COMPUTING DEVICE WITH INTEGRATED AUTHENTICATION TOKEN

• US 20170034157A1
• Filed: 10/14/2016
• Published: 02/02/2017
• Est. Priority Date: 12/16/2014
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: CANAVOR, DARREN ERNEST, JEZOREK, MATTHEW RYAN, LEE, BRIAN YOUNG, JOHANSSON, JESPER MIKAEL
• Granted Patent: US 9,787,673 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Disclosed are various embodiments for a computing device with an integrated authentication token. The computing device includes first circuitry having a processor and a memory and providing general-purpose computing capability. The computing device also includes second circuitry configured to generate a one-time password. The first circuitry is incapable of determining the one-time password due to a separation from the second circuitry, and the first and second circuitry may be in a single enclosure.

Claims

1. A computing device, comprising:

a first display;

a second display;

first circuitry including a hardware processor and a memory providing general-purpose computing capability;

second circuitry configured to generate a one-time password and render the generated one-time password upon the second display in response to a predetermined condition, wherein the first circuitry is configured to render a user interface upon the first display that elicits a user entry of the generated one-time password; and

wherein the first circuitry is incapable of determining the one-time password due to a separation between the first circuitry and the second circuitry, and the first circuitry and the second circuitry are in a single enclosure.

2. The computing device of claim 1, wherein the predetermined condition comprises detecting via an accelerometer a predefined pattern of motion.

3. The computing device of claim 1, wherein the predetermined condition comprises detecting a user activation of a capacitive button.

4. The computing device of claim 1, wherein the predetermined condition comprises detecting a rendering of the user interface that elicits the user entry of the generated one-time password on the first display.

5. The computing device of claim 1, wherein the second display is configured to render a plurality of alphanumeric characters.

6. The computing device of claim 1, wherein the second display is configured to generate the one-time password based at least in part on an initialization vector and timing information.

7. The computing device of claim 1, wherein the single enclosure is of at least one of:

plastic, metal, or glass construction.

8. The computing device of claim 1, wherein the second circuitry is electromagnetically isolated from the first circuitry via an electromagnetic shield.

9. The computing device of claim 1, further comprising third circuitry configured to generate electromagnetic interference that obfuscates electromagnetic fields generated by the second circuitry.

10. The computing device of claim 1, wherein the first circuitry and the second circuitry are powered by distinct power sources.

11. A computing device, comprising:

a first display;

a second display;

first circuitry including a hardware processor and a memory providing general-purpose computing capability;

second circuitry configured to generate a one-time password and render the generated one-time password upon the second display in response to detecting that a predetermined user interface is shown on the first display; and

wherein the first circuitry is incapable of determining the one-time password due to a separation between the first circuitry and the second circuitry, and the first display and the second display are in a single enclosure.

12. The computing device of claim 11, wherein the predetermined user interface elicits a user entry of the generated one-time password.

13. The computing device of claim 11, wherein the first circuitry and the second circuitry are in the single enclosure.

14. The computing device of claim 11, wherein the first circuitry and the second circuitry are individually coupled to a shared power source via isolation circuitry.

15. A method, comprising:

rendering, by first circuitry of a computing device, a user interface configured to elicit textual input upon a first display of the computing device;

generating, by second circuitry of the computing device, a one-time password;

rendering, by the second circuitry, the generated one-time password upon a second display of the computing device, wherein the user interface elicits a user entry of the generated one-time password; and

wherein the first circuitry is incapable of determining the generated one-time password from the second circuitry due to a separation between the first circuitry and the second circuitry, and the first circuitry and the second circuitry are in a single enclosure.

16. The method of claim 15, wherein generating the one-time password further comprises generating, by second circuitry of the computing device, the one-time password based at least in part on an initialization vector stored in the second circuitry and timing information generated by a clock internal to the second circuitry.

17. The method of claim 15, further comprising regenerating, by the second circuitry, the one-time password at a predefined interval.

18. The method of claim 15, wherein the second circuitry is electromagnetically isolated from the first circuitry via an electromagnetic shield.

19. The method of claim 15, wherein the first display and the second display are in the single enclosure.

20. The method of claim 15, further comprising generating, by third circuitry of the computing device, electromagnetic interference that obfuscates electromagnetic fields generated by the second circuitry.