# US 2012/0084846 A1 · Image-based key exchange > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2012/0084846 A1 - Document ID: US20120084846A1 - Status: Published application - Kind: A1 - Application number: 13/251,029 - Filed: 2011-09-30 - Published: 2012-04-05 - Earliest claimed: 2010-09-30 - Assignees: Google Inc. - Inventors: Stephen A. Weis; Travis E. McCoy; Andrew D. Hintz; Iain P. Wade - Web page: https://patentgrep.com/patent/US20120084846A1 ## CPC - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F 21/36: by graphic or iconic representation - H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract This disclosure is directed for improved techniques for configuring a device to generate a secondary password based at least in part on a secure authentication key. The techniques of this disclosure may, in some examples, provide for capturing, by a computing device, an image of a display of another computing device. The captured image includes at least one encoded graphical image, such as a barcode, that includes an indication of the content of a secure authentication key. The computing device may use the secure authentication key to generate a secondary password to be used in conjunction with a primary password to gain access to a password-protected web service. ## Claims ### Claim 1 A method of configuring a computing device to provide a secondary authentication password for a password-protected web service, the method comprising: capturing, using an image capture device communicatively coupled to a first computing device, an encoded graphical image presented by a display of a second computing device, wherein the encoded graphical image indicates a representation of a secure authentication key; determining, from the captured encoded graphical image, the secure authentication key; and storing the secure authentication key on the first computing device for subsequent use to generate a password to acquire access to a password-protected web service. ### Claim 2 (depends on 1) The method of claim 1, further comprising: using the stored secure authentication key to generate a password to be used to acquire access to the password-protected web service. ### Claim 3 (depends on 2) The method of claim 2, wherein using the stored secure authentication key to generate a password comprises using the stored secure authentication key to generate a secondary password to be used in conjunction with a primary password to acquire access to the password-protected web service. ### Claim 4 (depends on 1) The method of claim 1, wherein the encoded graphical image comprises a bar code or a hologram. ### Claim 5 (depends on 1) The method of claim 1, wherein the encoded graphical image further includes at least one indication of an identification of a user. ### Claim 6 (depends on 1) The method of claim 1, wherein the encoded graphical image includes at least one indication of a uniform resource locator (URL). ### Claim 7 (depends on 6) The method of claim 6, wherein the at least one indication of the URL comprises: a prefix field that indicates an operation to be performed by the first computing device; the representation of the secure authentication key; and additional information that indicates an intended use of the secure authentication key. ### Claim 8 (depends on 6) The method of claim 6, wherein the URL indicates a location where the secure authentication key can be accessed. ### Claim 9 (depends on 1) The method of claim 1, wherein the encoded graphical image further includes at least one indication of a length of a password generated based on the secure authentication key. ### Claim 10 (depends on 1) The method of claim 1, wherein the encoded graphical image further includes at least one indication of a type of algorithm to be used to generate a password based on the secure authentication key. ### Claim 11 (depends on 10) The method of claim 10, wherein the encoded graphical image further includes one or more indications of a type of hash to be used according to the algorithm. ### Claim 12 (depends on 10) The method of claim 10, wherein the type of algorithm is selected from the group consisting of: a Hash-based Message Authentication Code (HMAC)-based One Time Password (HOTP); and a Time-based One-time Password (TOTP). ### Claim 13 (depends on 12) The method of claim 12, wherein the type of algorithm is HOTP, and wherein the graphical image further comprises: one or more indications of a time for which a password generated based on the secure authentication key is to remain valid to grant a user access to a password-protected web service. ### Claim 14 A computing device, comprising: at least one processor; a camera module configured to operate an image capture device communicatively coupled to the computing device to capture at least one image of a display of another computing device, wherein the at least one captured image includes at least one encoded graphical image; means for processing the captured image to determine content of a secure authentication key represented by the encoded graphical image; and a storage module to store the secure authentication key on the computing device for subsequent use to generate a password to acquire access to a password-protected web service. ### Claim 15 (depends on 14) The computing device of claim 14, further comprising: means for generating, based on the stored authentication key, a secondary password for use in conjunction with a primary password to gain access to a password-protected web service. ### Claim 16 An article of manufacture comprising a computer-readable medium that stores instructions configured to cause a computing device to configure a mobile device to provide an authentication password for a password-protected web service, wherein the instructions cause the computing device to: capture, using an image capture device communicatively coupled to a first computing device, an encoded graphical image presented by a display of a second computing device, wherein the encoded graphical image indicates a representation of a secure authentication key; determine, from the detected encoded graphical image, the secure authentication key; store the secure authentication key on the first computing device; and use the stored secure authentication key to generate a secondary password to be used in conjunction with a primary password to acquire access to a password-protected web service. ### Claim 17 A method for providing a secondary password authentication for a password-protected web service, the method comprising: receiving, from a user, a request for a secure authentication key; generating an encoded graphical image that includes at least one indication of the secure authentication key; and transmitting, for display by a first computing device, a graphical image that indicates a representation of a secure authentication key, wherein the secure authentication key is configured to be stored on a second computing device and subsequently used by the second computing device to generate a password to be used to gain access to a password-protected web service. ### Claim 18 (depends on 17) The method of claim 17, wherein the secure authentication key is configured to be used by the second computing device to generate a secondary password to be used in conjunction with a primary password to gain access to the password-protected web service. ### Claim 19 (depends on 17) The method of claim 17, wherein the request for the secure authentication key is received by the password-protected web service. ### Claim 20 (depends on 17) The method of claim 17, wherein the request for the secure authentication key is received by a web service different than the password-protected web service. ### Claim 21 (depends on 17) The method of claim 17, further comprising: receiving, by the password-protected web service, the secondary password generated at the second computing device, wherein the secondary password is generated based at least in part on the secure authentication key; and granting access to the password-protected web service based at least in part on authentication of the secondary password.