Computing device with integrated authentication token

• US 9,473,491 B1
• Filed: 12/16/2014
• Issued: 10/18/2016
• Est. Priority Date: 12/16/2014
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Lee, Brian Young, Johansson, Jesper Mikael, Canavor, Darren Ernest, Jezorek, Matthew Ryan
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US14/572,739
• Time in Patent Office: 672 Days
• Field of Search: 726/9
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Disclosed are various embodiments for a computing device with an integrated authentication token. The computing device includes first circuitry having a processor and a memory and providing general-purpose computing capability. The computing device also includes second circuitry configured to generate a one-time password. The first circuitry is incapable of determining the one-time password due to a hardware, communicative, and/or electrical separation, and the first and second circuitry are in a single enclosure.

Claims

1. A mobile device, comprising:

a shared display between a first circuitry and a second circuitry;

the first circuitry including a hardware processor and a memory providing general-purpose computing capability;

the second circuitry configured to generate a one-time password and render the generated one-time password upon a portion of the shared display in response to an input by a user;

wherein the first circuitry is configured to render a user interface that elicits an entry of the generated one-time password by the user;

wherein an arrangement of the user interface is based at least in part on a location of the portion of the shared display, or the location of the portion of the shared display is based at least in part on the arrangement of the user interface; and

wherein the first circuitry is incapable of determining the generated one-time password due to a hardware, communicative, and electrical separation between the first circuitry and the second circuitry, the second circuitry is electromagnetically isolated from the first circuitry via an electromagnetic shield, and the first circuitry and the second circuitry are in a single enclosure of at least one of;

plastic, metal, or glass construction.

2. The mobile device of claim 1, wherein the second circuitry includes a button on an exterior of the mobile device that, when activated, provides the input.

3. The mobile device of claim 1, wherein the first circuitry is further configured to provide display configuration information to the second circuitry via a write-only channel, and the second circuitry is further configured to render the generated one-time password based at least in part on the display configuration information.

4. A computing device, comprising:

a shared display between a first circuitry and a second circuitry;

the first circuitry including a hardware processor and a memory providing general-purpose computing capability;

the second circuitry configured to generate a one-time password and render the generated one-time password upon the shared display in response to an input by a user, wherein the first circuitry is configured to render a user interface that elicits an entry of the generated one-time password by the user; and

wherein the first circuitry is incapable of determining the one-time password due to a hardware, communicative, and electrical separation between the first circuitry and the second circuitry, and the first circuitry and the second circuitry are in a single enclosure of at least one of;

plastic, metal, or glass construction, wherein the second circuitry is electromagnetically isolated from the first circuitry via an electromagnetic shield.

5. The computing device of claim 4, wherein the second circuitry is configured to render the generated one-time password upon a predefined portion of the shared display.

6. The computing device of claim 5, wherein the at least one application is configured to render the user interface based at least in part on a location of the predefined portion of the shared display.

7. The computing device of claim 4, wherein the user interface includes a text entry component configured to receive the generated one-time password from the user.

8. The computing device of claim 4, wherein the shared display comprises a first display panel and a second display panel that overlays the first display panel, the first circuitry is configured to render the user interface upon the first display panel, and the second circuitry is configured to render the generated one-time password upon the second display panel.

9. The computing device of claim 4, wherein an electrical trace of the second circuitry is separated from an electrical trace from the first circuitry such that a signal generated by the second circuitry is not readable by the first circuitry.

10. The computing device of claim 4, further comprising a sensor, wherein the second circuitry is configured to render the generated one-time password upon the shared display in response to activation of the sensor by the user.

11. The computing device of claim 4, further comprising a write-only channel that enables the first circuitry to provide data to the second circuitry without being able to read the generated one-time password from the second circuitry.

12. The computing device of claim 11, wherein the first circuitry is configured to execute logic that writes display configuration data for the second circuitry via the write-only channel.

13. The computing device of claim 4, wherein the first circuitry and the second circuitry are powered by distinct power sources.

14. The computing device of claim 13, wherein the second circuitry is coupled to the display by way of an optical waveguide.

15. A method, comprising:

rendering, by first circuitry of a computing device, a user interface configured to elicit text from a user upon a shared display of the computing device;

generating, by second circuitry of the computing device, a one-time password;

rendering, by the second circuitry, the generated one-time password upon a portion of the shared display in response to an input by the user, wherein the user interface configured by the first circuitry elicits an entry of the generated one-time password by the user; and

wherein the first circuitry is incapable of determining the generated one-time password from the second circuitry due to a hardware, communicative, and electrical separation between the first circuitry and the second circuitry, and the first circuitry and the second circuitry are in a single enclosure of at least one of;

plastic, metal, or glass construction, wherein the second circuitry is electromagnetically isolated from the first circuitry via an electromagnetic shield.

16. The method of claim 15, wherein the shared display has a first input connection and a second input connection that are separate, the first circuitry is coupled to the first input connection, and the second circuitry is coupled to the second input connection.

17. The method of claim 15, further comprising arranging, by the first circuitry, the user interface upon the shared display based at least in part on a location of the portion of the shared display.

18. The method of claim 15, further comprising:

reading, by the second circuitry, a display configuration value from a memory; and

formatting, by the second circuitry, a visual presentation of the generated one-time password based at least in part on the display configuration value.

19. The method of claim 15, further comprising:

determining, by the second circuitry, that the user has activated a sensor; and

wherein the second circuitry renders the generated one-time password upon the portion of the shared display in response to determining that the user has activated the sensor.

20. The method of claim 15, wherein the shared display comprises a first display panel and a second display panel that overlays the first display panel, the first circuitry is configured to render the user interface upon the first display panel, and the second circuitry is configured to render the generated one-time password upon the second display panel.