Two-factor user authentication using near field communication

• US 9,002,270 B1
• Filed: 06/18/2013
• Issued: 04/07/2015
• Est. Priority Date: 02/17/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Hewinson, Philip
• Primary Examiner(s): Dao, Minh D
• Application Number:
  US13/920,374
• Time in Patent Office: 658 Days
• Field of Search: 455/41.1, 455/41.2, 455/410, 455/558, 455/3.06, 340/572.1, 340/10.3, 235/379
• US Class Current: 455/41.1
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04B 5/77 for interrogation
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A user is authenticated to a mobile computing device using an NFC tag. The NFC tag may be initially associated when an NFC reader of the device senses the NFC tag and wirelessly retrieves a tag identifier from the tag. The tag identifier is stored for subsequent retrieval. The authentication process begins after receiving a valid password and then positioning the device proximate the object such that the NFC reader of the device retrieves the tag identifier from the NFC tag without receiving input at the mobile computing device. In the event that the retrieved tag identifier matches the stored tag identifier, the mobile computing device is unlocked and the user may access the mobile computing device. If the retrieved tag identifier does not match the stored tag identifier, the user is not authenticated and the mobile computing device remains locked.

Claims

1. A computer-implemented method, comprising:

storing, at a computing device including one or more processors, a first password and a first identifier at a memory of the computing device;

receiving, at the computing device, a first request from a user to transition the computing device from a locked state to an unlocked state;

scanning, at the computing device, a device via a short-range wireless communication medium to obtain a second identifier from the device; and

transitioning, at the computing device, from the locked state to the unlocked state based on comparisons between (i) the first password stored at the memory and a second password input by the user via a user interface of the computing device and (ii) the first identifier stored at the memory and the second identifier obtained by scanning the device via the short-range wireless communication medium.

2. The computer-implemented method of claim 1, further comprising:

receiving, at the computing device, a second request from the user for the computing device to obtain the first identifier from the device;

scanning, at the computing device, the device via the short-range wireless communication medium in response to receiving the second request;

receiving, at the computing device, the first identifier corresponding to the device via the scanning; and

storing, at the computing device, the first identifier at the memory of the computing device in response to receiving the first identifier via the scanning.

3. The computer-implemented method of claim 1, further comprising outputting, at the computing device, a second request for the user to input the first password via the user interface in response to receiving the first request.

4. The computer-implemented method of claim 3, further comprising receiving, at the computing device, the second password from the user via the user interface.

5. The computer-implemented method of claim 4, further comprising determining, at the computing device, whether the second password matches the first password.

6. The computer-implemented method of claim 5, further comprising outputting, at the computing device, a third request for the user to input the first identifier by scanning for the device using the computing device when the second password matches the first password.

7. The computer-implemented method of claim 6, wherein transitioning from the locked state to the unlocked state is performed when the second identifier matches the first identifier, and further comprising remaining, at the computing device, in the locked state when the second identifier does not match the first identifier.

8. The computer-implemented method of claim 1, wherein the device is an electronic tag embedded in an object in possession of the user.

9. The computer-implemented method of claim 8, wherein the object is a card typically carried in a wallet or a purse of the user or a piece of jewelry typically worn by the user.

10. The computer-implemented method of claim 1, wherein the short-range wireless communication medium is one of near field communication (NFC), Bluetooth, and infrared.

11. A computing device, comprising:

a memory configured to store a first password and a first identifier; and

a user interface configured to receive a first request from a user to transition the computing device from a locked state to an unlocked state;

a scanner configured to (i) scan a device via a short-range wireless communication medium in response to receiving the first request and (ii) receive a second identifier corresponding to the device via the scanning; and

one or more processors configured to transition the computing device from the locked state to the unlocked state based on comparisons between (i) the first password stored at the memory and a second password input by the user via the user interface and (ii) the first identifier stored at the memory and the second identifier obtained by scanning the device via the short-range wireless communication medium.

12. The computing device of claim 11, wherein:

the user interface is further configured to receive a second request from the user for the computing device to obtain the first identifier from the device;

the scanner is further configured to;

scan the device via the short-range wireless communication medium in response to receiving the second request, and

receive the first identifier corresponding to the device via the scanning; and

the memory is further configured to store the first identifier in response to receiving the first identifier via the scanning.

13. The computing device of claim 11, wherein the user interface is further configured to output a second request for the user to input the first password via the user interface in response to receiving the first request.

14. The computing device of claim 13, wherein the user interface is further configure to receive the second password from the user.

15. The computing device of claim 14, wherein the one or more processors are further configured to determine whether the second password matches the first password.

16. The computing device of claim 15, wherein the user interface is further configured to output a third request for the user to input the first identifier by scanning for the device using the scanner when the second password matches the first password.

17. The computing device of claim 16, wherein the one or more processors are configured to transition from the locked state to the unlocked state when the second identifier matches the first identifier, and wherein the one or more processors are further configured to remain in the locked state when the second identifier does not match the first identifier.

18. The computing device of claim 11, wherein the device is an electronic tag embedded in an object in possession of the user, and wherein the object is a card typically carried in a wallet or a purse of the user or a piece of jewelry typically worn by the user.

19. The computing device of claim 11, wherein the short-range wireless communication medium is one of near field communication (NFC), Bluetooth, and infrared.

20. A computer readable medium storing instructions that, when executed by one or more processors of a computing device, causes the computing device to perform operations comprising:

storing a first password and a first identifier at a memory of the computing device;

receiving a first request from a user to transition the computing device from a locked state to an unlocked state;

scanning a device via a short-range wireless communication medium to obtain a second identifier from the device; and

transitioning from the locked state to the unlocked state based on comparisons between (i) the first password stored at the memory and a second password input by the user via a user interface of the computing device and (ii) the first identifier stored at the memory and the second identifier obtained by scanning the device via the short-range wireless communication medium.