# US 11,308,191 B2 · Short-distance network electronic authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,308,191 B2 - Document ID: US11308191B2 - Status: Granted - Kind: B2 - Application number: 16/995,249 - Filed: 2020-08-17 - Published: 2020-12-03 - Granted: 2022-04-19 - Earliest claimed: 2017-01-12 - Applicants: Oleksandr Senyuk; Habtamu Feyessa; Vladyslav Kozlovskyy; Petro Ladkin - Inventors: Oleksandr Senyuk; Habtamu Feyessa; Vladyslav Kozlovskyy; Petro Ladkin - Web page: https://patentgrep.com/patent/US11308191B2 ## CPC - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/35: communicating wirelessly - H04L 9/321: {involving a third party or a trusted authority} - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - H04L 63/0492: {by using a location-limited connection, e.g. near-field communication or limited proximity of entities} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/06: Authentication - H04W 12/062: Pre-authentication - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 2209/80: Wireless - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Methods of short-distance network electronic authentication are described. In one embodiment, a method includes storing encrypted authentication data for a user and a corresponding encryption key on a mobile device; establishing electronic communication between the mobile device and a computer via a short distance network; detecting a request for user-specific authentication data from a third-party application running on the computer; requesting, via an authentication client on the computer, authentication credentials from an authentication service running on the mobile device; accessing, via the authentication service, in response to the requesting step, the encrypted authentication data and encryption key; decrypting the authentication data using the encryption key via the authentication service; transmitting the decrypted authentication data to the authentication client on the client computer; passing the decrypted authentication data from the authentication client to the third-party application; and authenticating the user in the third-party application. ## Claims ### Claim 1 A mobile device, comprising: a processor unit; an authentication data storage communicatively coupled to the processor unit, wherein encrypted authentication data is stored, and wherein the encrypted authentication data includes user specified authentication data that is a unique password or a unique personal information number (PIN) associated with a client device; a memory communicatively coupled to the processor unit, wherein an authentication service is stored in the memory for execution by the processor system; a secret storage communicatively coupled to the processor unit, wherein an encryption key is securely stored in the secret storage, and wherein the encryption key is used to encrypt and decrypt the encrypted authentication data; and a communication device communicatively coupled to the processor unit, wherein the communication device communicatively couples the mobile device to a client device over a short distance network, wherein the client device receives a first request for user-specific authentication data from a third-party application running on the client device to use a web service that is performed by the client device, wherein the client device comprises a local proxy authorization service (LPAS) communicatively coupled to the computing unit, wherein the LPAS generates a second request via an authentication client running on the LPAS of the client device, wherein the mobile device receives the second request communicated from the client device that is generated via an authentication client running the LPAS on the client device, wherein the second request requests the user specified authentication data from the authentication service being executed by the processor system of the mobile device, wherein the authentication service accesses the encrypted authentication data from the authentication data storage in response to receiving the second request, wherein the authentication service accesses the encryption key stored from the secret storage in response to receiving the second request at the mobile device, wherein the authentication service decrypts the encrypted authentication data using the encryption key to access the user specified authentication data, wherein the mobile device communicates the user specified authentication data to the authentication client running on the client device, wherein the user specified authentication data is passed by the client device, via the authentication client, to the third-party application running on the client device, wherein the third-party application authenticates a user of the client device based on the received user specified authentication data, and wherein the web service is performed by the client device in response to the third-party application receiving the user specified authentication data. ### Claim 2 (depends on 1) The mobile device of claim 1, further comprising: an input device communicatively coupled to the processor system, wherein a user specification of the user specified authentication data is received at the input device, and wherein the received user specified authentication data is encrypted by the authentication service using the encryption key and is stored in the authentication data storage as the encrypted authentication data. ### Claim 3 (depends on 2) The mobile device of claim 2, wherein after decrypting the encrypted authentication data using the encryption key via the authentication service, the user is prompted to provide additional authorization via the input device of the mobile device, and wherein the user specified authentication data is transmitted from the mobile device to the authentication client running on the client device in response to receiving the additional authorization from the user. ### Claim 4 (depends on 3) The mobile device of claim 3, wherein the additional authorization comprises another PIN number. ### Claim 5 (depends on 3) The mobile device of claim 3, wherein the additional authorization comprises biometric identity verification. ### Claim 6 (depends on 1) The mobile device of claim 1, wherein the third-party application is a web browser. ### Claim 7 (depends on 1) The mobile device of claim 1, wherein the authentication client running on the client device is a JavaScript module. ### Claim 8 (depends on 1) The mobile device of claim 1, wherein the short distance network comprises a wireless personal area network. ### Claim 9 (depends on 1) The mobile device of claim 1, wherein the short distance network comprises a wireless local area network. ### Claim 10 (depends on 1) The mobile device of claim 1, wherein the short distance network comprises wired peer-to-peer connections. ### Claim 11 (depends on 1) The mobile device of claim 1, wherein the client device is a second mobile device. ### Claim 12 A system, comprising: a mobile device, comprising: a processor unit; an authentication data storage communicatively coupled to the processor unit, wherein encrypted authentication data is stored, and wherein the encrypted authentication data includes user specified authentication data that is a unique password or a unique personal information number (PIN) associated with a client device; a memory communicatively coupled to the processor unit, wherein an authentication service is stored in the memory for execution by the processor system; a secret storage communicatively coupled to the processor unit, wherein an encryption key is securely stored in the secret storage, and wherein the encryption key is associated with the encrypted authentication data; and a communication device communicatively coupled to the processor unit, wherein the communication device communicatively couples the mobile device to a client device over a short distance network; a client device, comprising: a computing unit; a network interface configured to communicate with the mobile device via the short distance network; a local proxy authorization service (LPAS) communicatively coupled to the computing unit; and a web browser connected to the internet and communicatively coupled to the computing unit, wherein the client device receives a first request for user-specific authentication data from a third-party application running on the web browser of the client device, wherein the first request is to use a web service that is performed by the client device, wherein the LPAS generates a second request via an authentication client running on the LPAS of the client device, wherein the client device communicates the second request to the mobile device via the short distance network, wherein the second request requests the user specified authentication data from the authentication service being executed by the processor system of the mobile device, wherein the authentication service accesses the encrypted authentication data from the authentication data storage in response to receiving the second request, wherein the authentication service accesses the encryption key stored from the secret storage in response to receiving the second request at the mobile device, wherein the authentication service decrypts the encrypted authentication data using the encryption key to access the user specified authentication data, wherein the mobile device communicates the user specified authentication data to the authentication client running on the client device, wherein the user specified authentication data is passed by the client device, via the authentication client, to the third-party application running on the client device, wherein the third-party application authenticates a user of the client device based on the received user specified authentication data, and wherein the web service is performed by the client device in response to the third-party application receiving the user specified authentication data. ### Claim 13 (depends on 12) The system of claim 12, wherein the mobile device further comprises: an input device communicatively coupled to the processor system, wherein a user specification of the user specified authentication data is received at the input device, and wherein the received user specified authentication data is encrypted by the authentication service using the encryption key and is stored in the authentication data storage as the encrypted authentication data. ### Claim 14 (depends on 13) The system of claim 13, wherein after decrypting the encrypted authentication data using the encryption key via the authentication service, the user is prompted to provide additional authorization via the input device of the mobile device, and wherein the user specified authentication data is transmitted from the mobile device to the authentication client running on the client device in response to receiving the additional authorization from the user. ### Claim 15 (depends on 14) The system of claim 14, wherein the additional authorization comprises another PIN number. ### Claim 16 (depends on 14) The system of claim 14, wherein the additional authorization comprises biometric identity verification. ### Claim 17 (depends on 12) The system of claim 12, wherein the authentication client is a JavaScript module. ### Claim 18 (depends on 12) The system of claim 12, wherein the client device detects new authentication data entered by the user in an authentication form of the web service, wherein the new authentication data is passed to the LPAS, wherein the client device transmits the new authentication data across the short distance network to the authentication service of the mobile device, wherein the authentication service encrypts the new authentication data via the encryption key, and wherein the authentication service stores the encrypted new authentication data in the authentication data storage of the mobile device. ### Claim 19 (depends on 12) The system of claim 12, wherein the short distance network comprises a wireless local area network. ### Claim 20 (depends on 12) The system of claim 12, wherein the short distance network comprises wired peer-to-peer connections.