code associated with protected information that is accessible via a second computing device; and

responsive to detecting the machine-readable code;

obtaining biometric data from one or more biometric sensors associated with the wearable computing device,

based at least in part on the biometric data, the wearable computing device generating an authentication message that includes authentication information and identifies the protected information, wherein the authentication information comprises encrypted biometric data generated by the wearable computing device based on the biometric data, wherein generating the encrypted biometric data comprises encoding additional data into the biometric data, wherein the additional data includes at least one identifier associated with the wearable computing device and a public key associated with the wearable computing device, and

sending the authentication message to an authentication server for verification of the authentication information, wherein verification of the authentication information allows access to the protected information via the second computing device.

10. The method of claim 9, wherein generating the encrypted biometric data further comprises encrypting the biometric data based at least in part on a private key associated with the wearable computing device.

11. A method, comprising:

detecting, by a wearable computing device, a machine-readable code associated with protected information that is accessible via a second computing device; and

responsive to detecting the machine-readable code;

obtaining biometric data from one or more biometric sensors associated with the wearable computing device,

based at least in part on the biometric data, determining, by the wearable computing device, a digital signature for the biometric data, wherein the digital signature is different from the biometric data,

based on the digital signature, generating, by the wearable computing device, an encryption of the digital signature,

generating, by the wearable computing device, an authentication message that includes authentication information and identifies the protected information, wherein the authentication information comprises the encryption of the digital signature, and

sending the authentication message to an authentication server for verification of the authentication information, wherein verification of the authentication information allows access to the protected information via the second computing device.

12. A wearable computing device, comprising:

at least one processor; and

a non-transitory computer-readable storage medium having stored thereon program instructions that, upon execution by the at least one processor, cause the wearable computing device to perform operations comprising;

determining that the wearable computing device is being worn;

while the wearable computing device is determined to be worn, detecting a machine-readable code associated with protected information that is accessible via a second computing device; and

responsive to detecting the machine-readable code;

obtaining biometric data from one or more biometric sensors associated with the wearable computing device,

based at least in part on the biometric data, generating an authentication message that includes authentication information and identifies the protected information, and

sending the authentication message to an authentication server for verification of the authentication information, wherein verification of the authentication information allows access to the protected information via the second computing device.

13. The wearable computing device of claim 12, the operations further comprising:

after sending the authentication message to the authentication server for the verification of the authentication information, deleting the biometric data.

14. The wearable computing device of claim 12, wherein verification of the authentication information includes a determination of whether the biometric data substantially matches stored biometric data, the operations further comprising:

determining that the biometric data substantially matches the stored biometric data; and

responsively determining a password associated with the protected information, wherein the password is configured to allow access to the protected information.

15. A wearable computing device, comprising:

at least one processor; and

a non-transitory computer-readable storage medium having stored thereon program instructions that, upon execution by the at least one processor, cause the wearable computing device to perform operations comprising;

detecting a machine-readable code associated with protected information that is accessible via a second computing device; and

responsive to detecting the machine-readable code;

receiving a challenge signal requesting a verification response verifying the authenticity of a wearer of the wearable computing device using biometric data,

responsive to receiving the challenge signal, transmitting an acknowledgement signal,

after transmitting the acknowledgement signal, enabling the wearable computing device to obtain the biometric data,

obtaining the biometric data from one or more biometric sensors associated with the wearable computing device,

based at least in part on the biometric data, generating an authentication message that includes authentication information and identifies the protected information, and

sending the authentication message to an authentication server for verification of the authentication information, wherein verification of the authentication information allows access to the protected information via the second computing device.

16. A non-transitory computer-readable medium having stored thereon program instructions that when executed by a wearable computing device that includes at least one processor cause the wearable computing device to perform operations comprising:

determining that the wearable computing device is being worn;

while the wearable computing device is determined to be worn, detecting a machine-readable code associated with protected information that is accessible via a second computing device; and

responsive to detecting the machine-readable code;

obtaining biometric data from one or more biometric sensors associated with the wearable computing device,

based at least in part on the biometric data, generating an authentication message that includes authentication information and identifies the protected information, and

sending the authentication message to an authentication server for verification of the authentication information, wherein verification of the authentication information allows access to the protected information via the second computing device.

17. The non-transitory computer-readable medium of claim 16, the operations further comprising:

after sending the authentication message to the authentication server for the verification of the authentication information, deleting the biometric data.