# US 12,008,096 B2 · Secure authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,008,096 B2 - Document ID: US12008096B2 - Status: Granted - Kind: B2 - Application number: 18/350,044 - Filed: 2023-07-11 - Published: 2023-11-02 - Granted: 2024-06-11 - Earliest claimed: 2021-07-07 - Assignees: Capital One Services, LLC - Applicants: Capital One Services, LLC - Inventors: Emily Smith; Erik Neighbour - Web page: https://patentgrep.com/patent/US12008096B2 ## CPC - G06F 21/35: communicating wirelessly - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0492: {by using a location-limited connection, e.g. near-field communication or limited proximity of entities} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0838: {using one-time-passwords} - H04L 63/102: {Entity profiles} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04W 12/033: of the user plane, e.g. user's traffic - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Methods and systems are disclosed herein for authenticating a user. A security device may use an object associated with a user and a device of the user to authenticate the user, for example, if the user has forgotten a password. A user may insert the object (e.g., a card, or other object) into the security device and may select an option to authenticate via a device that is trusted by both the security device and the user, rather than authenticating by entering a password at the security device. ## Claims ### Claim 1 A security device for authenticating users in physical proximity of the security device, the security device comprising: one or more processors and computer program instructions that, when executed by the one or more processors, cause operations comprising: detecting a user interaction with the security device, the user interaction corresponding to a profile associated with a user, the profile indicating one or more devices as potential devices for authenticating the user with the security device; generating for display, based on the user interaction, a presentation of the one or more devices indicated by the profile associated with the user; wirelessly broadcasting, based on a first device of the one or more devices being within a threshold distance of the security device, via a wireless personal area network (WPAN), a first access code to an environment surrounding the security device; sending, to a server system, an identification of the first device and a command that causes the server system to send a notification to the first device; and in response to receiving a second access code within a threshold amount of time after wirelessly broadcasting the first access code via the WPAN and determining that the first access code matches the second access code, granting access to information accessible via the security device. ### Claim 2 (depends on 1) The security device of claim 1, wherein the WPAN comprises two or more devices within the threshold distance of the security device. ### Claim 3 (depends on 1) The security device of claim 1, wherein wirelessly broadcasting the first access code comprises: encrypting the first access code prior to wirelessly broadcasting the first access code; generating a unique uniform resource locator (URL) associated with a decryption key for the first access code; and sending the URL with the command to the server system. ### Claim 4 A method comprising: determining a user interaction with a security device, the user interaction corresponding to a profile associated with a user, the profile indicating one or more devices as potential devices for authenticating the user with the security device; generating for display, based on the user interaction, a presentation of the one or more devices indicated by the profile associated with the user; wirelessly broadcasting, based on a first device of the one or more devices being within a threshold distance of the security device, a first access code to an environment surrounding the security device; sending, to a server system, an identification of the first device and a command that causes the server system to send a notification to the first device; receiving a second access code within a threshold amount of time via the first device after wirelessly broadcasting the first access code and determining that the first access code matches the second access code; and in response to receiving the second access code within the threshold amount of time after wirelessly broadcasting the first access code and determining that the first access code matches the second access code, granting access to information accessible via the security device. ### Claim 5 (depends on 4) The method of claim 4, wherein wirelessly broadcasting the first access code comprises: encrypting the first access code prior to wirelessly broadcasting the first access code; generating a unique uniform resource locator (URL) associated with a decryption key for the first access code; and sending the URL with the command to the server system. ### Claim 6 (depends on 4) The method of claim 4, wherein wirelessly broadcasting the first access code comprises: generating an encryption key and a decryption key; encrypting the first access code using the encryption key prior to outputting the first access code; sending the encrypted first access code to the first device; sending the decryption key to the server system; and receiving the second access code from the first device, wherein the first device receives the decryption key from the server system and decrypts the first access code using the decryption key. ### Claim 7 (depends on 4) The method of claim 4, further comprising: receiving information via near field communication protocol from the first device, wherein determining that the first device is within the threshold distance comprises determining, based on receiving information via near field communication protocol from the first device, that the first device is within the threshold distance of the security device. ### Claim 8 (depends on 4) The method of claim 4, wherein wirelessly broadcasting the first access code comprises switching from wirelessly broadcasting a prior access code to wirelessly broadcasting the first access code after wirelessly broadcasting the prior access code for a predetermined amount of time. ### Claim 9 (depends on 4) The method of claim 4, wherein granting access to information accessible via the security device comprises granting access to information accessible via the security device to the first device. ### Claim 10 (depends on 4) The method of claim 4, wherein granting access to information accessible via the security device comprises granting access to information accessible via the security device to at least one device associated with the user. ### Claim 11 (depends on 4) The method of claim 4, further comprising: receiving an indication that the first device is greater than the threshold distance from the security device after granting access to information accessible via the security device; and in response to determining that the first device is greater than the threshold distance from the security device, locking a user account associated with the profile. ### Claim 12 (depends on 4) The method of claim 4, wherein granting access to information accessible via the security device comprises: determining, based on receiving information from multiple devices via near field communication, that multiple users are present in the environment surrounding the security device; in response to determining that multiple users are present in the environment surrounding the security device, establishing a connection with the first device; causing, via the connection, a graphical user interface (GUI) associated with the security device to be presented on the first device; and receiving, by the security device and via the connection with the first device, information indicating user input at the GUI. ### Claim 13 One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause operations comprising: determining a user interaction with a security device, the user interaction corresponding to a profile associated with a user, the profile indicating one or more devices as potential devices for authenticating the user with the security device; generating for display, based on the user interaction, a presentation of the one or more devices indicated by the profile associated with the user; wirelessly broadcasting, based on a first device of the one or more devices being within a threshold distance of the security device, a first access code to an environment surrounding the security device; sending, to a server system, an identification of the first device and a command that causes the server system to send a notification to the first device; receiving a second access code within a time period related to wirelessly broadcasting the first access code and determining that the first access code matches the second access code; and in response to receiving the second access code within the time period related to wirelessly broadcasting the first access code and determining that the first access code matches the second access code, granting access to information accessible via the security device. ### Claim 14 (depends on 13) The one or more non-transitory computer-readable media of claim 13, wherein wirelessly broadcasting the first access code comprises: encrypting the first access code prior to wirelessly broadcasting the first access code; generating a unique uniform resource locator (URL) associated with a decryption key for the first access code; and sending the URL with the command to the server system. ### Claim 15 (depends on 13) The one or more non-transitory computer-readable media of claim 13, wherein wirelessly broadcasting the first access code comprises: generating an encryption key and a decryption key; encrypting the first access code using the encryption key prior to outputting the first access code; sending the encrypted first access code to the first device; sending the decryption key to the server system; and receiving the second access code from the first device, wherein the first device receives the decryption key from the server system and decrypts the first access code using the decryption key. ### Claim 16 (depends on 13) The one or more non-transitory computer-readable media of claim 13, the operations further comprising: receiving information via near field communication protocol from the first device, wherein determining that the first device is within the threshold distance comprises determining, based on receiving information via near field communication protocol from the first device, that the first device is within the threshold distance of the security device. ### Claim 17 (depends on 13) The one or more non-transitory computer-readable media of claim 13, wherein wirelessly broadcasting the first access code comprises switching from wirelessly broadcasting a prior access code to wirelessly broadcasting the first access code after wirelessly broadcasting the prior access code for a predetermined amount of time. ### Claim 18 (depends on 13) The one or more non-transitory computer-readable media of claim 13, wherein granting access to information accessible via the security device comprises granting access to information accessible via the security device to the first device. ### Claim 19 (depends on 13) The one or more non-transitory computer-readable media of claim 13, wherein granting access to information accessible via the security device comprises granting access to information accessible via the security device to at least one device associated with the user. ### Claim 20 (depends on 13) The one or more non-transitory computer-readable media of claim 13, the operations further comprising: receiving an indication that the first device is greater than the threshold distance from the security device after granting access to information accessible via the security device; and in response to determining that the first device is greater than the threshold distance from the security device, locking a user account associated with the profile.