Computing device with integrated authentication token

Patent metadata

Field	Value
Publication number	US-9787673-B2
Application number	US-201615293534-A
Country	US
Kind code	B2
Filing date	Oct 14, 2016
Priority date	Dec 16, 2014
Publication date	Oct 10, 2017
Grant date	Oct 10, 2017

Abstract

Disclosed are various embodiments for a computing device with an integrated authentication token. The computing device includes first circuitry having a processor and a memory and providing general-purpose computing capability. The computing device also includes second circuitry configured to generate a one-time password. The first circuitry is incapable of determining the one-time password due to a separation from the second circuitry, and the first and second circuitry may be in a single enclosure.

First claim

Therefore, the following is claimed:

1. A computing device, comprising:
a first display;
a second display;
first circuitry including a hardware processor and a memory providing general-purpose computing capability;
second circuitry configured to generate a one-time password and render the generated one-time password upon the second display in response to a predetermined condition, wherein the first circuitry is configured to render a user interface upon the first display that elicits a user entry of the generated one-time password into the first display which has a shared display with the second display of the second circuitry; and
wherein the first circuitry is incapable of determining the generated one-time password due to a separation between the first circuitry and the second circuitry, and the first circuitry and the second circuitry are in a single enclosure.

2. The computing device of claim 1 , wherein the predetermined condition comprises detecting via an accelerometer a predefined pattern of motion.

3. The computing device of claim 1 , wherein the predetermined condition comprises detecting a user activation of a capacitive button.

4. The computing device of claim 1 , wherein the predetermined condition comprises detecting a rendering of the user interface that elicits the user entry of the generated one-time password on the first display.

5. The computing device of claim 1 , wherein the second display is configured to render a plurality of alphanumeric characters.

6. The computing device of claim 1 , wherein the second display is configured to generate the one-time password based at least in part on an initialization vector and timing information.

7. The computing device of claim 1 , wherein the single enclosure is of at least one of: plastic, metal, or glass construction.

8. The computing device of claim 1 , wherein the second circuitry is electromagnetically isolated from the first circuitry via an electromagnetic shield.

9. The computing device of claim 1 , further comprising third circuitry configured to generate electromagnetic interference that obfuscates electromagnetic fields generated by the second circuitry.

10. The computing device of claim 1 , wherein the first circuitry and the second circuitry are powered by distinct power sources.

11. A computing device, comprising:
a first display;
a second display;
first circuitry, configured to render a user interface upon the first display, including a hardware processor and a memory providing general-purpose computing capability;
second circuitry configured to generate a one-time password and render the generated one-time password upon the second display in response to detecting that the user interface is shown on the first display to elicit a user entry of the generated one-time password into the first display which has a shared display with the second display of the second circuitry; and
wherein the first circuitry is incapable of determining the generated one-time password due to a separation between the first circuitry and the second circuitry, and the first display and the second display are in a single enclosure.

12. The computing device of claim 11 , wherein the user interface is a predetermined user interface that elicits the user entry of the generated one-time password.

13. The computing device of claim 11 , wherein the first circuitry and the second circuitry are in the single enclosure.

14. The computing device of claim 11 , wherein the first circuitry and the second circuitry are individually coupled to a shared power source via isolation circuitry.

15. A method, comprising:
rendering, by first circuitry of a computing device, a user interface configured to elicit textual input upon a first display of the computing device;
generating, by second circuitry of the computing device, a one-time password;
rendering, by the second circuitry, the generated one-time password upon a second display of the computing device, wherein the user interface of the first display elicits a user entry of the generated one-time password into the first display which has a shared display with the second display of the second circuitry; and
wherein the first circuitry is incapable of determining the generated one-time password from the second circuitry due to a separation between the first circuitry and the second circuitry, and the first circuitry and the second circuitry are in a single enclosure.

16. The method of claim 15 , wherein generating the one-time password further comprises generating, by second circuitry of the computing device, the one-time password based at least in part on an initialization vector stored in the second circuitry and timing information generated by a clock internal to the second circuitry.

17. The method of claim 15 , further comprising regenerating, by the second circuitry, the one-time password at a predefined interval.

18. The method of claim 15 , wherein the second circuitry is electromagnetically isolated from the first circuitry via an electromagnetic shield.

19. The method of claim 15 , wherein the first display and the second display are in the single enclosure.

20. The method of claim 15 , further comprising generating, by third circuitry of the computing device, electromagnetic interference that obfuscates electromagnetic fields generated by the second circuitry.

Assignees

• Amazon Tech Inc

Inventors

• Johansson Jesper Mikael
• Canavor Darren Ernest
• Jezorek Matthew Ryan
• Lee Brian Young

Classifications

• G06F21/31

  User authentication · CPC title

• H04L63/0838 Primary

  using one-time-passwords · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W12/06

  Authentication · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title