Two-factor user authentication using near field communication

• US 8,478,195 B1
• Filed: 02/17/2012
• Issued: 07/02/2013
• Est. Priority Date: 02/17/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Hewinson, Philip
• Primary Examiner(s): Dao, Minh D
• Application Number:
  US13/399,622
• Time in Patent Office: 501 Days
• Field of Search: 455/41.1, 455/41.2, 455/410, 455/558, 455/3.06, 340/572.1, 340/10.3, 235/379
• US Class Current: 455/41.1
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04B 5/77 for interrogation
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A user is authenticated to a mobile computing device using an NFC tag. The NFC tag may be initially associated when an NFC reader of the device senses the NFC tag and wirelessly retrieves a tag identifier from the tag. The tag identifier is stored for subsequent retrieval. The authentication process begins after receiving a valid password and then positioning the device proximate the object such that the NFC reader of the device retrieves the tag identifier from the NFC tag without receiving input at the mobile computing device. In the event that the retrieved tag identifier matches the stored tag identifier, the mobile computing device is unlocked and the user may access the mobile computing device. If the retrieved tag identifier does not match the stored tag identifier, the user is not authenticated and the mobile computing device remains locked.

Claims

1. A computing device comprising:

a memory for storing a first tag identifier and a first password, wherein the first tag identifier and the first password are associated with a user;

a near field communication (NFC) reader configured to;

detect an NFC tag external to the computing device, wherein the NFC tag is detected without input being received at the computing device, and

retrieve a second tag identifier from the NFC tag; and

a processor configured to;

determine that a second password received as input corresponds to the first password,

retrieve the first tag identifier from the memory,

determine whether the first tag identifier corresponds to the second tag identifier, and

in the event that the first tag identifier corresponds to the second tag identifier, authenticate the user to the computing device.

2. The computing device of claim 1, wherein the NFC reader is further configured to retrieve the first tag identifier from the NFC tag for storage in the memory of the computing device before the second tag identifier is retrieved from the NFC tag.

3. The computing device of claim 1, wherein, in the event that the first tag identifier does not correspond to the second tag identifier, the processor is configured to prevent user access to the computing device.

4. The computing device of claim 1, wherein the NFC tag is associated with an object that is associated with the user.

5. The computing device of claim 4, wherein the object is a card.

6. The computing device of claim 4, wherein the object is a piece of jewelry.

7. A system comprising:

a near field communication (NFC) tag storing a first tag identifier; and

a mobile computing device comprising;

a memory for storing a second tag identifier and a first password;

an NFC reader configured to retrieve the first tag identifier from the NFC tag, wherein the NFC reader retrieves the first tag identifier without input received at the mobile computing device; and

a processor configured to;

determine that a second password received as input corresponds to the first password,

retrieve the second tag identifier from the memory,

determine whether the first tag identifier corresponds to the second tag identifier, and

in the event that the first tag identifier corresponds to the second tag identifier, authenticate the user to the mobile computing device.

8. The system of claim 7, wherein the NFC reader is further configured to retrieve the second tag identifier from the NFC tag for storage in the memory of the mobile computing device before the first tag identifier is retrieved from the NFC tag.

9. The computing device of claim 7, wherein the NFC tag is associated with an object that is associated with the user.

10. The computing device of claim 9, wherein the object is a card.

11. The computing device of claim 9, wherein the object is a piece of jewelry.

12. The system of claim 7, wherein, in the event that the first tag identifier does not correspond to the second tag identifier, the processor is configured to prevent the user from accessing the computing device.

13. A computer-implemented method comprising:

associating a first tag identifier of a near field communication (NFC) tag with a mobile computing device, wherein the first tag identifier is stored in memory of the mobile computing device, the first tag identifier being associated with a user;

determining that a first password received as input corresponds to a second password stored in the memory of the mobile computing device;

retrieving the first tag identifier from the memory;

retrieving a second tag identifier from the NFC tag, wherein the second tag identifier is retrieved from the NFC tag without receiving input at the mobile computing device;

determining whether the first tag identifier corresponds to the second tag identifier; and

in the event that the first tag identifier corresponds to the second tag identifier, authenticating the user to the mobile computing device.

14. The method of claim 13, further comprising retrieving the first tag identifier from the NFC tag for storage in the memory of the mobile computing device before retrieving the second identifier from the NFC tag.

15. The method of claim 13, wherein, in the event that the first identifier does not correspond to the second identifier, preventing the user from accessing the computing device.

16. The method of claim 13, wherein the NFC tag is associated with an object that is associated with the user.

17. The method of claim 16, wherein the object is a card.

18. The method of claim 16, wherein the object is a piece of jewelry.