Two-factor user authentication using near field communication

• US 8,478,196 B1
• Filed: 07/03/2012
• Issued: 07/02/2013
• Est. Priority Date: 02/17/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Hewinson, Philip
• Primary Examiner(s): Dao, Minh D
• Application Number:
  US13/540,888
• Time in Patent Office: 364 Days
• Field of Search: 455/41.1, 455/41.2, 455/410, 455/558, 455/3.06, 340/572.1, 340/10.3, 235/379
• US Class Current: 455/41.1
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04B 5/77 for interrogation
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A user is authenticated to a mobile computing device using an NFC tag. The NFC tag may be initially associated when an NFC reader of the device senses the NFC tag and wirelessly retrieves a tag identifier from the tag. The tag identifier is stored for subsequent retrieval. The authentication process begins after receiving a valid password and then positioning the device proximate the object such that the NFC reader of the device retrieves the tag identifier from the NFC tag without receiving input at the mobile computing device. In the event that the retrieved tag identifier matches the stored tag identifier, the mobile computing device is unlocked and the user may access the mobile computing device. If the retrieved tag identifier does not match the stored tag identifier, the user is not authenticated and the mobile computing device remains locked.

Claims

1. A computer-implemented method, comprising:

receiving, at a mobile computing device including one or more processors, a first request from a user for the mobile computing device to obtain a first identifier from a near field communication (NFC) tag;

scanning, at the mobile computing device, the NFC tag via NFC in response to receiving the first request;

receiving, at the mobile computing device, the first identifier corresponding to the NFC tag via the scanning;

storing, at the mobile computing device, the first identifier at a memory of the mobile computing device in response to receiving the first identifier;

transitioning, at the mobile computing device, from an unlocked state to a locked state after storing the first identifier at the memory, wherein the user has access to one or more functions of the mobile computing device in the unlocked state and does not have access to the one or more functions of the mobile computing device in the locked state;

receiving, at the mobile computing device, a second request from the user to transition the mobile computing device from the locked state to the unlocked state;

outputting, at the mobile computing device, a third request for the user to input a first password via a user interface of the mobile computing device, wherein the first password is stored at the memory and is associated with the user;

receiving, at the mobile computing device, a second password from the user via the user interface;

determining, at the mobile computing device, whether the second password matches the first password;

outputting, at the mobile computing device, a fourth request for the user to input the first identifier by scanning for the first NFC tag using the mobile computing device when the second password matches the first password;

scanning, at the mobile computing device, for the first NFC tag via NFC;

receiving, at the mobile computing device, a second NFC identifier via the scanning for the first NFC tag using the mobile computing device;

determining, at the mobile computing device, whether the second NFC identifier matches the first NFC identifier stored at the memory; and

transitioning, at the mobile computing device, from the locked state to the unlocked state when the second NFC identifier matches the first NFC identifier.

2. A computer-implemented method, comprising:

receiving, at a computing device including one or more processors, a first request from a user for the computing device to obtain a first identifier from a near field communication (NFC) device;

scanning, at the computing device, the NFC device via NFC in response to receiving the first request;

receiving, at the computing device, the first identifier corresponding to the NFC device via the scanning;

storing, at the computing device, the first identifier at a memory of the computing device in response to receiving the first identifier;

transitioning, at the computing device, from an unlocked state to a locked state after storing the first identifier at the memory, wherein the user has access to one or more functions of the computing device in the unlocked state and does not have access to the one or more functions of the computing device in the locked state;

receiving, at the computing device, a second request from the user to transition the computing device from the locked state to the unlocked state; and

transitioning, at the computing device, from the locked state to the unlocked state based on comparisons between (i) a first password stored at the memory and a second password input by the user via a user interface of the computing device and (ii) the first identifier stored at the memory and a second identifier obtained via a scan for the NFC device.

3. The computer-implemented method of claim 2, further comprising outputting, at the computing device, a third request for the user to input the first password via the user interface in response to receiving the second request.

4. The computer-implemented method of claim 3, further comprising receiving, at the computing device, the second password from the user via the user interface.

5. The computer-implemented method of claim 4, further comprising determining, at the computing device, whether the second password matches the first password.

6. The computer-implemented method of claim 5, further comprising outputting, at the computing device, a fourth request for the user to input the first identifier by scanning for the first NFC device using the computing device when the second password matches the first password.

7. The computer-implemented method of claim 6, further comprising receiving, at the computing device, a second NFC identifier via the scanning for the first NFC device using the computing device.

8. The computer-implemented method of claim 7, further comprising determining, at the computing device, whether the second NFC identifier matches the first NFC identifier stored at the memory.

9. The computer-implemented method of claim 8, further comprising transitioning, at the computing device, from the locked state to the unlocked state when the second NFC identifier matches the first NFC identifier.

10. The computer-implemented method of claim 2, wherein the NFC device is an NFC tag embedded in an object in possession of the user.

11. The computer-implemented method of claim 10, wherein the object is a card typically carried in a wallet or a purse of the user or a piece of jewelry typically worn by the user.

12. A computing device, comprising:

a user interface configured to receive a first request from a user for the computing device to obtain a first identifier from a near field communication (NFC) tag;

an NFC scanner configured to (i) scan the NFC device via NFC in response to receiving the first request and (ii) receive the first identifier corresponding to the NFC device via the scanning;

a memory configured to store the first identifier in response to receiving the first identifier; and

one or more processors configured to transition the computing device from an unlocked state to a locked state after storing the first identifier at the memory, wherein the user has access to one or more functions of the computing device in the unlocked state and does not have access to the one or more functions of the computing device in the locked state,

wherein the user interface is further configured to receive a second request from the user to transition the computing device from the locked state to the unlocked state, and

wherein the one or more processors are further configured to transition the computing device from the locked state to the unlocked state based on comparisons between (i) a first password stored at the memory and a second password input by the user via a user interface of the computing device and (ii) the first identifier stored at the memory and a second identifier obtained via a scan for the NFC device.

13. The computing device of claim 12, wherein the user interface is further configured to:

output a third request for the user to input the first password via the user interface in response to receiving the second request; and

receiving the second password from the user.

14. The computing device of claim 13, wherein the one or more processors are further configured to determine whether the second password matches the first password.

15. The computing device of claim 14, wherein the user interface is further configured to output a fourth request for the user to input the first identifier by scanning for the first NFC device using the NFC scanner when the second password matches the first password.

16. The computing device of claim 15, wherein the NFC scanner is further configured to receive a second NFC identifier by scanning for the first NFC device using the computing device.

17. The computing device of claim 16, wherein the one or more processors are further configured to determine whether the second NFC identifier matches the first NFC identifier stored at the memory.

18. The computing device of claim 17, wherein the one or more processors are configured to transition the computing device from the locked state to the unlocked state when the second NFC identifier matches the first NFC identifier.

19. The computing device of claim 12, wherein the NFC device is an NFC tag embedded in an object that is typically in possession of the user.

20. The computing device of claim 19, wherein the object is a card typically carried in a wallet or a purse of the user or a piece of jewelry typically worn by the user.