# US 10,313,328 B2 · Method and system for establishing trusted communication using a security device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,328 B2 - Document ID: US10313328B2 - Status: Granted - Kind: B2 - Application number: 15/676,872 - Filed: 2017-08-14 - Published: 2018-06-28 - Granted: 2019-06-04 - Earliest claimed: 2009-02-03 - Assignees: Inbay Technologies Inc. - Applicants: Inbay Technologies Inc. - Inventors: Nicolas Johannes Sebastian Bettenburg; Randy Kuang - Web page: https://patentgrep.com/patent/US10313328B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - G06F 16/9554: {by using bar codes} - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F 21/36: by graphic or iconic representation - G06F 21/42: using separate channels for security data - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06K 7/1417: {2D bar codes} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0838: {using one-time-passwords} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - G06F 2221/2115: Third party - G06F 2221/2117: User registration - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - H04L 63/0281: {Proxies} - H04L 63/105: {Multiple levels of security} - H04L 2463/082: applying multi-factor authentication - H04W 12/77: Graphical identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Method and system for secure access from a security device at a local network location to a remote network location are disclosed. At the security device having a unique identifier (UID), processor, and memory, a security software is obtained from a remote network location, the security software obtaining a personal identification number (PIN) of a user, and the UID of the security device. The PIN, the UID and the private security software are forwarded to the remote network location for generating a credential code, including encrypting the credential code. At the security device, the credential code is obtained from the remote network location, and authenticity of the PIN and the UID is verified, without communicating over a network, including decrypting the credential code. Upon verifying the authenticity of the PIN and the UID, access credentials to the remote network location are retrieved. ## Claims ### Claim 1 A method for providing a secure access from a security device at a local network location to a remote network location, the method comprising: at the security device, having a unique identifier (UID), a processor, and a memory: obtaining, from a remote network location, a security software, and causing the security software to obtain a personal identification number (PIN) of a user, and the UID of the security device; forwarding the PIN, the UID and the security software to the remote network location for generating a credential code using the PIN, the UID and the security software, comprising encrypting the credential code; at the security device, obtaining the credential code from the remote network location, and verifying an authenticity of the PIN and the UID, without communicating over a network, comprising decrypting the credential code; retrieving access credentials to the remote network location upon verifying the authenticity of the PIN and the UID; and communicating to the remote network location using the retrieved access credentials. ### Claim 2 (depends on 1) The method of claim 1 wherein the communicating to the remote network location comprises: obtaining a Quick Response, QR, code from the remote location; and scanning the QR code into the security device. ### Claim 3 (depends on 1) The method of claim 1 wherein the communicating to the remote network application comprises authorizing access to a remote server. ### Claim 4 (depends on 3) The method of claim 3 wherein the authorizing access comprises authorizing access to an email server. ### Claim 5 (depends on 1) The method of claim 1, comprising choosing the security device as one of the following: a computing device, comprising a processor, at the local network location; or a portable device having a memory, the portable device being different from the computing device, and being operably coupled to the computing device. ### Claim 6 (depends on 1) The method of claim 1, comprising choosing a mobile wireless device as the security device. ### Claim 7 (depends on 1) The method of claim 1, wherein the remote network location is a third party location. ### Claim 8 (depends on 1) The method of claim 1, wherein the communicating comprises forwarding the access credentials to the remote network location for authenticating with the remote network location. ### Claim 9 A system for providing a secure access from a local network location to a remote network location, the system comprising: a remote server computer at the remote network location; and a security device, having a unique identifier (UID), a processor, and a memory having computer readable instructions stored thereon, causing the processor to: obtain, from the remote network location, a security software, and causing the security software to obtain a personal identification number (PIN) of a user, and the UID of the security device; forward the PIN, the UID and the security software to the remote network location for generating a credential code using the PIN, the UID and the security software, comprising encrypting the credential code; at the security device, obtain the credential code from the remote network location, and verify an authenticity of the PIN and the UID, without communicating over a network, comprising decrypting the credential code; retrieve access credentials to the remote network location upon verifying the authenticity of the PIN and the UID; and communicate to the remote network location using the retrieved access credentials. ### Claim 10 (depends on 9) The system of claim 9 wherein the computer readable instructions causing to communicate further comprise computer readable instructions causing the processor to: obtain a Quick Response, QR, code from the remote location; and scan the QR code into the security device. ### Claim 11 (depends on 9) The system of claim 9 wherein the computer readable instructions causing to communicate further comprise computer readable instructions to authorize access to a remote server. ### Claim 12 (depends on 9) The system of claim 9 wherein the computer readable instructions to authorize comprise computer readable instructions to authorize access to an email server. ### Claim 13 (depends on 9) The system of claim 9, wherein the security device is one of the following: a computing device, comprising a processor, at the local network location; or a portable device having a memory, the portable device being different from the computing device, and being operably coupled to the computing device. ### Claim 14 (depends on 9) The system of claim 9, wherein the security device is a mobile wireless device. ### Claim 15 (depends on 9) The system of claim 9, wherein the computer readable instructions to communicate comprise computer readable instructions to forward the access credentials to the remote network location for authenticating with the remote network location. ### Claim 16 An apparatus for providing a secure access from a local network location to a remote network location, the apparatus comprising: a security device, having a unique identifier (UID), a processor, and a memory having computer readable instructions stored thereon, causing the processor to: obtain, from the remote network location, a security software, and causing the security software to obtain a personal identification number (PIN) of a user, and the UID of the security device; forward the PIN, the UID and the security software to the remote network location for generating a credential code using the PIN, the UID and the security software, comprising encrypting the credential code; at the security device, obtain the credential code from the remote network location, and verify an authenticity of the PIN and the UID, without communicating over a network, comprising decrypting the credential code; retrieve access credentials to the remote network location upon verifying the authenticity of the PIN and the UID; and communicate to the remote network location using the retrieved access credentials. ### Claim 17 (depends on 16) The apparatus of claim 16 wherein the computer readable instructions causing to communicate further comprise computer readable instructions causing the processor to: obtain a Quick Response, QR, code from the remote location; and scan the QR code into the security device. ### Claim 18 (depends on 16) The apparatus of claim 16 wherein the computer readable instructions causing to communicate further comprise computer readable instructions to authorize access to a remote server. ### Claim 19 (depends on 16) The apparatus of claim 16, wherein the security device is one of the following: a computing device, comprising a processor, at the local network location; or a portable device having a memory, the portable device being different from the computing device, and being operably coupled to the computing device. ### Claim 20 (depends on 16) The apparatus of claim 16, wherein the security device is a mobile wireless device.