Securely providing a password using an internet of things (IOT) system

Patent metadata

Field	Value
Publication number	US-10455418-B2
Application number	US-201715498913-A
Country	US
Kind code	B2
Filing date	Apr 27, 2017
Priority date	Apr 27, 2017
Publication date	Oct 22, 2019
Grant date	Oct 22, 2019

Abstract

An apparatus and method are described for securely providing a User ID and/or password to an IoT device. For example, one embodiment of a method comprises: establishing a first communication channel between a user's mobile device and an Internet of Things (IoT) service; establishing a second communication channel between the IoT service and an IoT device, the IoT device having been previously registered with the IoT service; establishing a third communication channel between the IoT device and a computer on which the user is connecting to the online service; receiving at the IoT service a request from the mobile device to transmit a User ID and/or password for a particular online service to the IoT device; responsively encrypting the User ID and/or password to generate an encrypted User ID and/or password and transmitting the encrypted User ID and/or password to the IoT device; decrypting the encrypted User ID and/or password at the IoT device; and providing the User ID and/or password by the IoT device to the computer over the third communication channel, the computer causing the User ID and/or password to be provided to the online service to authenticate the user.

First claim

What is claimed is:

1. A method comprising:
establishing a first communication channel between a user's mobile device and an Internet of Things (IoT) service;
establishing a second communication channel between the IoT service and an IoT device, the IoT device having been previously registered with the IoT service;
establishing a third communication channel between the IoT device and a computer on which the user is connecting to an online service;
receiving at the IoT service a request from the mobile device to transmit a User ID and/or password for a particular online service to the IoT device;
responsively encrypting the User ID and/or password to generate an encrypted User ID and/or password and transmitting the encrypted User ID and/or password to the IoT device;
decrypting the encrypted User ID and/or password at the IoT device; and
providing the User ID and/or password by the IoT device to the computer over the third communication channel, the computer causing the User ID and/or password to be provided to the online service to authenticate the user.

2. The method as in claim 1 wherein the IoT device comprises a Universal Serial Bus (USB) interface to be coupled to a USB port on the computer to form the third communication channel between the IoT device and the computer.

3. The method as in claim 2 wherein the mobile device comprises an app to connect to a password management service on the IoT service, therein the app transmits the request to the password management service to send the User ID and/or password to the IoT device.

4. The method as in claim 3 wherein the user identifies the online service via a graphical user interface of the app.

5. The method as in claim 4 wherein the password management service stores a plurality of different User ID/password combinations for a variety of different online services.

6. The method as in claim 2 wherein the IoT device is configured to identify itself as a keyboard to the computer, the IoT device to transmit the User ID and/or password over the USB interface as alphanumeric characters representative of input from a keyboard.

7. The method as in claim 1 wherein the IoT device establishes the second communication channel through an IoT hub, the user's mobile device, the computer, or via an independent Internet connection formed by the IoT device.

8. The method as in claim 1 wherein the computer executes a browser to connect to a web page of the online service, wherein a plugin or app executed with the browser causes the User ID and/or password to be entered in one or more fields of the web page.

9. An apparatus comprising:
an Internet of Things (IoT) service to establish a first communication channel with a user's mobile device;
an IoT device usable for providing a User ID and password to a computer, the IoT device to establish a second communication channel with the IoT service, the IoT device having been previously registered with the IoT service;
the IoT device to establish a third communication channel with the computer;
the IoT service receiving a request from the mobile device to transmit a User ID and/or password for a particular online service to the IoT device;
the IoT service responsively encrypting the User ID and/or password to generate an encrypted User ID and/or password and transmitting the encrypted User ID and/or password to the IoT device;
the IoT device decrypting the encrypted User ID and/or password; and
the IoT device to provide the User ID and/or password to the computer over the third communication channel, the computer causing the User ID and/or password to be provided to the online service to authenticate the user.

10. The apparatus as in claim 9 wherein the IoT device comprises a Universal Serial Bus (USB) interface to be coupled to a USB port on the computer to form the third communication channel between the IoT device and the computer.

11. The apparatus as in claim 10 wherein the mobile device comprises an app to connect to a password management service on the IoT service, therein the app transmits the request to the password management service to send the User ID and/or password to the IoT device.

12. The apparatus as in claim 11 wherein the user identifies the online service via a graphical user interface of the app.

13. The apparatus as in claim 12 wherein the password management service stores a plurality of different User ID/password combinations for a variety of different online services.

14. The apparatus as in claim 10 wherein the IoT device is configured to identify itself as a keyboard to the computer, the IoT device to transmit the User ID and/or password over the USB interface as alphanumeric characters representative of input from a keyboard.

15. The apparatus as in claim 9 wherein the IoT device establishes the second communication channel through an IoT hub, the user's mobile device, the computer, or via an independent Internet connection formed by the IoT device.

16. The apparatus as in claim 9 wherein the computer executes a browser to connect to a web page of the online service, wherein a plugin or app executed with the browser causes the User ID and/or password to be entered in one or more fields of the web page.

17. A non-transitory machine-readable medium having program code stored thereon which, when executed by one or more machines, cause the machines to perform the operations of:
establishing a first communication channel between a user's mobile device and an Internet of Things (IoT) service;
establishing a second communication channel between the IoT service and an IoT device, the IoT device having been previously registered with the IoT service;
establishing a third communication channel between the IoT device and a computer on which the user is connecting to an online service;
receiving at the IoT service a request from the mobile device to transmit a User ID and/or password for a particular online service to the IoT device;
responsively encrypting the User ID and/or password to generate an encrypted User ID and/or password and transmitting the encrypted User ID and/or password to the IoT device;
decrypting the encrypted User ID and/or password at the IoT device; and
providing the User ID and/or password by the IoT device to the computer over the third communication channel, the computer causing the User ID and/or password to be provided to the online service to authenticate the user.

18. The non-transitory machine-readable medium as in claim 17 wherein the IoT device comprises a Universal Serial Bus (USB) interface to be coupled to a USB port on the computer to form the third communication channel between the IoT device and the computer.

19. The non-transitory machine-readable medium as in claim 18 wherein the mobile device comprises an app to connect to a password management service on the IoT service, therein the app transmits the request to the password management service to send the User ID and/or password to the IoT device.

20. The non-transitory machine-readable medium as in claim 19 wherein the user identifies the online service via a graphical user interface of the app.

21. The non-transitory machine-readable medium as in claim 20 wherein the password management service stores a plurality of different User ID/password combinations for a variety of different online services.

22. The non-transitory machine-readable medium as in claim 18 wherein the IoT device is configured to identify itself as a keyboard to the computer, the IoT

Assignees

• Afero Inc

Inventors

• Bartlett Scott
• Zimmerman Scott
• Britt Joe

Classifications

• H04W4/38 Primary

  for collecting sensor information · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W88/04

  adapted for relaying to or from another terminal or user · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04W4/70

  Services for machine-to-machine communication [M2M] or machine type communication [MTC] · CPC title