Method and apparatus for obtaining multiple user credentials
A method for a system includes forming within an app running upon a user smart-device, an ephemeral ID having data associated with a server and anonymous data, outputting the ephemeral ID to a first receiver associated with a first computer and to a second receiver associated with a second computer system separate from the first, receiving from the first receiver an identifier and a nonce, providing the identifier and the nonce to the server, receiving from the server a token associated with the first computer system authorizing access to the first computer system but not the second computer system by the user smart-device, storing the token for facilitated authentication of the user smart-device, and providing the token to the first receiver.
1. A method for a system comprising:
forming, within an app running upon a smart-device associated with a user, an ephemeral ID signal, wherein the ephemeral ID signal comprises a first data portion including data associated with a server and a second data portion including data not associated with the user;
outputting, from the app running upon the smart-device, the ephemeral ID signal to a plurality of interface devices, wherein the plurality of interface devices comprises a first interface device associated with a first computer system and a second interface device associated with a second computer system, wherein the first computer system is separate from the second computer system;
receiving, within the app running upon the smart-device from the first interface device, an identifier associated with the first computer system and a first nonce;
providing, from the app running upon the smart-device to the server, at least a portion of the identifier associated with the first computer system and the first nonce;
receiving, within the app running upon the smart-device from the server, a first token associated with the first computer system in response to the portion of the identifier associated with the first computer system and the first nonce, wherein the first token authorizes access to the first computer system by the smart-device, wherein the first token is not associated with the second computer system;
storing, within the app running upon the smart-device, the first token associated with the first computer system;
receiving, within the app running upon the smart-device from the second interface device, an identifier associated with the second computer system and a second nonce;
providing, from the app running upon the smart-device to the server, at least a portion of the identifier associated with the second computer system and the second nonce;
receiving, within the app running upon the smart-device from the server, a second token associated with the second computer system in response to the portion of the identifier associated with the second computer system and the second nonce, wherein the second token authorizes access to the second computer system by the smart-device, wherein the second token is not associated with the first computer system; and
storing, within the app running upon the smart-device, the second token associated with the second computer system.
2. The method of claim 1 wherein the data not associated with the user comprises data selected from a group consisting of: random data, pseudo random data, and data selected from a predetermined set of data.
3. The method of claim 1 further comprising verifying, in the first interface device, that the ephemeral ID signal is verified in response to the first data portion.
4. The method of claim 1 wherein the first token comprises payload data including data associated with the user and the first computer system.
5. The method of claim 1 further comprising providing, from the app running upon the smart-device to the first interface device, the first token associated with the first computer system.
6. The method of claim 1 wherein the second token comprises data associated with the user and the second computer system.
7. The method of claim 1
wherein the outputting, from the app running upon the smart-device, the ephemeral ID signal to a plurality of interface devices, comprises outputting the ephemeral ID via short-range communications channel;
wherein the communications channel comprises Bluetooth low energy (BLE).
8. The method of claim 1
wherein the outputting, from the app running upon the smart-device, the ephemeral ID signal to a plurality of interface devices, comprises outputting the ephemeral ID via short-range communications channel;
wherein the communications channel is selected from a group consisting of: Zigbee and NFC.
9. A smart device comprising:
a processor;
a short-range transceiver coupled to the processor;
a wide-area transceiver coupled to the processor; and
a memory coupled to the processor, wherein the memory comprises a software application including code configured to be executed on the processor, wherein the application is configured to:
direct the processor to form an ephemeral ID signal, wherein the ephemeral ID signal comprises a first data portion including data associated with a server and a second data portion including data not associated with a user;
direct the processor to output the ephemeral ID signal with the short-range transceiver the ephemeral ID to a plurality of interface devices, wherein the plurality of interface devices comprises a first interface device associated with a first computer system and a second interface device associated with a second computer system, wherein the first computer system is separate from the second computer system;
direct the processor to receive with the short-range transceiver from the first interface device an identifier associated with the first computer system and a first nonce;
direct the processor to output with the wide-area transceiver to the server at least a portion of the identifier associated with the first computer system and the first nonce;
direct the processor to receive with the wide-area transceiver a first token associated with the first computer system in response to the portion of the identifier associated with the first computer system and the first nonce, wherein the first token authorizes the smart device to access the first computer system, wherein the first token is not associated with the second computer system;
direct the processor to store in the memory the first token associated with the first computer system;
direct the processor to receive with the short-range transceiver from the second interface device an identifier associated with the second computer system and a second nonce;
direct the processor to output with the wide-area transceiver to the server at least a portion of the identifier associated with the second computer system and the second nonce;
direct the processor to receive with the wide-area transceiver a second token associated with the second computer system in response to the portion of the identifier associated with the second computer system and the second nonce, wherein the second token authorizes access to the second computer system by the smart-device, wherein the second token is not associated with the first computer system; and
direct the processor to store in the memory the second token associated with the second computer system.
10. The smart device of claim 9 wherein the data not associated with the user comprises data selected from a group consisting of: random data, pseudo random data, and data selected from a predetermined set of data.
11. The smart device of claim 9 wherein the short-range transceiver comprises a Bluetooth low energy (BLE) transceiver.
12. The smart device of claim 9 wherein the wide-area transceiver is selected from a group consisting of: a WiFi transceiver, a cellular service transceiver, a 4G transceiver, a 5G transceiver.
13. The smart device of claim 9
wherein the short-range transceiver comprises a communication standard selected from a group consisting of: NFC and Zigbee; and
wherein the wide-area transceiver comprises a communication standard selected from a group consisting of: cellular, 4G and 5G.
14. The smart device of claim 9 wherein the application is configured to output with the short-range transceiver to the first interface device the first token.
15. An authorization system comprises:
a smart device configured to form an ephemeral ID signal, wherein the ephemeral ID signal comprises a first data portion including data associated with a server and a second data portion including data not associated with the user, wherein the smart device is configured to provide the ephemeral ID signal to a plurality of interface devices, wherein the plurality of interface devices comprises a first interface device associated with a first computer system and a second interface device associated with a second computer system, wherein the first computer system is separate from the second computer system;
the first interface device coupled to the smart device, wherein the first interface device is configured to scan for ephemeral ID signals in a geographic area proximate to the first interface device; wherein the first interface device is configured to receive the ephemeral ID signal, wherein the first interface device is configured to authenticate the ephemeral ID signal, and wherein the first interface device is configured to provide a first identifier and a first nonce to the smart device;
the second interface device coupled to the smart device, wherein the second interface device is configured to scan for ephemeral ID signals in a geographic area proximate to the second interface device; wherein the second interface device is configure to receive the ephemeral ID signal, wherein the second interface device is configured to authenticate the ephemeral ID signal, and wherein the second interface device is configured to provide a second identifier and a second nonce to the smart device;
wherein the smart device is configured to receive the first identifier and the first nonce from the first interface device, wherein the smart device is configured to provide the first identifier and the first nonce to the server, wherein the smart device is configured to receive the second identifier and the second nonce from the second interface device, and wherein the smart device is configured to provide the second identifier and the second nonce to the server; and
a server coupled to the smart device, wherein the server is configured to receive the first identifier and the first nonce from the smart device, wherein the server is configured to form a first token associated with the first interface device in response to the first identifier and the first nonce, wherein the server is configured to provide the first token to the smart device, wherein the first token authorizes the smart device to access the first computer system, wherein the first token is not associated with the second computer system, wherein the server is configured to receive the second identifier and the second nonce from the smart device, wherein the server is configured to form a second token associated with the second interface device in response to the second identifier and the second nonce, and wherein the server is configured to provide the second token to the smart device, wherein the second token authorizes access to the second computer system by the smart-device, wherein the second token is not associated with the first computer system.
16. The authorization system of claim 15
wherein the first interface device comprises a short-range communications channel configured to provide the first identifier and the first nonce to the smart device;
wherein the short-range communications channel is selected from a group consisting of: a Bluetooth low energy (BLE) transceiver, a Zigbee transceiver and an NFC transceiver.
17. The authorization system of claim 15
wherein the smart device is configured to output to the first interface device the first token; and
wherein the smart device is configured to output to the second interface device the second token.
18. The authorization system of claim 15
wherein the server comprises a wide-area communications protocol configure to provide the first token to the smart device; and
wherein the wide-area communications protocol is selected from a group consisting of: WiFi, cellular, 4G, 5G and GSM.