# US 10,375,062 B2 · Computer-implemented method for mobile authentication and corresponding computer system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,062 B2 - Document ID: US10375062B2 - Status: Granted - Kind: B2 - Application number: 15/629,300 - Filed: 2017-06-21 - Published: 2017-10-12 - Granted: 2019-08-06 - Earliest claimed: 2011-10-06 - Assignees: Sap SE - Applicants: Sap SE - Inventors: Philipp Thun - Web page: https://patentgrep.com/patent/US10375062B2 ## CPC - G06F 21/43: wireless channels - G06F 21/42: using separate channels for security data - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract In one embodiment of the present invention a computerized method includes receiving at a personal-mobile device a first communication, which includes information for requesting user verification for logging into an account of a user, via a computing device. The account is with a service provided by an application server. The method includes starting a personal-authentication application on the personal-mobile device in response to receiving the first communication, and receiving in the personal-authentication application a user verification for confirming logging into the account. The method includes logging into the account via the computing device based on receipt of the user verification. Embodiments of the present invention provide enhanced security for logging into an account that a user may have with a service by providing that a personal-mobile device, such as a mobile telephone, which is personal to a user, is configured as a security token for login to the account. ## Claims ### Claim 1 A non-transitory computer-readable medium storing a program executable by one or more processors of a first computing device, the program comprising sets of instructions for: receiving directly from a second computing device an authentication request to authenticate a user associated with a first account associated with a service hosted on the second computing device, wherein the authentication request is associated with a login request to log into the first account that the second computing device receives from a third computing device, wherein the authentication request includes a user identification associated with a second account managed by and stored on the first computing device; sending to a fourth computing device a request for verification of the second account in order to authenticate the identity of the user; receiving from the fourth computing device verification information for verifying the second account, wherein the verification information is based on information that the fourth computing device reads from a personal smart card that is separate from the fourth computing device, the information configured for authenticating the user associated with the account; and sending directly to the second computing device authentication information based on the verification information in order for the second computing device to use the authentication information to log the user into the first account associated with the service. ### Claim 2 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the program further comprises a set of instructions for, during a registration process for the fourth computing device, receiving from the fourth computing device registration information associated with the user. ### Claim 3 (depends on 2) The non-transitory computer-readable medium of claim 2, wherein the program further comprises sets of instructions for: determining that the verification information matches the registration information associated with the user; based on the determination, including information in the authentication information indicating that the second computing device is allowed to log the user into the first account associated with the service. ### Claim 4 (depends on 2) The non-transitory computer-readable medium of claim 2, wherein the program further comprises sets of instructions for: determining that the verification information does not match the registration information associated with the user; in response to the determination, including information in the authentication information indicating that the second computing device is not allowed to log the user into the first account associated with the service. ### Claim 5 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the verification information is received from the fourth computing device via a fifth computing device to which the fourth computing device sends the verification information and a request to send the verification information to the first computing device. ### Claim 6 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein sending the request to the fourth computing device comprises sending a fifth computing device directions to send the fourth computing device the request. ### Claim 7 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the information is a first information, wherein the verification information is further based on a second information from the fourth computing device, the first and second information configured for authenticating the user associated with the account. ### Claim 8 A system comprising: one or more processors of a first computing device; a non-transitory computer-readable medium storing a program executable by the one or more processors, the program comprising sets of instructions for: receiving directly from a second computing device an authentication request to authenticate a user associated with a first account associated with a service hosted on the second computing device, wherein the authentication request is associated with a login request to log into the first account that the second computing device receives from a third computing device, wherein the authentication request includes a user identification associated with a second account managed by and stored on the first computing device; sending to a fourth computing device a request for verification of the second account in order to authenticate the identity of the user; receiving from the fourth computing device verification information for verifying the second account, wherein the verification information is based on information that the fourth computing device reads from a personal smart card that is separate from the fourth computing device, the information configured for authenticating the user associated with the account; and sending directly to the second computing device authentication information based on the verification information in order for the second computing device to use the authentication information to log a user into the first account associated with the service. ### Claim 9 (depends on 8) The system of claim 8, wherein the program further comprises a set of instructions for, during a registration process for the fourth computing device, receiving from the fourth computing device registration information associated with the user. ### Claim 10 (depends on 9) The system of claim 9, wherein the program further comprises sets of instructions for: determining that the verification information matches the registration information associated with the user; based on the determination, including information in the authentication information indicating that the second computing device is allowed to log the user into the first account associated with the service. ### Claim 11 (depends on 9) The system of claim 9, wherein the program further comprises sets of instructions for: determining that the verification information does not match the registration information associated with the user; in response to the determination, including information in the authentication information indicating that the second computing device is not allowed to log the user into the first account associated with the service. ### Claim 12 (depends on 8) The system of claim 8, wherein the verification information is received from the fourth computing device via a fifth computing device to which the fourth computing device sends the verification information and a request to send the verification information to the first computing device. ### Claim 13 (depends on 8) The system of claim 8, wherein sending the request to the fourth computing device comprises sending a fifth computing device directions to send the fourth computing device the request. ### Claim 14 (depends on 8) The system of claim 8, wherein the information is a first information, wherein the verification information is further based on a second information from the fourth computing device, the first and second information configured for authenticating the user associated with the account. ### Claim 15 For a first computing device, a method comprising: receiving directly from a second computing device an authentication request to authenticate a user associated with a first account associated with a service hosted on the second computing device, wherein the authentication request is associated with a login request to log into the first account that the second computing device receives from a third computing device, wherein the authentication request includes a user identification associated with a second account managed by and stored on the first computing device; sending to a fourth computing device a request for verification of the second account in order to authenticate the identity of the user; receiving from the fourth computing device verification information associated with the request, wherein the verification information is based on information that the fourth computing device reads from a personal smart card that is separate from the fourth computing device, the information configured for authenticating the user associated with the account; and sending directly to the second computing device authentication information associated with logging into the account associated with the service based on the verification information in order for the second computing device to use the authentication information to log a user of the third device into the account associated with the service. ### Claim 16 (depends on 15) The method of claim 15 further comprising, during a registration process for the fourth computing device, receiving from the fourth computing device registration information associated with the user. ### Claim 17 (depends on 16) The method of claim 16 further comprising: determining that the verification information matches the registration information associated with the user; based on the determination, including information in the authentication information indicating that the second computing device is allowed to log the user into the first account associated with the service. ### Claim 18 (depends on 16) The method of claim 16 further comprising: determining that the verification information does not match the registration information associated with the user; in response to the determination, including information in the authentication information indicating that the second computing device is not allowed to log the user into the first account associated with the service. ### Claim 19 (depends on 15) The method of claim 15, wherein the verification information is received from the fourth computing device via a fifth computing device to which the fourth computing device sends the verification information and a request to send the verification information to the first computing device. ### Claim 20 (depends on 15) The method of claim 15, wherein the information is a first information, wherein the verification information is further based on a second information from the fourth computing device, the first and second information configured for authenticating the user associated with the account.