# US 10,769,264 B2 · Systems and methods for authentication via bluetooth device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,769,264 B2 - Document ID: US10769264B2 - Status: Granted - Kind: B2 - Application number: 16/357,027 - Filed: 2019-03-18 - Published: 2019-07-11 - Granted: 2020-09-08 - Earliest claimed: 2014-06-24 - Assignees: Paypal, Inc. - Applicants: Paypal, Inc. - Inventors: Venkatesh Gnanasekaran - Web page: https://patentgrep.com/patent/US10769264B2 ## CPC - G06F 21/35: communicating wirelessly - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 12/06: Authentication - H04W 12/50: Secure pairing of devices - H04W 84/18: Self-organising networks, e.g. ad-hoc networks or sensor networks - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system and/or method is provided to implement authentication for a user device, without having to enter authentication credentials. Based on the presence of at least two paired short-range communication devices near the user device. In an example, a user's Bluetooth device, such as a smart phone, may be registered to be used for automatic authentication for an online user account. When the user is attempting to log onto the online user account at a user device, such as a laptop, the user device may detect that the user's Bluetooth device is in proximity to the user device and is paired to the user device and thus allow the user to be logged into the online user account at the user device automatically. Thus, the user may be logged into the online user account seamlessly without requiring the user to input credentials, such as user name and/or password. ## Claims ### Claim 1 A system comprising: a non-transitory memory; and one or more hardware processors coupled to the non-transitory memory and configured to execute instructions to cause the system to perform operations comprising: receiving an authentication request; sending, in response to receiving the authentication request, a session identifier to a user device; obtaining a first decrypted session identifier associated with a first communication device and a second decrypted session identifier associated with a second communication device; determining that the session identifier corresponds to each of the first decrypted session identifier and the second decrypted session identifier; determining that the first communication device is within a defined proximity of the user device and is paired with the user device based, at least in part, on the first decrypted session identifier corresponding to the session identifier; determining that the second communication device is within the defined proximity of the user device and is paired with the user device based, at least in part, on the second decrypted session identifier corresponding to the session identifier; and in response to the determining that both the first and second communication devices are within the defined proximity of the user device and paired with the user device, authenticating access to an account of a user automatically without entry of credentials of the account by the user or by either of the first or second communication device. ### Claim 2 (depends on 1) The system of claim 1, wherein determining that the first communication device is within the defined proximity of the user device and is paired with the user device comprises receiving, from the user device, a device identifier associated with the first communication device. ### Claim 3 (depends on 2) The system of claim 2, wherein determining that the first communication device is within the defined proximity of the user device and is paired with the user device further comprises receiving, from the user device, an encrypted session identifier corresponding to the session identifier encrypted by the first communication device using a private key of the first communication device. ### Claim 4 (depends on 3) The system of claim 3, wherein the operations further comprise decrypting the encrypted session identifier using a public key associated with the device identifier. ### Claim 5 (depends on 1) The system of claim 1, wherein the session identifier is unique to an access session based on the authentication request. ### Claim 6 (depends on 1) The system of claim 1, wherein the operations further comprise selecting the account from a plurality of accounts based on an identity of the first and second communication devices. ### Claim 7 (depends on 1) The system of claim 1, wherein: the user device is a vehicle, a computing device, or a locking device; and the operations further comprise sending a command to unlock the user device. ### Claim 8 (depends on 1) The system of claim 1, wherein the first communication device includes a Bluetooth device. ### Claim 9 A method comprising: receiving an authentication request; sending, in response to receiving the authentication request, a session identifier to a user device; obtaining a first decrypted session identifier associated with a first communication device and a second decrypted session identifier associated with a second communication device; determining, by a processor, that the session identifier corresponds to each of the first decrypted session identifier and the second decrypted session identifier; in response to determining that the session identifier corresponds to the first decrypted session identifier and the second decrypted session identifier, determining, by the processor, that both the first communication device and the second communication device are within a defined proximity of a user device and are paired with the user device; and in response to the determining that both the first and second communication devices are within the defined proximity of the user device and paired with the user device, automatically authenticating, by the processor, access to the user device. ### Claim 10 (depends on 9) The method of claim 9, wherein determining that the first communication device is within the defined proximity of the user device and is paired with the user device comprises: receiving, from the user device, a device identifier associated with the first communication device; receiving, from the user device, an encrypted session identifier corresponding to the session identifier encrypted by the first communication device using a private key of the first communication device; and decrypting the encrypted session identifier using a public key associated with the device identifier. ### Claim 11 (depends on 9) The method of claim 9, wherein the session identifier is unique to an access session based on the authentication request. ### Claim 12 (depends on 9) The method of claim 9, further comprising: selecting an account from a plurality of accounts based on an identity of the first and second communication devices; and automatically authenticating access to the account. ### Claim 13 (depends on 9) The method of claim 9, wherein: the user device is a vehicle, a computing device, or a locking device; and the method further comprises sending a command to unlock the user device. ### Claim 14 A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising: receiving an authentication request; sending, in response to receiving the authentication request, a session identifier to a user device; obtaining a first decrypted session identifier associated with a first authentication device and a second decrypted session identifier associated with a second authentication device; determining, by a processor, that the session identifier corresponds to each of the first decrypted session identifier and the second decrypted session identifier; in response to determining that the session identifier corresponds to the first decrypted session identifier and the second decrypted session identifier, determining that both the first authentication device and the second authentication device are within a defined proximity of a user device and are paired with the user device; and in response to the determining that both the first and second authentication devices are within the defined proximity of the user device and paired with the user device, authenticating access to an account of a user automatically without entry of credentials of the account by the user or by either of the first or second authentication device. ### Claim 15 (depends on 14) The non-transitory machine-readable medium of claim 14, wherein determining that the first authentication device is within the defined proximity of the user device and is paired with the user device comprises: receiving, from the user device, a device identifier associated with the first authentication device; receiving, from the user device, an encrypted session identifier corresponding to the session identifier encrypted by the first authentication device using a private key of the first authentication device; and decrypting the encrypted session identifier using a public key associated with the device identifier. ### Claim 16 (depends on 14) The non-transitory machine-readable medium of claim 14, wherein the first and second authentication devices are selected from a plurality of authentication devices based on a respective signal strength between the user device and at least one of the first or second authentication device. ### Claim 17 (depends on 14) The non-transitory machine-readable medium of claim 14, wherein the operations further comprise selecting the account from a plurality of accounts based on an identity of the first and second authentication devices.