IP Library Granted Patent US 9,762,567
Granted Patent B2
US 9,762,567 · App. 14/770,252 · Granted Sep 12, 2017

Wireless communication of a user identifier and encrypted time-sensitive data

Inventors: Chris R. Gunning (Boise, ID); Thomas S Gale (Boise, ID); Shivaun Albright (Rocklin, CA)
Assignee: Hewlett-Packard Development Company, L.P.
H04L63/0807H04L63/0492H04L63/062H04L63/083H04L63/0853H04W4/008H04W12/06
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,762,567
App. No.
14/770,252
Granted
Sep 12, 2017
Kind
B2
Abstract

Examples disclosed herein relate to wireless communication of a user identifier and encrypted time-sensitive data. Examples further include wireless communication of an authentication token including a user identifier and encrypted time-sensitive data. Examples further include interaction with a remote authentication service. Examples further include utilization of near field communication (NFC).

Claims (54)

1. A non-transitory machine-readable storage medium encoded with instructions executable by a processing resource of a mobile device to:

register a user identifier with a remote authentication service used by a computing device for user authentication;

in response to a determination that the mobile device is within near field communication (NFC) proximity of the computing device, acquire current time-sensitive data from a periodically different time-sensitive data source of the mobile device, wherein the current time-sensitive data is valid for authentication with the remote authentication service for a short expiration time;

encrypt the current time-sensitive data such that it is decryptable using decryption information that the remote authentication service has associated with the registered user identifier; and

wirelessly provide to the computing device an authentication token including the user identifier and the encrypted time-sensitive data.

2. The storage medium of claim 1 , wherein the instructions to wirelessly provide comprise instructions to:

provide the authentication token to the computing device via NFC.

3. The storage medium of claim 2 , wherein the instructions to wirelessly provide further comprise instructions to:

provide the authentication token, via NFC, to an NFC interface of the computing device while the NFC interface is in a tag emulation mode.

4. The storage medium of claim 1 , wherein the instructions to wirelessly provide comprise instructions to:

acquire, from the computing device via a first type of wireless communication, at least one connection attribute for second type of wireless communication having a greater range than the first type, wherein the first type comprises NFC;

establish, based on the at least connection attribute, a connection of the second type of wireless communication between the mobile device and the computing device; and

wirelessly provide the authentication token to the computing device via the second type of wireless communication.

5. The storage medium of claim 1 , wherein:

the instructions to provide further comprise instructions to acquire a personal identification number (PIN); and

wherein the authentication token further comprises the PIN.

6. The storage medium of claim 1 , where

the instructions to register further comprise instructions to provide the decryption key to the remote authentication service;

the computing device is a printing device; and

the time-sensitive data is selected from one of the following: a timestamp and a counter value.

7. A computing device comprising:

an acquisition engine to acquire from a mobile device, via near field communication (NFC), an NFC message including a message type identifier and an authentication token comprising a user identifier and encrypted time-sensitive data, wherein the encrypted time-sensitive data is valid for authentication with the remote authentication service for a short expiration time;

a determination engine to determine, based on the message type identifier, that the NFC message includes information to be provided to a remote authentication service;

a provision engine to, in response to the determination, provide the authentication token to the remote authentication service; and

an access engine to, in response to receipt of an indication that the user identifier has been authenticated by the remote authentication service based on the user identifier and the encrypted time-sensitive data, provide user access to at least one functionality of the computing device.

8. The computing device of claim 7 , wherein;

the acquisition engine is to acquire the NFC message via a bi-directional NFC connection established between the computing device and the mobile device; and

the indication received from the remote authentication service.

9. The computing device of claim 7 , wherein:

the computing device comprises a printing device; and

the access engine is further to receive information specifying at least one functionality of the printing device that the user is authorized to utilize;

wherein the access engine is to grant user access to each of the at least one functionality specified, in response to the receipt of the indication that the user has been authenticated and the information specifying the at least one functionality.

10. The computing device of claim 7 , wherein the indication comprises:

a Security Assertion Markup Language (SAML) token associated with the user.

11. The computing device of claim 7 , further comprising:

a display;

wherein the access engine is to, in response to the receipt of the indication that the user has been authenticated, output on the display a notice signifying that the user has been authenticated; and

wherein the access engine is to, in response to receipt of an indication that the user has not been authenticated by the remote authentication service based on the user identifier and the encrypted time-sensitive data, output on the display a notice signifying that the user has not been authenticated.

12. A method comprising:

registering user information with a remote authentication service used by a computing device for user authentication, the user information including a user identifier and decryption information associated with the user identifier;

determining that the mobile device is within near field communication (NFC) proximity of the computing device;

in response to the determination, acquiring current time-sensitive data from a periodically different time-sensitive data source of the mobile device, wherein the current time-sensitive data is valid for authentication with the remote authentication service for a short expiration time;

encrypting, with a processing resource of a mobile device, the current time-sensitive data such that it is decryptable using the decryption information associated with the user identifier; and

in response to the determination, wirelessly providing an authentication token to the computing device, the authentication token including the user identifier and the encrypted time-sensitive data.

13. The method of claim 12 , further comprising:

in response to the determination, launching an authentication application of the mobile device, wherein the authentication application performs the wirelessly providing the authentication token to the computing device.

14. The method of claim 13 , further comprising:

receiving, from the computing device via a first type of wireless communication, at least one connection attribute for a second type of wireless communication having a greater range than the first type, wherein the first type comprises NFC;

establishing, between the mobile device and the computing device, a connection of the second type of wireless communication utilizing the at least one connection attribute; and

wherein the wirelessly providing the authentication token comprises wirelessly providing the authentication token from the mobile device to the computing device via the second type of wireless communication.

15. The method of claim 14 , wherein computing device comprises a printing device, the method further comprising:

receiving, at the mobile device, an indication that a user associated with the user information has been authenticated by the remote authentication service;

receiving, from the printing device, remote user interface (UI) information; and

displaying, at the mobile device, a remote UI for the printing device based on the remote UI information.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 6, 2015
From: GUNNING, CHRIS R.; GALE, THOMAS S.; ALBRIGHT, SHIVAUN
To: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
Reel/Frame 036739/0402 →
Continuity (1)
Related Publication 20160014112A1 · Jan 14, 2016