Authenticating a user of a system using near field communication

• US 9,113,333 B2
• Filed: 09/24/2013
• Issued: 08/18/2015
• Est. Priority Date: 09/16/2011
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Lo, Yung-Chieh, Wu, Vincent, Chen, Chinyue, Hsieh, Cheng-Hsueh Andrew
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US14/035,925
• Publication Number:
  US 20140026202A1
• Time in Patent Office: 693 Days
• Field of Search: 726/7
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04M 2250/04 including near field communication means, e.g. RFID
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system and machine-implemented method for providing a username and password to a system using a device, via establishing a near field communication link with the system; retrieving a username and password from storage on the device; and transmitting the username and password to the system via the near field communication link, wherein the username and password are configured to be used by the system to authenticate the user on the system.

Claims

1. A machine-implemented method for performing user login on a system apparatus, the method comprising:

providing, by the system apparatus, a login interface requesting manual input by a user for a username and password;

establishing, in response to providing the interface, a near field communication (NFC) link with a personal device, comprising;

performing an initiation handshake with the personal device;

exchanging, in response to the initiation handshake, device profile information with the personal device; and

authenticating the personal device based on the exchanged device profile information;

receiving, by the system apparatus and instead of manual input by the user, a stored and encrypted version of the username and password from the personal device via the NFC link, wherein the stored version of the username and password are based on a prior user login of the user on the system apparatus using the username and the password; and

performing, by the system apparatus, user login using the stored version of the username and password received via the NFC link.

2. The method of claim 1, further comprising:

terminating the NFC link with the personal device.

3. The method of claim 1, wherein the login interface is for logging the user into at least one of a network, a webpage or a credit card system accessed by the system apparatus.

4. The method of claim 1, wherein the login interface is for logging the user into a library system accessed by the system apparatus, the library system being associated with books embedded with radio-frequency identification (RFID) tags for identification by the library system, with each REID tag being configured to communicate identification information for a respective book to the personal device.

5. The method of claim 1, further comprising:

transmitting a message to the personal device, to awaken an NFC interface of the personal device;

wherein the establishing comprises establishing, in response to awakening the NFC interface of the personal device, the NFC link with the personal device via the NFC interface of the personal device.

6. The method of claim 1, wherein the stored version of the username and password correspond to a token stored on the personal device.

7. A system apparatus for performing user login, the system apparatus comprising:

one or more processors; and

a non-transitory machine-readable medium comprising instructions stored therein, which when executed by the processors, cause the processors to perform operations comprising;

providing a login interface requesting manual input by a user for a username and password;

establishing, in response to providing the interface, a near field communication (NFC) link with a personal device, comprising;

performing an initiation handshake with the personal device;

exchanging, in response to the initiation handshake, device profile information with the personal device; and

authenticating the personal device based on the exchanged device profile information;

receiving, instead of manual input by the user, a stored and encrypted version of the username and password from the personal device via the NFC link, wherein the stored version of the username and password are based on a prior user login of the user on the system apparatus using the username and the password;

performing user login using the stored version of the username and password received via the NFC link; and

terminating the NFC link with the personal device.

8. The system of claim 7, wherein the login interface is for logging the user into at least one of a network, a webpage or a credit card system accessed by the system apparatus.

9. The system of claim 7, wherein the login interface is for logging the user into a library system accessed by the system apparatus, the library system being associated with books embedded with radio-frequency identification (RFID) tags for identification by the library system, with each RFID tag being configured to communicate identification information for a respective book to the personal device.

10. The system of claim 7, the operations further comprising:

transmitting a message to the personal device, to awaken an NFC interface of the personal device,

wherein the establishing comprises establishing, in response to awakening the NFC interface of the personal device, the NFC link with the personal device via the NFC interface of the personal device.

11. The system of claim 7, wherein the stored version of the username and password correspond to a token stored on the personal device.

12. A non-transitory machine-readable medium comprising instructions stored therein, which when executed by a system apparatus, cause the system apparatus to perform operations comprising:

providing a login interface requesting manual input by a user for a username and password;

establishing, in response to providing the interface, a near field communication (NFC) link with a personal device, comprising;

performing an initiation handshake with the personal device;

exchanging, in response to the initiation handshake, device profile information with the personal device; and

authenticating the personal device based on the exchanged device profile information;

receiving, instead of manual input by the user, a stored and encrypted version of the username and password from the personal device via the NFC link, wherein the stored version of the username and password are based on a prior user login of the user on the system apparatus using the username and the password; and

performing user login using the stored version of the username and password received via the NFC link, wherein the stored version of the received username and password are encrypted.

13. The non-transitory machine-readable medium of claim 12, further comprising:

terminating the NFC link with the personal device.

14. The non-transitory machine-readable medium of claim 12, wherein the login interface is for logging the user into at least one of a network, a webpage or a credit card system accessed by the system apparatus.

15. The non-transitory machine-readable medium of claim 12, wherein the login interface is for logging the user into a library system accessed by the system apparatus, the library system being associated with books embedded with radio-frequency identification (RFID) tags for identification by the library system, with each REID tag being configured to communicate identification information for a respective book to the personal device.