Authenticating a user of a system using near field communication

• US 8,555,363 B2
• Filed: 09/16/2011
• Issued: 10/08/2013
• Est. Priority Date: 09/16/2011
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Lo, Yung-Chieh, Wu, Vincent, Hsieh, Cheng-Hsueh Andrew, Chen, Chinyue
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US13/235,310
• Publication Number:
  US 20130074170A1
• Time in Patent Office: 753 Days
• Field of Search: 726/7, 455/411, 455/41.2, 340/572.1, 340/10.1
• US Class Current: 726/7
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04M 2250/04 including near field communication means, e.g. RFID
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system and machine-implemented method for providing a username and password to a system using a device, via establishing a near field communication link with the system; retrieving a username and password from storage on the device; and transmitting the username and password to the system via the near field communication link, wherein the username and password are configured to be used by the system to authenticate the user on the system.

Claims

1. A machine-implemented method for providing a token to a system apparatus using a personal device, the method comprising:

receiving a token from the system apparatus, wherein the token is received based on prior user login on the system apparatus via a username and password;

storing the token on the personal device;

establishing, by the personal device and after storing the token, a near field communication (NFC) link with the system apparatus,

wherein the establishing comprises;

performing an initiation handshake with the system apparatus;

exchanging, in response to the initiation handshake, device profile information with the system apparatus; and

authenticating the system apparatus based on the exchanged device profile information;

receiving, at the personal device, an indication of a request for manual input for the username and password on the system apparatus;

retrieving, in response to the received indication of the request and instead of manual input from a user, the token from storage on the personal device; and

transmitting, by the personal device, the token to the system apparatus via the NFC link,

wherein the token is used for logging the user into the system apparatus.

2. The method of claim 1, further comprising:

terminating the near field communication link with the system apparatus.

3. A personal device for providing a token for user login on a system apparatus, the personal device comprising:

one or more processing devices; and

a machine-readable medium comprising instructions stored therein, which when executed by the processing devices, cause the processing devices to perform operations comprising;

receiving a token from the system apparatus, wherein the token is received based on prior user login on the system apparatus via a username and password;

storing the token on the personal device;

establishing, by the personal device and after storing the token, a near field communication (NFC) link with the system apparatus,

wherein the establishing comprises;

performing an initiation handshake with the system apparatus;

exchanging, in response to the initiation handshake, device profile information with the system apparatus; and

authenticating the system apparatus based on the exchanged device profile information;

receiving, at the personal device, an indication of a request for manual input for a username and password on the system apparatus;

retrieving, in response to the received indication of the request and instead of manual input from a user, the token from storage on the personal device; and

transmitting, by the personal device, the token to the system apparatus via the NFC link,

wherein the token is used for logging the user into the system apparatus.

4. The personal device of claim 3, the operations further comprising:

terminating the near field communication link with the system apparatus.

5. A non-transitory machine-readable medium comprising instructions stored therein, which when executed by a personal device, cause the personal device to perform operations comprising:

receiving a token from a system apparatus, wherein the token is received based on prior user login on the system apparatus via a username and password;

storing the token on the personal device;

establishing, by the personal device and after storing the token, a near field communication (NFC) link with the system apparatus,

wherein the establishing comprises;

performing an initiation handshake with the system apparatus;

exchanging, in response to the initiation handshake, device profile information with the system apparatus; and

authenticating the system apparatus based on the exchanged device profile information;

receiving, at the personal device, an indication of a request for manual input for a username and password on the system apparatus;

retrieving, in response to the received indication of the request and instead of manual input from a user, the token from storage on the personal device; and

transmitting, by the personal device, the token to the system apparatus via the NFC link,

wherein the token is used for logging the user into the system apparatus.

6. The machine-readable medium of claim 5, the operations further comprising:

terminating the near field communication link with the system apparatus.

7. A machine-implemented method for authenticating a user on a system apparatus, the method comprising:

requesting a username and password for a user;

receiving the username and password for the user;

generating a token in response to receiving the username and password;

transmitting the token to a personal device for storage on the personal device;

establishing, by the system apparatus and after transmitting the token, a near field communication (NFC) link with the personal device,

wherein the establishing comprises;

performing an initiation handshake with the personal device;

exchanging, in response to the initiation handshake, device profile information with the personal device; and

authenticating the personal device based on the exchanged device profile information;

transmitting, by the system apparatus, an indication of a request for manual input for a username and password to the personal device;

receiving, by the system apparatus and instead of manual input from a user, the stored token from the personal device via the NFC link; and

performing user login on the system using the stored token received via the NFC link.

8. The method of claim 7, further comprising:

terminating the near field communication link with the personal device.

9. A system apparatus for authenticating a user, the system apparatus comprising:

one or more processing devices; and

a machine-readable medium comprising instructions stored therein, which when executed by the processing devices, cause the processing devices to perform operations comprising;

requesting a username and password for a user;

receiving the username and password for the user;

generating a token in response to receiving the username and password;

transmitting the token to a personal device for storage on the personal device;

establishing, by the system apparatus and after transmitting the token, a near field communication (NFC) link with the personal device,

wherein the establishing comprises;

performing an initiation handshake with the personal device;

exchanging, in response to the initiation handshake, device profile information with the personal device; and

authenticating the personal device based on the exchanged device profile information;

transmitting, by the system apparatus, an indication of a request for manual input for a username and password to the personal device;

receiving, by the system apparatus and instead of manual input from a user, the stored token from the personal device via the NFC link; and

performing user login on the system using the stored token received via the NFC link.

10. The system apparatus of claim 9, the operations further comprising:

terminating the near field communication link with the personal device.

11. A non-transitory machine-readable medium comprising instructions stored therein, which when executed by a system apparatus, cause the system apparatus to perform operations comprising:

requesting a username and password for a user;

receiving the username and password for the user;

generating a token in response to receiving the username and password;

transmitting the token to a personal device for storage on the personal device;

establishing, by the system apparatus and after transmitting the token, a near field communication (NFC) link with the personal device,

wherein the establishing comprises;

performing an initiation handshake with the personal device;

exchanging, in response to the initiation handshake, device profile information with the personal device; and

authenticating the personal device based on the exchanged device profile information;

transmitting, by the system apparatus, an indication of a request for manual input for a username and password to the personal device;

receiving, by the system apparatus and instead of manual input from a user, the stored token from the personal device via the NFC link; and

performing user login on the system using the stored token received via the NFC link.

12. The machine-readable medium of claim 11, the operations further comprising:

terminating the near field communication link with the personal device.